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", 0x1000) [ 1888.376946][ T9577] udc-core: couldn't find an available UDC or it's busy [ 1888.383968][ T9577] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1888.401786][ T9577] udc-core: couldn't find an available UDC or it's busy [ 1888.408903][ T9577] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1888.433652][ C1] usb 3-1: ath: unknown panic pattern! [ 1888.483783][ T2674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1888.492872][ T2674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.501043][ T2674] usb 2-1: Product: syz [ 1888.505262][ T2674] usb 2-1: Manufacturer: syz [ 1888.509860][ T2674] usb 2-1: SerialNumber: syz [ 1888.514690][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1888.523803][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.531797][ T4970] usb 5-1: Product: syz [ 1888.536084][ T4970] usb 5-1: Manufacturer: syz [ 1888.540687][ T4970] usb 5-1: SerialNumber: syz [ 1888.584347][ T2674] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1888.693865][ T4453] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1888.713981][T22170] usb 6-1: config 24 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 12:24:45 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x18, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1888.804327][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1888.813435][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1888.821605][T22170] usb 6-1: SerialNumber: syz [ 1888.826646][ T4970] cdc_ncm 5-1:1.15: bind() failure [ 1888.834211][ T9577] udc-core: couldn't find an available UDC or it's busy [ 1888.841188][ T9577] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1888.853465][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1888.864235][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1888.871459][ T4970] usb 5-1: USB disconnect, device number 100 [ 1888.993836][ T4453] usb 4-1: too many configurations: 229, using maximum allowed: 8 [ 1889.064968][ T7347] usb 3-1: USB disconnect, device number 30 12:24:45 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1889.113647][ T4453] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1889.121792][ T4453] usb 4-1: can't read configurations, error -22 [ 1889.144052][T22170] cdc_ether: probe of 6-1:24.0 failed with error -71 [ 1889.157097][T22170] usb 6-1: USB disconnect, device number 118 [ 1889.166684][ T2674] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1889.243610][ T4970] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1889.273686][ T4453] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1889.367279][ T9621] udc-core: couldn't find an available UDC or it's busy [ 1889.374368][ T9621] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1889.523622][T22170] usb 6-1: new high-speed USB device number 119 using dummy_hcd 12:24:46 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1c50c1) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r2 = syz_open_dev$hidraw(&(0x7f0000001000), 0xc5e2, 0x420) write$hidraw(r2, &(0x7f0000001040), 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r3, &(0x7f0000000000)="03", 0xfd50) write$hidraw(r1, &(0x7f00000002c0)="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", 0xfffffc71) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r0, &(0x7f0000000000)="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", 0x1000) 12:24:46 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1c50c1) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r2 = syz_open_dev$hidraw(&(0x7f0000001000), 0xc5e2, 0x420) write$hidraw(r2, &(0x7f0000001040), 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r3, &(0x7f0000000000)="03", 0xfd50) write$hidraw(r1, &(0x7f00000002c0)="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", 0xfffffc71) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r0, &(0x7f0000000000)="b21c1455b337a7e4d26f4e1feccb578dc439a08f7bd57e336fe2c4305c452f70bd7891f9eeb3cb2e0422dedd282dec9f6e2a8903bd9bb4ac520f496acce249341d084aade06de87fe3f085e6ae8b386c527260130e3e159b17a642fc132c9e62e6fff7888e461064cf8e6b43d440960acadb5f064d84b5033c1a54302ba05794ddf6cc98d8dfe363c68a53cc1602ba3561421f321076c117fec0acbfd3fb80ff35e2e7c44261658022906438217c9a7ce003f936b3020b0605f64f9351dcabe693f4e4bb0d1d8a1fefe6301154cbaf75a1abfb8d24bd1d0409cb3c4b7e42f632a200862381b62be9a23749ce7c254b12f9456be8971c7ba9434547e279cdaa5e14445edcadaaf16d325a11acb0fbc3268e39395335ee9ea47039465cc55055809f641e6f5956360e8a1e763d3e84e13a3ae3ce82cdf19841f8b6295f0766b2064f96a3ac26d7a362039519123f9ea6931501d7f52b478b8cd630c46c85eb307e07b3e562c6beaaf0c2f23dbbf1d09485a966b4db56cd452a1fb884914f1b57ad2cba21c87ca3c4beff6f48c19637294b87e57eba3e3f68ad9639dbad182a10e107a5d3b2ccbb1efad08d41e245c1971e20af511ecd07351e03f3108a2e78bdaea39e0a6933fc8283ef25093f7e3b3155cde61c491445b700150b3dc7923d12fd6c61f09e0d014e3a189d610503f22be1349143ae05278fc1a45494226b13b43211867739e518c1f89db1fd1c33b1d6a45d81d5b869bc623879c6d2492f3282aacf84ad69be93789b2d6e09906aacf294e5b83054bfddb4e4e824334c8e48d01ed806dcdbe1f3f46dd61122dcd366725002f5e31bd18403a96bebdbd5c952e259b029568a2cd32c5efc244fb137dc79f5b8a843613844f219d386239901204151fe3b5fa38f22fc4a4dfe95adbe3bbbc6d8b5bddf63305016cd48d914a3e06c4753d2935e2827bf4c9e1c2089395097625467b9e2f1e25735a01289540ee3237d1e1837e064de6b05ad6f37e5cbc482878a02a458eee8ffbe9d435534dfd6d00e4c9a7ef529f7a97e8b69d854c94c73743f8c940115ce194dfbc45d340083f261c41b5585106aa8b151088cb69f059094360abc2a3bf01fc7efec454ff9de976998413ce2d6f3dc521ea9d82614dfa72355cb11d126db97816769b987d360de95956cdcb10beac6561b32f3b072da5aca6343ef73f75c9c38b31df49ba97ec4879561d190c5c3f135037d988cd18d797193ea7d8b79cb779c98428114028d5c1959d7189cb76e537c3849c4611ee25b7c35ccbd2d942763f400765d9d1371420b5c7b62e3b6069254ace75b18b3497381482ac7bea6b4b3957c6288a57469cf9f1639ca7fa09bd21928ddce7b25a369cde4d3f38eaea9098abd320086012272ae41accb21fcb2a7ff2de504ec6b082158f4cb55bd3491a440b86616f17fda2e7a1a133f61bc33c8e9db3ca6a2f698a21310153a238c4689aca56293ba2e5cb334334174f026bd730eecf82bc38b2a346550b58b51288df4f15e5b716a6327dc148546691ed37516b01fc86ebc7afe411226d81be1d99aab6aabaf555ec4260d6b50db7cd58cb8553aeab13a274d802221086a193a4d28fb6afcd5c6c8be533848f540533b1ef167a40ba1d3ebc1f42142d28a2cd77a6b523ca16b9653a9ee00338311a79e21899539052253310386c245003f963367b9b0fe4087bd256b96a324aa9eb5f392d212afb9cc14c082ee5e8848599a02c493b4a5a04b77cf9c66f46708447683b1aaf3568853dfbfc2bce84a64fe8b2e514cc8754807faa8ccd850742a872a7de4f3de425cd8ef4f42173c82e2d3f53043146969fc6590b5861a15c02b48f69e01f74b361bdc485e7fb0e43e37d79962d9267c1152422c0a9a5b3981ffcfaab448d20b7f5b36b03ab7d69b1ca019477fececc211747cfd6f3f6c60052e7c5d2b4c824cfd733766f46454bb43760d05b7c5ac7f45262f003306e5eabb63454df02e297a1914d4fcdba766778d1407117a16b672ce0ec428a74ba089b7aeae3b37c240c26e6e941b082d03b8647772859ffbbec14857f9befdafc70d57a6d1d05cf659efb47cd8138eb3e407360e27292ebe096faaf23ae1164dde07b86060f652701710ecef65ac95b1f7e22934c5710baa149ef4cde6f0f33105c745c5c7e24235e4a0755da31fadf14059989ff146d13198885ba5e57e64b912b653bcac5296cb162e9147cae0b558efe7f9941fd7a4480a8208691c634981f15f25ea02f995158025aaf6562e9813bbb32d4d558cde46ed12c4e571282f15e551b52fdf7a04b3b5d69d4e1b1ff307e280701b689fea71d52ef15f06f294511788ee84ebfd2b7539bb6c3d51f38c5e3b4b3a71ef97767d221bd975853e5f02837afcd47e25e5ef2d6692967d81a2a68db2b08fca9015d26eaa6d1ec3f3e02e3b6f093ff348115850f8acf992210b7dd2e916c1c00c1d85f1c3eb8a43a0d1e1eb2dfd766263471f25ad7a4cc625a30b6f21da428c3770bdc353b15885b85684b22b653bdc639294404ea3162017f379f34ac7845cfa49fce5e3e0fc1ac98b439564043654e5d8a344474128baa60052189affac57af162a80bccfdcbe997d1c4c57ef3d0ba2884e3c610a5c48dc25066a3cc42475304ae1def66db1f1fefb706330deb577d270d225306f9cd5c16a4651673389250fbd181c1ed202ded0a50d1da2abb91207a1e2bd0c4acda76471453555bfc61e4ed652f14b0dae6a5c8de897bc4a091ba4df4889a2760f25c0f6369ea01b151bfd12d1b13eda0e94ecc10f0693e12cedf6dd981e6c1da584b85734ea7ee61645ab0ebdd7951edbfac627f1678d4c5c0eb03b46ff0bd8bf861f48385978410488dc7afd92f4bc3f746d71439426d0887ec4fab18031c146748ee65a3d17a2d8c07b5e505688a69dd51dc6bb864af09954b9f1a2eb9a60b910a87c6f4bcb732c5f82a4e213ef3a7c0ad0f3df5ad0fa5fa3a9202d3a6cab3489544b75fe768bb5af164d9dec302ef14c3b0d2aceaf018b06b7662f82535311d19ef03ccafbcfcffc4804085a80d6541b397a7cfda423e0dbbcdbd447ad669de3942995f51737cb91b64fac64c5756731f1e663a55a3fc2bfb36357779b4264dc0270499cc509a095faeacd5b4d88e83855d5db8754d0fb901fb1c8a84f8cf62e87f4a38f77ae49ccd768b2c70fcb249718096fbdd803d1147021477944d370cf8624623ca2fe3bf3852e5e62d8805efee521ccb2554cbf296dcba764248b39c11613fef645b59a199497685cee4f853a54bc21c946569620d2d3af48028239bee09a99a49d0bb0a6723ee366d624a35ae18a679d4842d58fa7a2ca908d3b00a2addc6200341387971467e381ebc531ecdfd9fda063b1681842ab8dec90474e0840b4007496345e8650b44c13634f6eda5ce285a1ce3224b4d5ec48509ca990fa1c8c9217fc517b90f2e65b90168a253761b076ede455426e19058b0d6f21be4356f7509f697fb5f20a95414ee44d3362d873d47a7a7b817206cd0ffdcaea5da9a39b2743bbddf50b4e38cde77b526bc7d39512463b30c0506dba25bf11dd7389095e3ec57d9f2120ebc3129386f23dcd5d6fbc1f87ab1adfd3cdb800d8e8a51ff41cc06cce6b68bd3c3f7de63f331f2682261991d771a390f62cb5d57a94d33d9189a79fb05c9c412e90ab4567de7dffe5d10226f0f91a60e1b83eee3f96aac2a21ae3e0de4ccab109a535be4ccdb06e13f07089d0bd924b91c6e714423239bfd2391614433c72e377920116932d1c6ccffb3b4a652f891777f39fe6731d5f1657cc2e5114fa92a659b7ff388b19b361eefbe662115cf524b01f21c83b4a137982d6afec789a0459bcb7f1bb3b606efa5081c500a1f5866d593a1794a2f61ed253143dd04a4a78ca760f2790d31f0696231f99cc679bb8b2e6227f7b4d183600f0698b297e07c177a0191eea35790e656f6d0399053f5fd583433aaed5eacf403da70b8129274115caa0280588c021faf4d0a3143cc9fc886e04e8cd733561a71b26b59040213e7bf8a9f3c5a19e2bec4601477fa382710d627609ef18d8ae0324480ea4252ced9f8e3f1b176f9e9590e46ecd382c9e76387cb0095a49858ec78112e6b53f6bd726e2fa22d664c86c8d7cf4035c6bd95c44b727db0498ccecfd06689fd95615d6fb565b5a760a177741a1be697693ea89394923488d748bbb603d51fc1a7699f30a8b93a10c8d6d37f2528077139ee1b346044aa382038a69aeae50f65b34ff7bd721a54d7be410d17bb5d9b60c026eff4db6bf5fc43a641a2222b537961ee22baa9941b29605724f97b16656707ec075db7c2b278e0cf3bc655dc00c6d18bb32696ac5911ffc084da7b3122185fdaa9947e2da9ef3f0e66ac4961c135ef132d44ac03ceb631fdefc353d2d6df0c10171ab351d6905a31427354a85c7c41fc5a25cd075098fe255a50b73e067954f400cc06d4640f4ff15bd8aaca4db9ba4955cb278fa96488e68ac10ed9ba4be27e2fbcd5398cf9c6a3705fe172494b3b9081b8bd4636c43e315cbd2cf088f90d27076b7b494499a0db5d9195b849f48c35e9b93df7fe1945a24f9cf51addbcdd808e484d073a8e43fc62d0a2b6995ba4f10c42ad9066036b01ff639a9ea9a5c8bbd17f3cbc18bc09844272848e32aca0694155805b6f7eadeedc5081e091849f21406dccaba0aeee019ecd16e6052cf0a831a32926ee763ef7aed0ce722c0ae629f288ba3825a34151adaa1bcf1e26bd0757410560a6b7212f77c8de430e87afaaae4bb6d40b8387b56dfec9ec856ebf7837812c554089e7eb27a97a24e1ecc047e9a269f0a24de7ab195e3b27e6291bc9155d760964cc8b52010b25a4fb81765a01dcbb760c70a7ef00fc737a22be5df665df477465e703b96244cff5ea437362a157d02dd52841b9119f01addadb5bdc01004f7cfabb838a245be8828bdcce739961844e9d92a1ae8eb7be238631a38af2fc77ff2490cacab54aafe2ec50094ac557c52b50af9039c1cfda249c3f17161b86d4e253796d70f86c8e7b15abeb490ce5e7b4d436c769a4e025a1b248ee2e51e916f6bc7975c180c3e52e573f1b0bdca1e7c36f0eaed59299c5dde7ef5aede764a31f1fd3f44e6968f7a72fde5d9cfc32bd0b6cfa5d62c199f421bc6075c26557efd1fd6beabcaee9052f438d5ac6d5ef43dede215913a18d757afbb378737e804eb312a20e7c75949f5d3045f3b56d838b2fe893dae1fe5a6ce6eaeaa493aebdd07a2c3e7e87a254df4a493ede651119312e04c018563cb6fd1c623c3fcd887e5f30b6d35dac09c8dd08272fdf5ca807e4b37c3abcef52df16363c4616144eb0e12db316893c6f9d91686f78bfd337d825f4e8fb444b2a96bce92e27e08af382adfbef8ee0fcf6eeb0632da9662e7196c0298bf444bb129e24c86fa1d1c5024aedd5ce29e906f69a0b035e8fc97c66aee04184f065e8a2238a7e7a0c30275e8a325dc6ca00ae492d387f83a0ab2c6d1420bbdb196836b0fde73a53d047aee27c9e2c8a1ad939b3538a95b64b91b63022038070eb7d7979c5cf1a5c34259c69ff0622550d2907f47fffa185d1ed7b0c28c8746653f3bc168153ad83fd4d5b0672f421d719c342bacc9d7b7e8a8542ef5581ec0db3e3dc867c4154b908b705e63d7e71b7fcab3fffa6dbef093274296fe26f017eae7e670a44f0c33132f8e4ba2e115970078cbdea788411c7b29027e0fa26edae5b058a28d307c426bd6f15b28f5c9bdbfcb4a69fea9ca72ca18a91e", 0x1000) [ 1889.563795][ T4453] usb 4-1: too many configurations: 229, using maximum allowed: 8 [ 1889.568938][ T9765] udc-core: couldn't find an available UDC or it's busy [ 1889.578748][ T9765] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1889.613813][ T7361] usb 2-1: USB disconnect, device number 55 [ 1889.643940][ T4970] usb 5-1: config 1 has an invalid interface number: 24 but max is 1 [ 1889.652081][ T4970] usb 5-1: config 1 has no interface number 0 [ 1889.674071][ T4970] usb 5-1: config 1 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.713785][ T4453] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1889.721756][ T4453] usb 4-1: can't read configurations, error -22 [ 1889.739426][ T4453] usb usb4-port1: attempt power cycle [ 1889.853776][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1889.862957][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.871092][ T4970] usb 5-1: Product: syz [ 1889.875340][ T4970] usb 5-1: Manufacturer: syz [ 1889.879938][ T4970] usb 5-1: SerialNumber: syz [ 1889.913722][ T32] usb 3-1: Service connection timeout for: 259 [ 1889.919921][ T32] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1889.928095][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1889.950462][ T32] ath9k_htc: Failed to initialize the device [ 1889.956541][ T7347] usb 3-1: ath9k_htc: USB layer deinitialized [ 1890.033856][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1890.042940][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1890.051071][T22170] usb 6-1: SerialNumber: syz 12:24:46 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b1f"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:24:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xcf, "ed105400000000003ec13e2000"}) syz_usb_connect$uac1(0x0, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902650003010000000904000000010100000a24010000000201020624040200bf09040180000102000009040101010102000009050109000000000007250100000000090402000001020000091e020001010200000905820900020000000725010000000071ec46ce4a849dc3e9df6045b0ed6609a0f9723ce889d1b3d7b31e91c87da1794680c6a8eb22bcb180da7bc1b545b634146ceb4cfc946488fcdac44f213933c26d2a3aec5fa1c4eca97e6bc194b24ca5b193b42c6d2aab6fd94beff74449ca658f88d2395962ade3b09b3593eccda91ddd"], 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/226) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x12, 0x0, 0x0}) 12:24:46 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x1d, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1890.200582][ T4453] usb 4-1: new high-speed USB device number 49 using dummy_hcd 12:24:46 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1890.253712][ T4970] cdc_ncm 5-1:1.24: bind() failure [ 1890.262466][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1890.269571][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1890.281662][ T4970] usb 5-1: USB disconnect, device number 101 [ 1890.333792][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1890.343118][T22170] usb 6-1: USB disconnect, device number 119 [ 1890.349578][ T4453] usb 4-1: too many configurations: 229, using maximum allowed: 8 [ 1890.473591][ T7347] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1890.484181][ T2674] usb 2-1: Service connection timeout for: 256 [ 1890.490361][ T2674] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1890.498310][ T4453] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1890.506282][ T4453] usb 4-1: can't read configurations, error -22 [ 1890.512949][ T2674] ath9k_htc: Failed to initialize the device [ 1890.519181][ T7361] usb 2-1: ath9k_htc: USB layer deinitialized 12:24:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x57, 0x69, 0x33, 0x10, 0xc72, 0x13, 0xb40d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0xa0, 0x41}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x56, 0x0, 0x4, [{0x5b, &(0x7f0000000440)=ANY=[@ANYBLOB="5b03"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x740, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x50, 0x40, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xfffc, 0x4, 0x1, {0x22, 0x57e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xa8, 0x6}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x19, 0x85, 0x4, 0x8, 0x5}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x6, [{0x9a, &(0x7f0000000180)=@string={0x9a, 0x3, "29003b6fd6101940cc125c6580b510779f01715ccfea26b1e286c9c77540df3dfc518749150ff8f05c935ca43e293a859cb3d78ecfbff81144586776700d82f71758db82157c506b0154646417f7646643667bc433840e24e9fb392738e2484ddffcb9974322e33ec335745108e5ff958aeb15e743a55238f33f7f9b105e7e47653403c08bad9491c444262d0c364ab540ffbb16c61e86e2"}}, {0x7e, &(0x7f0000000240)=@string={0x7e, 0x3, "5795779f76b60c885b85a02a5dd9656f54dd7e4bffdef797251875f901c6b93eb0082e55a1f957c046426a180c2e04d9ddb3a61180119d160c313bde3cc65cba307a0787b5a9bc068b07c2687a077c2942c758e1eeb8a75e77e2371f00e4822cfd4b32aba30e3184aec51c3614c9cb92df9c5afd1c737702af5f5e75"}}, {0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e03569600b628c3ce6ba275f63b8f3198f1f6043e69b4ef7aad4dadd100306df45f17d7bcfc1db86a3f8318588486c8a2aa89df8939069ffce71f326e77d866f509599e7af8f4381095757bcef6f9979ac0261a96b0331f1e23dca2935b02def93c47318c0adcae915f3b50"]}, {0xcf, &(0x7f0000000340)=@string={0xcf, 0x3, "d22743fa91dfe726426b728eebbc413527a0c284a227785f982894e214e4e781ea32dce46e2a51a2b728dcf0cf10abc2f54e20e1a74fbdbc5a5a245ead8109426a18caa6d5e4c37d4926556d42c671fd063a1b56826ca938e3bd48afcf642ff6647385a2080657557801c07c35c0f1be3b19f4458f1005332c8116c286344708ec689e9a0f23e945d2bbe98df6cac1d3a4b8aeae44b973bb4d50853dc243a58f88af259a9970c4c1f75ed161e472bcd3524ecd2df1972f786d5a9260ebe24656623f9156989e25df50a4388a17"}}, {0x8e, &(0x7f0000000500)=@string={0x8e, 0x3, "0312819af8c90519fb6267d442e617dad851d943c42bdb7a01d80ab65a0bf24a1ee4d63613870cc67bc26106dc18f7b5b6880b06299e4f351508f43af3aa7f2a02c60f0d2f532797cfd7a6e221a7788d1c86b726369d499361bc1bf72c3561e7ec7428900d9065ec9d2ef8b410414ce16308244da1f5b099dac06e0cff51a79e1b8a31837855418e4c827979"}}, {0xa2, &(0x7f00000005c0)=@string={0xa2, 0x3, "321da1f38bb0e452556726f9a696da29922a648bf77fd5db26eb8a9d6f0a3bf8ebdcb4287a2c2e47d001363d755e8d62f65a5566535edeeaed66d47e67e524ca4bc551eaaf9a8916e2f7f3bead163e59e2a12578872a72654d8a263915b44107758b697967976d3f158ce82e7802064ec3da46644116656d041df601f9becafa7b1431f9573f1f7613918f2abe6cac655ee770faecefaae5a34d01f2ea3d8a3c"}}]}) syz_usb_connect$cdc_ecm(0x3, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x3c, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x2, 0x6, 0x0, 0x20, {{0xa, 0x24, 0x6, 0x0, 0x0, "70fd564ae7"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x8, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x2, 0xf7, 0xfff, 0xff}, @dmm={0x7, 0x24, 0x14, 0x0, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x1, 0x82}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x68, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0xc1, 0x9, 0x9, 0x40, 0xe0}, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2009}}]}) [ 1890.663581][ T4970] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1890.671349][ T4453] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1890.713579][ T7347] usb 3-1: Using ep0 maxpacket: 32 [ 1890.723602][T22170] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1890.833881][ T7347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.844029][ T7347] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1890.853079][ T7347] usb 3-1: config 1 has no interface number 1 [ 1890.859562][ T7347] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 191, using maximum allowed: 30 [ 1890.863647][ T4453] usb 4-1: too many configurations: 229, using maximum allowed: 8 [ 1890.870647][ T7347] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 191 [ 1890.891365][ T7361] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1890.993617][ T8666] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1891.014188][ T4453] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 1891.022135][ T4453] usb 4-1: can't read configurations, error -22 [ 1891.028841][ T4453] usb usb4-port1: unable to enumerate USB device [ 1891.053799][ T4970] usb 5-1: config 1 has an invalid interface number: 29 but max is 1 [ 1891.061924][ T4970] usb 5-1: config 1 has no interface number 0 [ 1891.068825][ T4970] usb 5-1: config 1 interface 29 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.073784][ T7347] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1891.088857][ T7347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.096891][ T7347] usb 3-1: Product: syz [ 1891.101039][ T7347] usb 3-1: Manufacturer: syz [ 1891.105651][ T7347] usb 3-1: SerialNumber: syz [ 1891.113826][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1891.203921][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1891.212975][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1891.221001][T22170] usb 6-1: SerialNumber: syz [ 1891.223773][ T7361] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1891.243987][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1891.253096][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.261234][ T4970] usb 5-1: Product: syz [ 1891.265439][ T4970] usb 5-1: Manufacturer: syz [ 1891.270026][ T4970] usb 5-1: SerialNumber: syz [ 1891.273718][ T8666] usb 1-1: Using ep0 maxpacket: 16 12:24:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x178, &(0x7f0000000640)=ANY=[@ANYBLOB="9500004e35d4fdcbf22e8ca654c3e85c9f8d02dc1aea8787b53f90bc326f5f821132d54bcd70f78540e357edf13b9eadf2a3882069e71b010077150865aa403a12226b504941e6bf2cb57e4e3d711a464990ea6f8c3cd2f2169c961e412648aa1950e4e1ba9d932e0f0488dba60e9cfae7031a597e7e831c701045f0e8a054d40a6d4fd053b19c9a2a1cfea2f10000009900004e42433f48d974a588755117409e15e68729124d15fa654fa4ae3a2156d6f2d6632fc96336711cfaffffffffffffff51061e3c64829c23328b040044a374b4579ccdabfca843dc2f65198d52bbffb7ff897570ffc3c7729bfc5242c749859f19a046b12322f7399a02ac4bc4e009339897b4fd91a0084127e723756df7f80c9c1e25f003526198117b62778028085a3dc79dea51d4345d7957630596fcff6737ff8024c2931c9fa4f90531cacaceb2569f2432d448e66c5e1fff30d9a10ced453d29071b2a42b464807f3ec204ae44939a4d270125c23467a8832e14e2b9933d2f47a2fbab9f6b07f462440dca6a7ea83baaa9c259c2caaf583382a2f46ceac89f9d024a04f6997f121ae99446e841db7090e0781a1f1e50b570ae4e86b44c7e8512057b91241a06cb5d89f8da28"]) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000100)=[0x8]) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000300)={0x8, 0x1b, 0x6, 0x0, "7911e2ebdf04f342add8bf160f229fe8ade944c5a3bd9ea1701096b1c6d96afe"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, "6f946f0f86357b45a2d7fc23ef6596447a453e33567f7faa8d67e20f2ab14276"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8d, &(0x7f0000000840)=ANY=[@ANYRESHEX]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000600)=[0xffff]) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x7) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:24:48 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1891.474029][ T7347] hub 3-1:1.2: bad descriptor, ignoring hub [ 1891.479966][ T7347] hub: probe of 3-1:1.2 failed with error -5 12:24:48 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1891.534523][ T7347] usb 3-1: USB disconnect, device number 31 [ 1891.573737][ T4970] cdc_ncm 5-1:1.29: bind() failure [ 1891.579045][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1891.598363][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1891.605358][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1891.623221][T22170] usb 6-1: USB disconnect, device number 120 [ 1891.645490][ T4970] usb 5-1: USB disconnect, device number 102 [ 1891.913642][T31041] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1891.993577][T22170] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1892.013747][ T4970] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1892.063741][ T8666] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b4.0d [ 1892.072899][ T8666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.082850][ T8666] usb 1-1: config 0 descriptor?? [ 1892.134014][ T4453] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1892.154440][ T7361] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1892.163611][ T7361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.171611][ T7361] usb 2-1: Product: syz [ 1892.175909][ T7361] usb 2-1: Manufacturer: syz [ 1892.180509][ T7361] usb 2-1: SerialNumber: syz [ 1892.244176][ T7361] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1892.324981][ T9833] udc-core: couldn't find an available UDC or it's busy [ 1892.331921][ T9833] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1892.340836][ T9833] udc-core: couldn't find an available UDC or it's busy [ 1892.347858][ T9833] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1892.363682][ T8666] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1892.372082][ T8666] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 1892.373788][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1892.393611][ T4453] usb 3-1: Using ep0 maxpacket: 32 [ 1892.413992][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1892.434518][ T8666] peak_usb: probe of 1-1:0.0 failed with error -71 [ 1892.443166][ T8666] usb 1-1: USB disconnect, device number 92 [ 1892.473962][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1892.483045][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1892.491192][T22170] usb 6-1: SerialNumber: syz [ 1892.494508][T31041] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1892.505000][T31041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.513030][T31041] usb 4-1: Product: syz [ 1892.517228][T31041] usb 4-1: Manufacturer: syz [ 1892.522088][T31041] usb 4-1: SerialNumber: syz [ 1892.524326][ T4453] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.536914][ T4453] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1892.545939][ T4453] usb 3-1: config 1 has no interface number 1 [ 1892.570802][ T4453] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 191, using maximum allowed: 30 [ 1892.585132][T31041] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1892.593400][ T4453] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 191 [ 1892.633846][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1892.643011][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.651091][ T4970] usb 5-1: Product: syz [ 1892.655330][ T4970] usb 5-1: Manufacturer: syz [ 1892.659923][ T4970] usb 5-1: SerialNumber: syz 12:24:49 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1892.793703][ T4453] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1892.803111][ T4453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.811167][ T4453] usb 3-1: Product: syz [ 1892.815391][ T4453] usb 3-1: Manufacturer: syz [ 1892.819992][ T4453] usb 3-1: SerialNumber: syz [ 1892.844097][ T7361] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1892.875882][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 12:24:49 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x2, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1892.895588][T22170] usb 6-1: USB disconnect, device number 121 [ 1892.943835][ T4970] cdc_ncm 5-1:1.0: bind() failure [ 1892.954269][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1892.961167][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1892.969273][ T4970] usb 5-1: USB disconnect, device number 103 12:24:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xcf, "ed105400000000003ec13e2000"}) syz_usb_connect$uac1(0x0, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902650003010000000904000000010100000a24010000000201020624040200bf09040180000102000009040101010102000009050109000000000007250100000000090402000001020000091e020001010200000905820900020000000725010000000071ec46ce4a849dc3e9df6045b0ed6609a0f9723ce889d1b3d7b31e91c87da1794680c6a8eb22bcb180da7bc1b545b634146ceb4cfc946488fcdac44f213933c26d2a3aec5fa1c4eca97e6bc194b24ca5b193b42c6d2aab6fd94beff74449ca658f88d2395962ade3b09b3593eccda91ddd"], 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/226) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x12, 0x0, 0x0}) [ 1893.046850][ T9794] udc-core: couldn't find an available UDC or it's busy [ 1893.053901][ T9794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1893.143594][ T2674] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1893.163640][T31041] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1893.194244][ T4453] hub 3-1:1.2: bad descriptor, ignoring hub [ 1893.200190][ T4453] hub: probe of 3-1:1.2 failed with error -5 [ 1893.283581][T22170] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1893.301440][ T8666] usb 2-1: USB disconnect, device number 56 [ 1893.363659][ T4970] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1893.367976][ T9851] udc-core: couldn't find an available UDC or it's busy [ 1893.378336][ T9851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1893.387096][ T9851] udc-core: couldn't find an available UDC or it's busy [ 1893.394090][ T9851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1893.402114][ T9851] udc-core: couldn't find an available UDC or it's busy [ 1893.409149][ T9851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1893.423641][ T2674] usb 1-1: Using ep0 maxpacket: 16 [ 1893.433676][ T4453] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 1893.627444][ T7347] usb 4-1: USB disconnect, device number 51 [ 1893.663761][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1893.677613][ T4453] usb 3-1: Using ep0 maxpacket: 32 [ 1893.723723][ T4970] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.734959][ T4970] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1893.753954][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1893.763023][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 12:24:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x57, 0x69, 0x33, 0x10, 0xc72, 0x13, 0xb40d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0xa0, 0x41}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x56, 0x0, 0x4, [{0x5b, &(0x7f0000000440)=ANY=[@ANYBLOB="5b03"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x740, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x50, 0x40, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xfffc, 0x4, 0x1, {0x22, 0x57e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xa8, 0x6}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x19, 0x85, 0x4, 0x8, 0x5}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x6, [{0x9a, &(0x7f0000000180)=@string={0x9a, 0x3, "29003b6fd6101940cc125c6580b510779f01715ccfea26b1e286c9c77540df3dfc518749150ff8f05c935ca43e293a859cb3d78ecfbff81144586776700d82f71758db82157c506b0154646417f7646643667bc433840e24e9fb392738e2484ddffcb9974322e33ec335745108e5ff958aeb15e743a55238f33f7f9b105e7e47653403c08bad9491c444262d0c364ab540ffbb16c61e86e2"}}, {0x7e, &(0x7f0000000240)=@string={0x7e, 0x3, "5795779f76b60c885b85a02a5dd9656f54dd7e4bffdef797251875f901c6b93eb0082e55a1f957c046426a180c2e04d9ddb3a61180119d160c313bde3cc65cba307a0787b5a9bc068b07c2687a077c2942c758e1eeb8a75e77e2371f00e4822cfd4b32aba30e3184aec51c3614c9cb92df9c5afd1c737702af5f5e75"}}, {0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e03569600b628c3ce6ba275f63b8f3198f1f6043e69b4ef7aad4dadd100306df45f17d7bcfc1db86a3f8318588486c8a2aa89df8939069ffce71f326e77d866f509599e7af8f4381095757bcef6f9979ac0261a96b0331f1e23dca2935b02def93c47318c0adcae915f3b50"]}, {0xcf, &(0x7f0000000340)=@string={0xcf, 0x3, "d22743fa91dfe726426b728eebbc413527a0c284a227785f982894e214e4e781ea32dce46e2a51a2b728dcf0cf10abc2f54e20e1a74fbdbc5a5a245ead8109426a18caa6d5e4c37d4926556d42c671fd063a1b56826ca938e3bd48afcf642ff6647385a2080657557801c07c35c0f1be3b19f4458f1005332c8116c286344708ec689e9a0f23e945d2bbe98df6cac1d3a4b8aeae44b973bb4d50853dc243a58f88af259a9970c4c1f75ed161e472bcd3524ecd2df1972f786d5a9260ebe24656623f9156989e25df50a4388a17"}}, {0x8e, &(0x7f0000000500)=@string={0x8e, 0x3, "0312819af8c90519fb6267d442e617dad851d943c42bdb7a01d80ab65a0bf24a1ee4d63613870cc67bc26106dc18f7b5b6880b06299e4f351508f43af3aa7f2a02c60f0d2f532797cfd7a6e221a7788d1c86b726369d499361bc1bf72c3561e7ec7428900d9065ec9d2ef8b410414ce16308244da1f5b099dac06e0cff51a79e1b8a31837855418e4c827979"}}, {0xa2, &(0x7f00000005c0)=@string={0xa2, 0x3, "321da1f38bb0e452556726f9a696da29922a648bf77fd5db26eb8a9d6f0a3bf8ebdcb4287a2c2e47d001363d755e8d62f65a5566535edeeaed66d47e67e524ca4bc551eaaf9a8916e2f7f3bead163e59e2a12578872a72654d8a263915b44107758b697967976d3f158ce82e7802064ec3da46644116656d041df601f9becafa7b1431f9573f1f7613918f2abe6cac655ee770faecefaae5a34d01f2ea3d8a3c"}}]}) syz_usb_connect$cdc_ecm(0x3, 0x6e, &(0x7f00000008c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x3c, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x2, 0x6, 0x0, 0x20, {{0xa, 0x24, 0x6, 0x0, 0x0, "70fd564ae7"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x8, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x2, 0xf7, 0xfff, 0xff}, @dmm={0x7, 0x24, 0x14, 0x0, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x1, 0x82}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x68, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0xc1, 0x9, 0x9, 0x40, 0xe0}, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2009}}]}) [ 1893.771079][T22170] usb 6-1: SerialNumber: syz 12:24:50 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b1f"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1893.863689][ T2674] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b4.0d [ 1893.872815][ T2674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.883278][ T2674] usb 1-1: config 0 descriptor?? [ 1893.903671][ T2674] usb 1-1: can't set config #0, error -71 [ 1893.916843][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1893.925910][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.933953][ T4970] usb 5-1: Product: syz [ 1893.938099][ T4970] usb 5-1: Manufacturer: syz [ 1893.942695][ T4970] usb 5-1: SerialNumber: syz [ 1893.947670][ T2674] usb 1-1: USB disconnect, device number 93 [ 1893.996465][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1894.003282][ T4970] cdc_ncm 5-1:1.1: bind() failure 12:24:50 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1894.103751][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1894.113312][T22170] usb 6-1: USB disconnect, device number 122 [ 1894.135226][T10019] udc-core: couldn't find an available UDC or it's busy [ 1894.142199][T10019] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:24:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x178, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000100)=[0x8]) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000300)={0x8, 0x1b, 0x6, 0x0, "7911e2ebdf04f342add8bf160f229fe8ade944c5a3bd9ea1701096b1c6d96afe"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, "6f946f0f86357b45a2d7fc23ef6596447a453e33567f7faa8d67e20f2ab14276"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8d, &(0x7f0000000840)=ANY=[@ANYRESHEX]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000600)=[0xffff]) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x7) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1894.163678][ T7361] usb 2-1: Service connection timeout for: 256 [ 1894.169890][ T7361] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1894.183408][ T7361] ath9k_htc: Failed to initialize the device [ 1894.189680][ T8666] usb 2-1: ath9k_htc: USB layer deinitialized [ 1894.206416][ T2661] usb 3-1: USB disconnect, device number 32 12:24:50 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x3, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1894.209088][ T4970] usb 5-1: USB disconnect, device number 104 [ 1894.243982][T31041] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1894.250924][T31041] ath9k_htc: Failed to initialize the device [ 1894.273079][ T7347] usb 4-1: ath9k_htc: USB layer deinitialized [ 1894.303677][ T2674] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1894.473638][T22170] usb 6-1: new high-speed USB device number 123 using dummy_hcd 12:24:51 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1894.553604][ T2674] usb 1-1: Using ep0 maxpacket: 16 [ 1894.553632][ T8666] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1894.653724][ T4970] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1894.663727][ T7347] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1894.843777][ T8666] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1894.843822][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1894.864884][ T4453] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1894.943912][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1894.953063][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1894.961260][T22170] usb 6-1: SerialNumber: syz [ 1895.063784][ T4970] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.074856][ T4970] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1895.213818][ T7347] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1895.223030][ T7347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.231253][ T7347] usb 4-1: Product: syz [ 1895.235512][ T7347] usb 4-1: Manufacturer: syz [ 1895.240114][ T7347] usb 4-1: SerialNumber: syz [ 1895.243706][ T4453] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 12:24:51 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1895.259985][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1895.269200][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.277330][ T4970] usb 5-1: Product: syz [ 1895.281774][ T4970] usb 5-1: Manufacturer: syz [ 1895.286496][ T4970] usb 5-1: SerialNumber: syz [ 1895.294524][ T7347] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1895.314026][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1895.326886][T22170] usb 6-1: USB disconnect, device number 123 [ 1895.337396][ T2674] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b4.0d [ 1895.346600][ T2674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.357434][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1895.364461][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1895.393809][ T4453] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1895.402900][ T4453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1895.411182][ T4453] usb 3-1: SerialNumber: syz [ 1895.419989][ T2674] usb 1-1: config 0 descriptor?? 12:24:52 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x4, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1895.562430][ T4970] usb 5-1: USB disconnect, device number 105 12:24:52 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1895.677440][ T9983] udc-core: couldn't find an available UDC or it's busy [ 1895.684689][ T9983] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1895.696994][ T9983] udc-core: couldn't find an available UDC or it's busy [ 1895.704052][ T9983] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1895.723675][ T2674] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1895.732011][ T2674] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 1895.741474][T22170] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1895.754021][ T8666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1895.754125][ T4453] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1895.763163][ T8666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.777914][ T8666] usb 2-1: Product: syz [ 1895.779131][ T4453] usb 3-1: USB disconnect, device number 33 [ 1895.782075][ T8666] usb 2-1: Manufacturer: syz [ 1895.782095][ T8666] usb 2-1: SerialNumber: syz [ 1895.834158][ T2674] peak_usb: probe of 1-1:0.0 failed with error -71 [ 1895.843152][ T2674] usb 1-1: USB disconnect, device number 94 [ 1895.847590][ T8666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1895.975466][ T7347] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1896.003817][ T4970] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1896.103647][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1896.153647][ T4453] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1896.193683][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:24:52 executing program 0: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b1f"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1896.202309][T10023] udc-core: couldn't find an available UDC or it's busy [ 1896.202857][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1896.209830][T10023] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1896.212670][T10023] udc-core: couldn't find an available UDC or it's busy [ 1896.217898][T22170] usb 6-1: SerialNumber: syz [ 1896.237138][T10023] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1896.264036][T10023] udc-core: couldn't find an available UDC or it's busy [ 1896.271006][T10023] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1896.383700][ T4970] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.394785][ T4970] usb 5-1: config 1 interface 0 has no altsetting 0 12:24:53 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1896.496982][ T7361] usb 4-1: USB disconnect, device number 52 [ 1896.523945][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1896.533668][ T8666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1896.536805][T22170] usb 6-1: USB disconnect, device number 124 [ 1896.548928][ T4453] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1896.562014][ T2674] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1896.569778][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1896.578874][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.587333][ T4970] usb 5-1: Product: syz [ 1896.591479][ T4970] usb 5-1: Manufacturer: syz [ 1896.596096][ T4970] usb 5-1: SerialNumber: syz [ 1896.646286][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1896.653118][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1896.673793][ T4453] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1896.682920][ T4453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1896.690942][ T4453] usb 3-1: SerialNumber: syz 12:24:53 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x5, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1896.852000][ T4970] usb 5-1: USB disconnect, device number 106 [ 1896.873825][ T2674] usb 1-1: too many configurations: 38, using maximum allowed: 8 12:24:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "10280e1a", {0x3, 0x2, 0x0, 0xbf, 0x8, 0x5, 0x7}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000002c0)=@generic={0x6, 0x0, 0x0, "1ff9c85e"}) syz_usb_connect_ath9k(0x3, 0xffffffffffffffd4, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe8, &(0x7f0000000200)=ANY=[@ANYBLOB="07022fd5d457ce34a95e9c9e8a8e8f86fd2c27f4430704000000e839ee4026fc3ac47a5d562df6e83d05f5df2188e1555f76a724b78d1e013dd8a9211dbe8bfa1e40ed60deb3a48ef88086b84d4d4c3077c71bc6a9bfb496087af804390bb5455804d8e62fa5d327dc579e4ce7443f9010ab657ea334867348b5d913cef8305a66"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc1, &(0x7f0000000400)=ANY=[@ANYRES32=r1]) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000580)=""/180) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x81, 0x17, 0x0, 0x12000, "ae5a814a5a2296dfa2001b94c8da03de94d22538bc240ca147e0300e476bc03b"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd7d, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e6d9, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd6a}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1896.937407][ T9988] udc-core: couldn't find an available UDC or it's busy [ 1896.944513][ T9988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1896.954282][T22170] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1896.995579][ T4453] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1897.005034][ T4453] usb 3-1: USB disconnect, device number 34 [ 1897.033612][ T7347] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1897.040584][ T7347] ath9k_htc: Failed to initialize the device [ 1897.047125][ T7361] usb 4-1: ath9k_htc: USB layer deinitialized [ 1897.168773][T31041] usb 2-1: USB disconnect, device number 57 [ 1897.263596][ T4970] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1897.313664][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1897.403949][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1897.413240][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1897.421448][T22170] usb 6-1: SerialNumber: syz [ 1897.593584][ T8666] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1897.600593][ T8666] ath9k_htc: Failed to initialize the device [ 1897.607730][T31041] usb 2-1: ath9k_htc: USB layer deinitialized [ 1897.623928][ T4970] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.635135][ T4970] usb 5-1: config 1 interface 0 has no altsetting 0 12:24:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000280)=[0xeb32, 0xb12]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x104, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e460, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x9000000000000000, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000002c0)={0x1, 0x13, 0x8000, 0x20, "a441c035d54037a4ddec3c3c7cb277846a782090262d173eac92e22384da80ad"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd77, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffdf5}}]}}, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "ecf6cbab", {0x1, 0x7, 0x3, 0x0, 0x6}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000000c0)=@generic={0x7, 0x0, 0x0, "466ce2cb"}) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000005c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "2f65cc19"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000300)={0x1, 0xa, 0x7, 0xffff, "d56b9391a585d33282050aabfcc7fb9567490d41da70a540963a516a6d4059aa"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:24:54 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) write$hidraw(r1, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)="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", 0x190) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) write$hidraw(r0, &(0x7f00000006c0)="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", 0x198) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffffffffd, 0x408042) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000880)="36825607e3cd963aa192562e36d14d396dbb1fb25501c1a5036e18da1bd1f5cf6a8b9720156b793b49fd7b34e03c82bc063e5e567d12362ab22dfaffffffbdb6ae45628ac5d79dda73ac35718917e0b11ed4062f851780e02d3fb1a6945f27fb44c702409ca7d6cf8397f968333851c104da6f636c1e167b6e97756f0099f1f57661677c69584d61167e613ce49dfe65ae29c9ce47abee7ffa2756a3275197866837f183f0dd2bccff72ab4f349beef49eee5eb0de61526bcee7c2b0fb3558dec508d4ae3867f3a4093f91e7a8624ee24666dd5025191f981938ec161e4762a1db3c9376dd64f4e5a1e687992c49ff011826588e4674ad80b0f8bcc73574e308b2e48821e190dcdc1eba3a43c9b0c413955fdd8525ae3f2df68950775baf6aa4bcf2b4bfa939895d7a459f159d933b4481d3c3664bcf7abd45e4802340408156b01556f1fdb511a4fd4ffe6f268c021f3005c8b5b4504fae2119862964e41ab667d3ebddc0ed68ab4b1a7ff8e452f064598b3b82b38b0ebe26bb162c586e9ff2a437fc1a897af6f3328e877fda07203cfe9d2b96d89a1c3fa36ca87eea3a77621454c712931c09449e0d2289864f11fbfd068086ff7f0e6a63c27e9e37feed918c2be29a95d55676af12665b1263e3575bc7a96393e60b70c56d444926d25744a9405f54fe4ec69551ff1bfffca78e83f8e91d4879225cc24653208c752ef0f545175378a3a468", 0x207) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x2, 0xb, &(0x7f0000000200)='\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00'}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r4 = syz_usb_connect_ath9k(0x3, 0x8a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$hidraw(r1, &(0x7f0000000240)="c15786dc6645f14d7eaefd2affa1c93c8f5c6cf8771e4a8a1d10d41d041bf38efd8097b53c456069e07b68a86568a5c49f3b5c5c3d6def75b86316dd9984f69b049ee4d04ee27c75988eedc495e8deb8878802d076a091ffa20243fe4fde6eff6ec47ef97cb08a0af9ccc6d65fcee17ac09b8c36ca2fb124b465a783eb4ffb28a29bed7f6173376749fd5ea8bfc2dc165cdd44192be145f3141e7695bd4081894029eb5e488ae82f4525eb12fd3cb1b8bb7b0cb41f657c2655fc0ca7f3843d5b6e80a4f1f4b5a6b9d64625b1b97cf01660f93798dca19642229608ac78", 0xdd) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) read$hidraw(r0, &(0x7f00000003c0)=""/103, 0x67) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 12:24:54 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b1f"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:24:54 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1897.716896][ T2674] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1897.725997][ T2674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.734099][ T2674] usb 1-1: Product: syz [ 1897.738287][ T2674] usb 1-1: Manufacturer: syz [ 1897.742891][ T2674] usb 1-1: SerialNumber: syz [ 1897.750139][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1897.765554][T22170] usb 6-1: USB disconnect, device number 125 [ 1897.814400][ T2674] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1897.843803][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1897.852873][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.861056][ T4970] usb 5-1: Product: syz [ 1897.865256][ T4970] usb 5-1: Manufacturer: syz [ 1897.869881][ T4970] usb 5-1: SerialNumber: syz [ 1897.931152][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1897.938060][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1897.973717][ T7361] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1898.043654][ T4453] usb 4-1: new high-speed USB device number 53 using dummy_hcd 12:24:54 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x6, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1898.113608][T31041] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1898.123632][T22170] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1898.139351][ T7347] usb 5-1: USB disconnect, device number 107 [ 1898.253695][ T7361] usb 3-1: too many configurations: 96, using maximum allowed: 8 [ 1898.393689][T31041] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1898.483689][ T2674] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1898.543720][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1898.553685][ T7347] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1898.623979][ T4453] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1898.633617][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.641606][ T4453] usb 4-1: Product: syz [ 1898.645877][ T4453] usb 4-1: Manufacturer: syz [ 1898.650485][ T4453] usb 4-1: SerialNumber: syz [ 1898.656480][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1898.665606][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1898.673623][T22170] usb 6-1: SerialNumber: syz [ 1898.713458][T10138] udc-core: couldn't find an available UDC or it's busy [ 1898.720610][T10138] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1898.725863][ T4453] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:24:55 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1898.923671][ T7347] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1898.934800][ T7347] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1898.959679][ T2661] usb 1-1: USB disconnect, device number 95 [ 1899.023986][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1899.033250][T22170] usb 6-1: USB disconnect, device number 126 [ 1899.053863][ T7361] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1899.062956][ T7361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.070994][ T7361] usb 3-1: Product: syz [ 1899.075360][ T7361] usb 3-1: Manufacturer: syz [ 1899.079961][ T7361] usb 3-1: SerialNumber: syz [ 1899.123811][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1899.132910][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.141008][ T7347] usb 5-1: Product: syz [ 1899.145200][ T7347] usb 5-1: Manufacturer: syz [ 1899.149792][ T7347] usb 5-1: SerialNumber: syz [ 1899.154877][ T7361] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1899.206307][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1899.213125][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1899.234037][T31041] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1899.243143][T31041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.251199][T31041] usb 2-1: Product: syz [ 1899.255525][T31041] usb 2-1: Manufacturer: syz [ 1899.260172][T31041] usb 2-1: SerialNumber: syz [ 1899.304203][T31041] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1899.363643][ T4453] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1899.403659][T22170] usb 6-1: new high-speed USB device number 127 using dummy_hcd 12:24:55 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x7, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1899.416947][ T8666] usb 5-1: USB disconnect, device number 108 12:24:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000035d61810b40402100536010203010902120001000000000904000000dabd94001f75d5935048b4ee0a688ca16315a400712d37c2c86b6e7161d06a9e1718dcc9eff91e536e9cd568fd45758a22b5ffc6e01fe0dc4d968a34c822f8396909b42a5651f38e6564952235f2b662f6babfd80c8938196a3a581c532c22a76ebfe45653fcd7c4df148d007f5e"], 0x0) syz_usb_connect(0x2, 0x77a, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x99, 0x9d, 0x88, 0x0, 0x9016, 0x182d, 0x59db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x768, 0x3, 0x9, 0x4, 0xf0, 0x5, [{{0x9, 0x4, 0x89, 0x81, 0x4, 0x79, 0x2e, 0x93, 0xd1, [@generic={0xe5, 0x21, "d5029b87381ed40b142afc8903dc3cc344fb98a982628baf40a5f95f095d07962a39a9fc75961fee185304c6b74a57609d3cfeba652189f0c82446477178b23f35abe6a911306aa61fb1fc380ee7000535fd75834abdfb0f721d5da53aeae21187a96ca6d6a467ff2aee50f2f2160de49edc33fd4940a4542e5bd39be4a937a92d2d222ec10d18e26bb8f26e620ea46b338f579b23d74571987aaa0c77d5a650c536242f38a2bd17382e2222d7462a2f25039008e3dc92fae590c8a4ef43d5e1822a178b923e3e628aa5c6f3dd274d840740ac2c122d18ed7a2cdf66584f89242ed621"}], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0x3, 0x9, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x1, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xbf}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x3, 0x18, 0x80, [@generic={0x3, 0x2, "0e"}]}}]}}, {{0x9, 0x4, 0x2c, 0x0, 0x8, 0x3f, 0x34, 0x21, 0x6, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "f4096923"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x8, 0x39}, [@mbim={0xc, 0x24, 0x1b, 0x1f, 0xfffe, 0xb0, 0xc, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x8001}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1f}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x1, 0x9}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x7f, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x45, 0x4, "926118"}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0x3f, 0x4, [@generic={0xa1, 0x9, "662f195fb965f5907744ff695dee1a8d423606288b013a206e02f1a2017bb2e155214d12a4d5ad2cb29650f6ffc745f6e9bd8d591f64231ccf32965bff623b9ffbb280affed24fa7f467cec3a7287ec0923813e5a05a5a11b1bcda144ea046372016e35bfe70decdfad392a9d97a52a6d62a1cced90420c36e2544059b70a353210bb8aea1f0ba62bbc795738004fafebbe9a073d381ebd5f5ff0dc858fb02"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x80, 0x3, 0x9b}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x4, 0xc4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xdc}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x40, 0x3, 0x8, 0x5}}, {{0x9, 0x5, 0x2, 0x13, 0x3ff, 0x7e, 0x3, 0x3f, [@generic={0x90, 0x2, "47f0cda599e1b781a47a3ddc1ee252681fcb73898369f5fabe5926fd1328a1945cfa5a40854f837ffae37e682388bb0382ac7945cb33fd2233ee805c673942fa9589b6332777ff384b28447f34eddf884cc087a0a006e1ca00f2e8ad989f143375b043adfabd4486ea14f8614553ce42d80db0bdb999a0a266b7cc9a563d34d1ce885fc0bc3b6ef6e9a9c236893a"}, @generic={0x8c, 0xf, "ab778f2e8223912946772daf0c6bcddb70532f092f34a8a341950926820554925d9decb66ff4ab9a03f6d1fd2ee3dfbed85048d34ba5f703674403410dd0377191cb1a50d6f3b4e6580190286363eadd26df2027b55d7f11b03cb151fd5a7bd5535badc0de925d2343d551c218c3c288396df65c7672c4a90d1f2bde41c3a56027ad6b610797fb83056e"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x2, 0xe1, [@generic={0x19, 0x24, "0ff4691b5f0da2caa50e76451258390ea3f771058d3b10"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x7, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf0, 0x99}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x8, 0x3f}}]}}, {{0x9, 0x4, 0xd9, 0xd6, 0xb, 0x4c, 0xda, 0x82, 0x1, [], [{{0x9, 0x5, 0x86, 0x1, 0x200, 0x40, 0x3a, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x5, 0x9, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x6, 0xc, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x7fff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x79, 0xf9, [@generic={0xd9, 0x21, "69a53b4d515effc20eb441c4236e204c5264f5aaa12d6e6afb88f7300a688e1209bebff01db671487ecb06b17db226c03cd8f4f0cac150b21de5ac12d7cf290fc406a4263316dface7ef3b57b833487801eba47eb0b47d010f0eca1774730379b0c75673607be9ac610926ee297d199fba5fba405b2d65bc8f3236b2119450cc30cbfc5caa6c96f39da33f893527a7f189e88ff151e6b1e3e98f998253903f870ff0b7ef15a2f78f30963d5cb130b64aa50cb140b887cf2b20f41d4f06b8e61fbafa6c06e9ae8e0c5f367cc8f7396b3c763de95aa4f9aa"}, @generic={0x7c, 0x2, "124f3220d40d0a3893f90953d75ac0c4e452b69740e4d0d744d45d85aa11c719f90d613cb192b3650c99c31b4e8c0410d3142d4e486c7d3c4186b31568728fcf28e34ee7fb19da7fd039846e9bc501d968e705a43839a67a3b666679d4f58fe51d254655d7bd8001d740b15126471a1afbeb1edfbc352880fb0c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x5b7, 0xc0, 0x8, 0x7f, [@generic={0xc8, 0x22, "f52327a969aa5da82910f7afca561fa71f390c93e4936e3e6f1dbd287e5606f9da38cf605889cfb218240698c45948c832634ce8064e5bdfe1d30b147c8b75117975bac6268dca91674292df5552248a21848c13260613a0f9d0951c91d001f5e5665484753228f351d914e98deb76cfc7c751dac18d68cc11541942712ebcca89690de67ed555b9078d45b253f7ad5cf60914cbaeeb4d62605a620c49709d46eaff0d38f5f510ee78adc3bd80205cebbd1c922d100ae9379303b77bb156016a55d15fdaa4bc"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x9, 0xe1, 0x40, [@generic={0x80, 0x5, "5c9737fa69418590572b8fa6ffdff1bb35452265e1b8bea218b0c0f6dd3b3794924c084df14ddc5af2e1ab484da7c0ac2ccb662e7236ae80965e443594e37d38112bb80f20c8624d7af7442f6d597f34fe80e97affe474e139d37e27dc3e7e78ab7029185003abe16d1816b32059937991393bb424a3d81d53ad160457e9"}, @generic={0x23, 0x4, "17853abfd834a591919cb9b90b6bed16cd0ac0e1486338173dc7d17e8ef3465260"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0x20, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x1, 0xe0, 0x1}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x5, 0x2, 0x5, [@generic={0x4d, 0x7, "7c1ea05f5f4ba67921412bb7425b8d10082812e097fe9e733e3714767551d5fcd79c71bc0c86d3b607ffd9bc139bdfd699715f158d58fddff74aa403806c056dffc968d2af5ab14de7820e"}]}}, {{0x9, 0x5, 0xd, 0x17, 0x40, 0x0, 0x1f, 0xff}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x7f, 0xe, 0x80, [@generic={0x2a, 0x22, "3affd4591cc02937442cba53468f0768001987d41c4cb4d53641879181d162da750b503593613450"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}]}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x20, 0xa0, 0x94, 0x40, 0x1}, 0x15c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x3, [{0x55, &(0x7f0000000100)=@string={0x55, 0x3, "656a888e4689ec19a78b6ede52f559f961b36c6ff659d356e1519c9b58b7286e52612b948516c78083a22923263e6f4321e9d1b9ce309cdc7e341ab0063695838a00c9b41f55872d5d5aca46bcd22326209159"}}, {0x43, &(0x7f0000000ac0)=@string={0x43, 0x3, "9f142ffacfe516aff8e239a90b7bf90500454a35306bc73f95fca06342df05e91416cdb12f3ecd567ede0130502dede86500e678b767d6476428614badb276b7d2"}}, {0x43, &(0x7f0000000b40)=@string={0x43, 0x3, "deb20c4d3d32d7544f5d11f12333dfdfbd09435608ec8cf290e43d5ffd3fbd5aa5c345cfb04f940c0338ca451e83b4a209cf65722edd9d2eff809df7bbd4af7fea"}}]}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/24) [ 1899.570749][T10207] udc-core: couldn't find an available UDC or it's busy [ 1899.577769][T10207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1899.595209][ T4453] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1899.600867][ T4453] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1899.743635][ T7361] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1899.797948][ T7347] usb 4-1: USB disconnect, device number 53 [ 1899.823653][ T8666] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1899.825720][ T4453] ath9k_htc: Failed to initialize the device [ 1899.837427][ T7347] usb 4-1: ath9k_htc: USB layer deinitialized [ 1899.837432][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1899.856490][ T2674] usb 1-1: Service connection timeout for: 256 [ 1899.862659][ T2674] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1899.871032][ T2674] ath9k_htc: Failed to initialize the device [ 1899.873639][T31041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1899.886104][ T2661] usb 1-1: ath9k_htc: USB layer deinitialized [ 1899.973691][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1899.982766][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1899.990791][T22170] usb 6-1: SerialNumber: syz [ 1900.147590][T10208] udc-core: couldn't find an available UDC or it's busy [ 1900.154572][T10208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1900.162811][T10208] udc-core: couldn't find an available UDC or it's busy [ 1900.169887][T10208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1900.178321][T10208] udc-core: couldn't find an available UDC or it's busy [ 1900.183702][ T8666] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.185286][T10208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1900.196490][ T8666] usb 5-1: config 1 interface 0 has no altsetting 0 12:24:56 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xa, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1900.243689][ T2661] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1900.278565][T10212] udc-core: couldn't find an available UDC or it's busy [ 1900.285713][T10212] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1900.323713][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1900.332421][T22170] usb 6-1: USB disconnect, device number 127 [ 1900.363924][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1900.373083][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.381082][ T8666] usb 5-1: Product: syz [ 1900.385269][ T8666] usb 5-1: Manufacturer: syz [ 1900.389858][ T8666] usb 5-1: SerialNumber: syz [ 1900.426098][ T4970] usb 3-1: USB disconnect, device number 35 [ 1900.439251][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1900.446095][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 1900.514004][ T2661] usb 1-1: Using ep0 maxpacket: 16 [ 1900.520068][ T8666] usb 2-1: USB disconnect, device number 58 [ 1900.593576][ T4453] usb 4-1: new high-speed USB device number 54 using dummy_hcd 12:24:57 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x9, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1900.644636][ T7347] usb 5-1: USB disconnect, device number 109 [ 1900.723602][T22170] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1900.793652][ T2661] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=36.05 [ 1900.802858][ T2661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.811089][ T2661] usb 1-1: Product: syz [ 1900.815305][ T2661] usb 1-1: Manufacturer: syz [ 1900.819916][ T2661] usb 1-1: SerialNumber: syz [ 1900.825816][ T2661] usb 1-1: config 0 descriptor?? [ 1900.953603][T31041] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1900.960679][T31041] ath9k_htc: Failed to initialize the device [ 1900.967058][ T8666] usb 2-1: ath9k_htc: USB layer deinitialized 12:24:57 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b1f"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1901.066437][T10305] udc-core: couldn't find an available UDC or it's busy [ 1901.073394][T10305] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1901.073695][ T7347] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1901.089138][ T2674] usb 1-1: USB disconnect, device number 96 12:24:57 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) write$hidraw(r1, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)="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", 0x190) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) write$hidraw(r0, &(0x7f00000006c0)="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", 0x198) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffffffffd, 0x408042) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000880)="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", 0x207) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x2, 0xb, &(0x7f0000000200)='\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00'}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r4 = syz_usb_connect_ath9k(0x3, 0x8a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$hidraw(r1, &(0x7f0000000240)="c15786dc6645f14d7eaefd2affa1c93c8f5c6cf8771e4a8a1d10d41d041bf38efd8097b53c456069e07b68a86568a5c49f3b5c5c3d6def75b86316dd9984f69b049ee4d04ee27c75988eedc495e8deb8878802d076a091ffa20243fe4fde6eff6ec47ef97cb08a0af9ccc6d65fcee17ac09b8c36ca2fb124b465a783eb4ffb28a29bed7f6173376749fd5ea8bfc2dc165cdd44192be145f3141e7695bd4081894029eb5e488ae82f4525eb12fd3cb1b8bb7b0cb41f657c2655fc0ca7f3843d5b6e80a4f1f4b5a6b9d64625b1b97cf01660f93798dca19642229608ac78", 0xdd) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) read$hidraw(r0, &(0x7f00000003c0)=""/103, 0x67) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 1901.114951][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1901.173779][ T4453] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1901.182839][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.191108][ T4453] usb 4-1: Product: syz [ 1901.223736][ T4453] usb 4-1: can't set config #1, error -71 [ 1901.229582][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1901.238665][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1901.247063][T22170] usb 6-1: SerialNumber: syz [ 1901.253108][ T4453] usb 4-1: USB disconnect, device number 54 [ 1901.273964][ T7361] usb 3-1: Service connection timeout for: 258 [ 1901.280148][ T7361] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1901.291298][ T7361] ath9k_htc: Failed to initialize the device [ 1901.297914][ T4970] usb 3-1: ath9k_htc: USB layer deinitialized [ 1901.433614][ T8666] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1901.453875][ T7347] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1901.464840][ T7347] usb 5-1: config 1 interface 0 has no altsetting 0 12:24:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000280)=[0xeb32, 0xb12]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x104, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e460, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x9000000000000000, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000002c0)={0x1, 0x13, 0x8000, 0x20, "a441c035d54037a4ddec3c3c7cb277846a782090262d173eac92e22384da80ad"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd77, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffdf5}}]}}, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "ecf6cbab", {0x1, 0x7, 0x3, 0x0, 0x6}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000000c0)=@generic={0x7, 0x0, 0x0, "466ce2cb"}) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000005c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "2f65cc19"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x1f, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000300)={0x1, 0xa, 0x7, 0xffff, "d56b9391a585d33282050aabfcc7fb9567490d41da70a540963a516a6d4059aa"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:24:58 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) write$hidraw(r1, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)="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", 0x190) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) write$hidraw(r0, &(0x7f00000006c0)="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", 0x198) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffffffffd, 0x408042) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000880)="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", 0x207) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x2, 0xb, &(0x7f0000000200)='\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00'}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r4 = syz_usb_connect_ath9k(0x3, 0x8a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$hidraw(r1, &(0x7f0000000240)="c15786dc6645f14d7eaefd2affa1c93c8f5c6cf8771e4a8a1d10d41d041bf38efd8097b53c456069e07b68a86568a5c49f3b5c5c3d6def75b86316dd9984f69b049ee4d04ee27c75988eedc495e8deb8878802d076a091ffa20243fe4fde6eff6ec47ef97cb08a0af9ccc6d65fcee17ac09b8c36ca2fb124b465a783eb4ffb28a29bed7f6173376749fd5ea8bfc2dc165cdd44192be145f3141e7695bd4081894029eb5e488ae82f4525eb12fd3cb1b8bb7b0cb41f657c2655fc0ca7f3843d5b6e80a4f1f4b5a6b9d64625b1b97cf01660f93798dca19642229608ac78", 0xdd) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) read$hidraw(r0, &(0x7f00000003c0)=""/103, 0x67) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 12:24:58 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1901.563748][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1901.588121][T22170] usb 6-1: USB disconnect, device number 2 [ 1901.623873][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1901.633638][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.641643][ T7347] usb 5-1: Product: syz [ 1901.645867][ T7347] usb 5-1: Manufacturer: syz [ 1901.650465][ T7347] usb 5-1: SerialNumber: syz [ 1901.696356][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1901.703168][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1901.753659][ T8666] usb 2-1: too many configurations: 38, using maximum allowed: 8 12:24:58 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0xa, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1901.893588][ T4970] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1901.901448][ T4453] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1901.909429][ T2674] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1901.913740][ T7347] usb 5-1: USB disconnect, device number 110 [ 1901.983671][T22170] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1902.183615][ T2674] usb 1-1: Using ep0 maxpacket: 16 [ 1902.223787][ T4970] usb 3-1: too many configurations: 96, using maximum allowed: 8 [ 1902.344031][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1902.353566][ T7347] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1902.433827][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1902.442904][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1902.451221][T22170] usb 6-1: SerialNumber: syz [ 1902.463674][ T2674] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=36.05 [ 1902.472780][ T2674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:24:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000035d61810b40402100536010203010902120001000000000904000000dabd94001f75d5935048b4ee0a688ca16315a400712d37c2c86b6e7161d06a9e1718dcc9eff91e536e9cd568fd45758a22b5ffc6e01fe0dc4d968a34c822f8396909b42a5651f38e6564952235f2b662f6babfd80c8938196a3a581c532c22a76ebfe45653fcd7c4df148d007f5e"], 0x0) syz_usb_connect(0x2, 0x77a, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x99, 0x9d, 0x88, 0x0, 0x9016, 0x182d, 0x59db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x768, 0x3, 0x9, 0x4, 0xf0, 0x5, [{{0x9, 0x4, 0x89, 0x81, 0x4, 0x79, 0x2e, 0x93, 0xd1, [@generic={0xe5, 0x21, "d5029b87381ed40b142afc8903dc3cc344fb98a982628baf40a5f95f095d07962a39a9fc75961fee185304c6b74a57609d3cfeba652189f0c82446477178b23f35abe6a911306aa61fb1fc380ee7000535fd75834abdfb0f721d5da53aeae21187a96ca6d6a467ff2aee50f2f2160de49edc33fd4940a4542e5bd39be4a937a92d2d222ec10d18e26bb8f26e620ea46b338f579b23d74571987aaa0c77d5a650c536242f38a2bd17382e2222d7462a2f25039008e3dc92fae590c8a4ef43d5e1822a178b923e3e628aa5c6f3dd274d840740ac2c122d18ed7a2cdf66584f89242ed621"}], [{{0x9, 0x5, 0x2, 0x10, 0x20, 0x3, 0x9, 0x1f}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x1, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xbf}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x3, 0x18, 0x80, [@generic={0x3, 0x2, "0e"}]}}]}}, {{0x9, 0x4, 0x2c, 0x0, 0x8, 0x3f, 0x34, 0x21, 0x6, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "f4096923"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x8, 0x39}, [@mbim={0xc, 0x24, 0x1b, 0x1f, 0xfffe, 0xb0, 0xc, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @obex={0x5, 0x24, 0x15, 0x8001}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1f}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x1, 0x9}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x7f, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x45, 0x4, "926118"}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0x3f, 0x4, [@generic={0xa1, 0x9, "662f195fb965f5907744ff695dee1a8d423606288b013a206e02f1a2017bb2e155214d12a4d5ad2cb29650f6ffc745f6e9bd8d591f64231ccf32965bff623b9ffbb280affed24fa7f467cec3a7287ec0923813e5a05a5a11b1bcda144ea046372016e35bfe70decdfad392a9d97a52a6d62a1cced90420c36e2544059b70a353210bb8aea1f0ba62bbc795738004fafebbe9a073d381ebd5f5ff0dc858fb02"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x80, 0x3, 0x9b}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x4, 0xc4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xdc}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x40, 0x3, 0x8, 0x5}}, {{0x9, 0x5, 0x2, 0x13, 0x3ff, 0x7e, 0x3, 0x3f, [@generic={0x90, 0x2, "47f0cda599e1b781a47a3ddc1ee252681fcb73898369f5fabe5926fd1328a1945cfa5a40854f837ffae37e682388bb0382ac7945cb33fd2233ee805c673942fa9589b6332777ff384b28447f34eddf884cc087a0a006e1ca00f2e8ad989f143375b043adfabd4486ea14f8614553ce42d80db0bdb999a0a266b7cc9a563d34d1ce885fc0bc3b6ef6e9a9c236893a"}, @generic={0x8c, 0xf, "ab778f2e8223912946772daf0c6bcddb70532f092f34a8a341950926820554925d9decb66ff4ab9a03f6d1fd2ee3dfbed85048d34ba5f703674403410dd0377191cb1a50d6f3b4e6580190286363eadd26df2027b55d7f11b03cb151fd5a7bd5535badc0de925d2343d551c218c3c288396df65c7672c4a90d1f2bde41c3a56027ad6b610797fb83056e"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x2, 0xe1, [@generic={0x19, 0x24, "0ff4691b5f0da2caa50e76451258390ea3f771058d3b10"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x7, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf0, 0x99}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x7, 0x8, 0x3f}}]}}, {{0x9, 0x4, 0xd9, 0xd6, 0xb, 0x4c, 0xda, 0x82, 0x1, [], [{{0x9, 0x5, 0x86, 0x1, 0x200, 0x40, 0x3a, 0x7}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x5, 0x9, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x6, 0xc, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x7fff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x79, 0xf9, [@generic={0xd9, 0x21, "69a53b4d515effc20eb441c4236e204c5264f5aaa12d6e6afb88f7300a688e1209bebff01db671487ecb06b17db226c03cd8f4f0cac150b21de5ac12d7cf290fc406a4263316dface7ef3b57b833487801eba47eb0b47d010f0eca1774730379b0c75673607be9ac610926ee297d199fba5fba405b2d65bc8f3236b2119450cc30cbfc5caa6c96f39da33f893527a7f189e88ff151e6b1e3e98f998253903f870ff0b7ef15a2f78f30963d5cb130b64aa50cb140b887cf2b20f41d4f06b8e61fbafa6c06e9ae8e0c5f367cc8f7396b3c763de95aa4f9aa"}, @generic={0x7c, 0x2, "124f3220d40d0a3893f90953d75ac0c4e452b69740e4d0d744d45d85aa11c719f90d613cb192b3650c99c31b4e8c0410d3142d4e486c7d3c4186b31568728fcf28e34ee7fb19da7fd039846e9bc501d968e705a43839a67a3b666679d4f58fe51d254655d7bd8001d740b15126471a1afbeb1edfbc352880fb0c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x5b7, 0xc0, 0x8, 0x7f, [@generic={0xc8, 0x22, "f52327a969aa5da82910f7afca561fa71f390c93e4936e3e6f1dbd287e5606f9da38cf605889cfb218240698c45948c832634ce8064e5bdfe1d30b147c8b75117975bac6268dca91674292df5552248a21848c13260613a0f9d0951c91d001f5e5665484753228f351d914e98deb76cfc7c751dac18d68cc11541942712ebcca89690de67ed555b9078d45b253f7ad5cf60914cbaeeb4d62605a620c49709d46eaff0d38f5f510ee78adc3bd80205cebbd1c922d100ae9379303b77bb156016a55d15fdaa4bc"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x9, 0xe1, 0x40, [@generic={0x80, 0x5, "5c9737fa69418590572b8fa6ffdff1bb35452265e1b8bea218b0c0f6dd3b3794924c084df14ddc5af2e1ab484da7c0ac2ccb662e7236ae80965e443594e37d38112bb80f20c8624d7af7442f6d597f34fe80e97affe474e139d37e27dc3e7e78ab7029185003abe16d1816b32059937991393bb424a3d81d53ad160457e9"}, @generic={0x23, 0x4, "17853abfd834a591919cb9b90b6bed16cd0ac0e1486338173dc7d17e8ef3465260"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0x20, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x1, 0xe0, 0x1}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x5, 0x2, 0x5, [@generic={0x4d, 0x7, "7c1ea05f5f4ba67921412bb7425b8d10082812e097fe9e733e3714767551d5fcd79c71bc0c86d3b607ffd9bc139bdfd699715f158d58fddff74aa403806c056dffc968d2af5ab14de7820e"}]}}, {{0x9, 0x5, 0xd, 0x17, 0x40, 0x0, 0x1f, 0xff}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x7f, 0xe, 0x80, [@generic={0x2a, 0x22, "3affd4591cc02937442cba53468f0768001987d41c4cb4d53641879181d162da750b503593613450"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}]}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x20, 0xa0, 0x94, 0x40, 0x1}, 0x15c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x3, [{0x55, &(0x7f0000000100)=@string={0x55, 0x3, "656a888e4689ec19a78b6ede52f559f961b36c6ff659d356e1519c9b58b7286e52612b948516c78083a22923263e6f4321e9d1b9ce309cdc7e341ab0063695838a00c9b41f55872d5d5aca46bcd22326209159"}}, {0x43, &(0x7f0000000ac0)=@string={0x43, 0x3, "9f142ffacfe516aff8e239a90b7bf90500454a35306bc73f95fca06342df05e91416cdb12f3ecd567ede0130502dede86500e678b767d6476428614badb276b7d2"}}, {0x43, &(0x7f0000000b40)=@string={0x43, 0x3, "deb20c4d3d32d7544f5d11f12333dfdfbd09435608ec8cf290e43d5ffd3fbd5aa5c345cfb04f940c0338ca451e83b4a209cf65722edd9d2eff809df7bbd4af7fea"}}]}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/24) [ 1902.481151][ T2674] usb 1-1: Product: syz [ 1902.485346][ T2674] usb 1-1: Manufacturer: syz [ 1902.490027][ T2674] usb 1-1: SerialNumber: syz [ 1902.494834][ T4453] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1902.503917][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.512001][ T4453] usb 4-1: Product: syz [ 1902.516333][ T4453] usb 4-1: Manufacturer: syz [ 1902.520944][ T4453] usb 4-1: SerialNumber: syz [ 1902.531130][ T2674] usb 1-1: config 0 descriptor?? [ 1902.563794][ T2674] usb 1-1: can't set config #0, error -71 [ 1902.570278][ T4453] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1902.585978][ T2674] usb 1-1: USB disconnect, device number 97 12:24:59 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xf, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1902.663712][ T8666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1902.672816][ T8666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.681001][ T8666] usb 2-1: Product: syz [ 1902.685252][ T8666] usb 2-1: Manufacturer: syz [ 1902.689867][ T8666] usb 2-1: SerialNumber: syz [ 1902.744659][ T8666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1902.783804][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1902.784063][ T7347] usb 5-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.795882][T22170] usb 6-1: USB disconnect, device number 3 [ 1902.803800][ T7347] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1902.943633][ T2674] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1903.033938][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1903.043145][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.051252][ T7347] usb 5-1: Product: syz [ 1903.055567][ T7347] usb 5-1: Manufacturer: syz [ 1903.060157][ T7347] usb 5-1: SerialNumber: syz [ 1903.083951][ T4970] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1903.093031][ T4970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.101155][ T4970] usb 3-1: Product: syz [ 1903.105353][ T4970] usb 3-1: Manufacturer: syz [ 1903.109948][ T4970] usb 3-1: SerialNumber: syz [ 1903.116432][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1903.123227][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1903.173680][ T4453] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1903.184508][ T4970] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1903.192622][ T2674] usb 1-1: Using ep0 maxpacket: 16 [ 1903.198627][T22170] usb 6-1: new high-speed USB device number 4 using dummy_hcd 12:24:59 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0xf, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1903.321241][ T32] usb 5-1: USB disconnect, device number 111 [ 1903.394775][T10414] udc-core: couldn't find an available UDC or it's busy [ 1903.401766][T10414] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1903.425368][ T4453] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1903.431109][ T4453] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1903.483953][ T2674] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=36.05 [ 1903.493107][ T2674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.501214][ T2674] usb 1-1: Product: syz [ 1903.503630][ T8666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1903.505520][ T2674] usb 1-1: Manufacturer: syz [ 1903.519746][ T2674] usb 1-1: SerialNumber: syz [ 1903.525595][ T2674] usb 1-1: config 0 descriptor?? [ 1903.563809][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1903.629727][ T7361] usb 4-1: USB disconnect, device number 55 [ 1903.646107][ T4453] ath9k_htc: Failed to initialize the device [ 1903.652577][ T7361] usb 4-1: ath9k_htc: USB layer deinitialized [ 1903.653767][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1903.667757][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1903.675910][T22170] usb 6-1: SerialNumber: syz [ 1903.763649][ T4970] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1903.773692][ T32] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1903.786611][T10458] udc-core: couldn't find an available UDC or it's busy [ 1903.793710][T10458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1903.806336][ T2674] usb 1-1: USB disconnect, device number 98 12:25:00 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x18, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1903.907219][T10377] udc-core: couldn't find an available UDC or it's busy [ 1903.914366][T10377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1903.993831][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1904.002734][T22170] usb 6-1: USB disconnect, device number 4 12:25:00 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, 0x0) write$hidraw(r1, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb9751e2032bec608a62330d7b20f024c4444f6744028efa407cf24a5d88cb5ee5770ade7610a4b7c9169614fdd7c703c603d2ec04921ac203fba7b2372acafdc33dbdda972fa7fdc8825c5511e8d52328688097ff3f7d1788995571700db2d76712cf06c8b42e3006b302f686c7f94a958ffa68f90225bacd9a2a7ce6df2b474f77db88b05050ce7d5e5b82dc11dc39c3d0534fd56dfa5b2a20d510195f3e43", 0x190) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) write$hidraw(r0, &(0x7f00000006c0)="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", 0x198) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffffffffd, 0x408042) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000880)="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", 0x207) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x2, 0xb, &(0x7f0000000200)='\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00'}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r4 = syz_usb_connect_ath9k(0x3, 0x8a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$hidraw(r1, &(0x7f0000000240)="c15786dc6645f14d7eaefd2affa1c93c8f5c6cf8771e4a8a1d10d41d041bf38efd8097b53c456069e07b68a86568a5c49f3b5c5c3d6def75b86316dd9984f69b049ee4d04ee27c75988eedc495e8deb8878802d076a091ffa20243fe4fde6eff6ec47ef97cb08a0af9ccc6d65fcee17ac09b8c36ca2fb124b465a783eb4ffb28a29bed7f6173376749fd5ea8bfc2dc165cdd44192be145f3141e7695bd4081894029eb5e488ae82f4525eb12fd3cb1b8bb7b0cb41f657c2655fc0ca7f3843d5b6e80a4f1f4b5a6b9d64625b1b97cf01660f93798dca19642229608ac78", 0xdd) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) read$hidraw(r0, &(0x7f00000003c0)=""/103, 0x67) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 1904.127423][ T7361] usb 2-1: USB disconnect, device number 59 [ 1904.136941][ T32] usb 5-1: config 1 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1904.154131][ T32] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1904.192771][T10415] udc-core: couldn't find an available UDC or it's busy [ 1904.199838][T10415] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1904.210590][T10415] udc-core: couldn't find an available UDC or it's busy [ 1904.217640][T10415] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1904.228362][T10415] udc-core: couldn't find an available UDC or it's busy [ 1904.235398][T10415] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:25:00 executing program 0: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b1f"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1904.323668][ T32] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1904.332861][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.340905][ T32] usb 5-1: Product: syz [ 1904.345176][ T32] usb 5-1: Manufacturer: syz [ 1904.349780][ T32] usb 5-1: SerialNumber: syz [ 1904.373963][T22170] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1904.396552][ T32] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1904.403358][ T32] cdc_ncm 5-1:1.1: bind() failure [ 1904.443677][ T2674] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1904.468212][ T32] usb 3-1: USB disconnect, device number 36 [ 1904.553609][ T8666] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1904.560634][ T8666] ath9k_htc: Failed to initialize the device [ 1904.567048][ T7361] usb 2-1: ath9k_htc: USB layer deinitialized 12:25:01 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:01 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x18, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1904.601299][ T4453] usb 5-1: USB disconnect, device number 112 [ 1904.633622][ T7347] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1904.733696][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1904.823824][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1904.833006][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1904.841024][T22170] usb 6-1: SerialNumber: syz 12:25:01 executing program 2: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b1f"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1904.923768][ T7347] usb 1-1: too many configurations: 38, using maximum allowed: 8 [ 1904.983880][ T2674] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1904.992981][ T2674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.001039][ T2674] usb 4-1: Product: syz [ 1905.005369][ T2674] usb 4-1: Manufacturer: syz [ 1905.010007][ T2674] usb 4-1: SerialNumber: syz 12:25:01 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1d, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1905.034212][ T4453] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1905.053676][ T7361] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1905.054333][ T2674] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1905.163863][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1905.172726][T22170] usb 6-1: USB disconnect, device number 5 [ 1905.273584][ T4970] usb 3-1: Service connection timeout for: 258 [ 1905.279790][ T4970] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1905.288286][ T4970] ath9k_htc: Failed to initialize the device [ 1905.294417][ T32] usb 3-1: ath9k_htc: USB layer deinitialized [ 1905.333681][ T7361] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1905.423686][ T4453] usb 5-1: config 1 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1905.434750][ T4453] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1905.563716][T22170] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1905.633795][ T4453] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1905.642976][ T4453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.651002][ T4453] usb 5-1: Product: syz [ 1905.655237][ T4453] usb 5-1: Manufacturer: syz [ 1905.659827][ T4453] usb 5-1: SerialNumber: syz [ 1905.664516][ T32] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1905.721172][ T4453] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1905.724003][ T7347] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1905.728203][ T4453] cdc_ncm 5-1:1.1: bind() failure [ 1905.737065][ T7347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.750102][ T7347] usb 1-1: Product: syz [ 1905.754310][ T7347] usb 1-1: Manufacturer: syz [ 1905.758908][ T7347] usb 1-1: SerialNumber: syz [ 1905.784208][ T2674] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1905.804179][ T7347] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:02 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x1d, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1905.920701][T31041] usb 5-1: USB disconnect, device number 113 [ 1905.953971][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1905.974271][ T32] usb 3-1: too many configurations: 38, using maximum allowed: 8 [ 1906.009071][T10550] udc-core: couldn't find an available UDC or it's busy [ 1906.016127][T10550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1906.045174][ T2674] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1906.050861][ T2674] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1906.062651][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1906.071833][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1906.079879][T22170] usb 6-1: SerialNumber: syz [ 1906.163715][ T7361] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1906.172905][ T7361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.181034][ T7361] usb 2-1: Product: syz [ 1906.185238][ T7361] usb 2-1: Manufacturer: syz [ 1906.189827][ T7361] usb 2-1: SerialNumber: syz [ 1906.236371][ T7361] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1906.249827][ T8666] usb 4-1: USB disconnect, device number 56 [ 1906.255984][ T2674] ath9k_htc: Failed to initialize the device [ 1906.263505][ T8666] usb 4-1: ath9k_htc: USB layer deinitialized 12:25:02 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1906.344356][T31041] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1906.393646][ T7347] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1906.393722][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1906.411378][T22170] usb 6-1: USB disconnect, device number 6 [ 1906.703640][T31041] usb 5-1: config 1 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.714744][T31041] usb 5-1: config 1 interface 0 has no altsetting 0 12:25:03 executing program 3: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/159) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000000c0)={0x3, 0xfc98, 0xffffffff, 0x6, 0x8, 0x8}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x87, &(0x7f0000000100)="2c295d43f293d475f7b064b24cec9f7bf34d3cb2aa9ee8898783d99a83d8a242ef191c95a9382e297c384bbf246e8040d4014ca42bfaab3ef0467e459fa5c9ef30a5471dc04d3146619a1d90fd042d591d0265b945f21daf11533f88c9e7bbd9aa9ea1c84169472857d325653929622300df64aa9cd67553932a38305393e5af724bf6b870ce12"}) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000200)=""/194) r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x4, 0x24000) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000380)={0x1, 0xa, &(0x7f0000000340)="cdf124d588df8e010395"}) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0xe9, 0x125080) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000400)=0x1) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000440)={0x10001, 0x10000, 0x1, 0x1f, 0x400, 0x81}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000480)=""/6) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000004c0)={0x9, 0x5, 0x3, 0x80, 0x7f, 0x3ea867ac}) r2 = syz_open_dev$evdev(&(0x7f0000000500), 0x2, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000540)=""/73) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000005c0)=""/204) r3 = syz_open_dev$evdev(&(0x7f00000006c0), 0x6, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000700)=""/4) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000740)=""/135) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000800)=""/6) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000840)=""/74) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000008c0)) 12:25:03 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0x6}, {}, @rumble={0x0, 0xc}}) syz_open_dev$evdev(&(0x7f0000000040), 0x3000000000000000, 0x600) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x6, 0x161dc2) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x4bb, 0x169742) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x80000) write$hidraw(r2, &(0x7f0000000100)="66bdf98865f0a0b310e319c4f8f3d4504ec45bdd9cb0cd1f65c0a1f4f00eb5a71ad78cd13d7675cd42084987455355137ccf955d0fdb59bf3b466c097ce70047150dd0436203af77c7eebb5c7406a088f650bd0346921235bf02ddbfc5a09a2d873942d2ff272a7f13836a0ed5ec6e1c65c036739bd0ca56929da6c4e1d06982", 0x80) write$hidraw(r1, &(0x7f0000000000)="03", 0xfd50) ioctl$HIDIOCGRAWNAME(r0, 0x40305829, &(0x7f0000000080)) 12:25:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000280)=0x1) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0xffffffffffffff31}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000100)="975476776e0ec8ce7e66e47dd2d3fc07ce6c8b317bf9b821bcafd16af7f729c8842a952bcbc3a9e3b288c46c"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r3 = syz_usb_connect_ath9k(0x3, 0x17, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xe9, &(0x7f00000018c0)=@generic={0x1, 0x0, 0xe1, "13d1a400", "30787dfe7b16bad77eec723743265f772ed9e9d56a4831e6b0848a47442c7db1ee62ba59e792e6a174e55f96599b9affd1197ea52898b62170a1b2472deda7ff36ca0c89816111aa81db5fa7af0ca40b80e0505099f7cff6ddcea5ed0b62e98b7a9d1eb8490a68367ab017e675a926927ebfc969afd7c2d848290b5d31332a1ca45e35a4d7d306996b07b895bc8e8c76d1e97dab94bb1014a49e584c2b8e3ae2f7ada50b0cc99ceb024d7dc1a2e9fef07f4c2c44c4620151e700526f63aae0ac36c6cc388bb3839117067cf4a0e503c80132d22a8f92cdcb90889990957573d429"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000340)=@conn_svc_rsp={0x0, 0x0, 0xa, "665d0e44", {0x3, 0x105, 0x0, 0x0, 0x0, 0x5, 0x3f}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "bbb20505", {0x1, 0xffc1, 0x0, 0x0, 0x8}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00004eb7ed5205134972438d0b57f468a8f8000000004e3400004e84b1db982dbd96f1d17bcae1dec5c5231a1a4b204519132a59683e09000000fa45bc6b"]) r5 = syz_usb_connect_ath9k(0x3, 0xffffffffffffffd7, 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x6d, &(0x7f0000000480)=ANY=[@ANYBLOB="4bfd18050000652de216b455845a1290ff9ec71f6b67dfcff46c83f90b34fa105f4acff923b955c205cfbdd743e859395584f23fa8be336b5aadeb2f7c78323e9732c9f9a33444df8a7792a61aa886a289cf84d55d905bd19f8c46844736c8f650ca919e99a1f9333ceaf9de36"]) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x7a, &(0x7f00000017c0)=@generic={0x7, 0x0, 0x72, "7976e749", "8a2dcbaad752fd38dcaa9428e6944e161d17f2f5bd575c13a134b7d6826bfea21fb464d8f79bd94ec8d875554c1614a8e4d2eb8344b5f738d90523f39b73639d75b4f8322449566e3e5ef7c920066db8ba551ed8c47ab19b113ed58a8ceffb0d2979b7196920ed7b818c842b3cb2ddeac491"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1906.793748][T22170] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1906.803724][ T7361] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1906.813932][T10554] udc-core: couldn't find an available UDC or it's busy [ 1906.820934][T10554] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1906.873801][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1906.882871][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.891224][T31041] usb 5-1: Product: syz [ 1906.895497][T31041] usb 5-1: Manufacturer: syz [ 1906.900100][T31041] usb 5-1: SerialNumber: syz [ 1906.946370][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1906.953183][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1906.974119][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1906.983192][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.991287][ T32] usb 3-1: Product: syz [ 1906.995480][ T32] usb 3-1: Manufacturer: syz [ 1907.000223][ T32] usb 3-1: SerialNumber: syz [ 1907.036803][T31041] usb 1-1: USB disconnect, device number 99 [ 1907.047665][ T32] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:03 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1907.152270][ T4970] usb 5-1: USB disconnect, device number 114 [ 1907.158626][ T2674] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1907.203909][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1907.217560][T10584] udc-core: couldn't find an available UDC or it's busy [ 1907.225084][T10584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1907.313853][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1907.323028][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1907.331139][T22170] usb 6-1: SerialNumber: syz [ 1907.433647][ T7347] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1907.440840][ T7347] ath9k_htc: Failed to initialize the device [ 1907.447720][ T4453] usb 2-1: USB disconnect, device number 60 [ 1907.453392][T31041] usb 1-1: ath9k_htc: USB layer deinitialized [ 1907.464119][ T2674] usb 4-1: too many configurations: 186, using maximum allowed: 8 12:25:04 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x40086602, &(0x7f0000000380)) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x8, 0x400000) write$hidraw(r2, &(0x7f00000002c0)="528cf01e8b0f9e2797b1a4100a23cef7c52a3ab778a0b56bcaa3036c8b30ccbd87e3e069be8aa5a50c4a4c099226527fb96e51df3f6114d3e351d41cc9543ea17adaf30bd9cd4c105688bcfb6d8f0cd28e84b9b4387ca178a0b5", 0x5a) read$hidraw(r2, 0x0, 0x9) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{0xcb4, 0x81, 0x2, 0x4, 0x7, 0x200}, {0x101, 0x1, 0x1f, 0x3, 0x81, 0x1d1}]}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r3, &(0x7f0000000000)="03", 0xfd50) ioctl$HIDIOCGRAWNAME(r3, 0x40305829, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000640)="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", 0x2bc) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x31d, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) syz_open_dev$hidraw(&(0x7f0000000040), 0x3, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) [ 1907.543628][ T2674] usb 4-1: config index 0 descriptor too short (expected 65329, got 72) [ 1907.565460][ T33] audit: type=1800 audit(1626783904.124:3307): pid=10716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14258 res=0 errno=0 12:25:04 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x2, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1907.587379][ T33] audit: type=1804 audit(1626783904.124:3308): pid=10716 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723137383937313137342F73797A6B616C6C65722E334567545A452F3936352F48C7C060 dev="sda1" ino=14258 res=1 errno=0 [ 1907.593956][ T4970] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1907.634386][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1907.642717][ T2674] usb 4-1: config index 1 descriptor too short (expected 65329, got 72) [ 1907.663306][T22170] usb 6-1: USB disconnect, device number 7 [ 1907.669460][ T32] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1907.733689][ T2674] usb 4-1: config index 2 descriptor too short (expected 65329, got 72) [ 1907.813805][ T2674] usb 4-1: config index 3 descriptor too short (expected 65329, got 72) [ 1907.893817][ T2674] usb 4-1: config index 4 descriptor too short (expected 65329, got 72) 12:25:04 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:04 executing program 0: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1d0, &(0x7f0000000900)=ANY=[@ANYBLOB="9500068149ccfdcbf22e8ca654c3e85c9f8d02dc03008787b593d015b2cfd855860e000000000000000000000000093b9eadf201002069e71b233157150865aa403a122269cbe4262136bcdbd24a6b504941e6bf2cb57e4e3d711a464990ea6f8c3cd2f21e8e961e412648aa1950e4e1ba9d932e0f0488dba60ea7975e181ca880"]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x8]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "e06375fb", {0x1, 0x0, 0xfff, 0xc7}}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000001ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x47, &(0x7f0000000740)=ANY=[@ANYBLOB="0402003ff7f15c879718c31350af863b3edc765dda3cac1691a465f7a59999df56adea4774d6255446dcc60553993393da9625870c0b93c64096cea59a05e73746293a05224578dd0c45c9737bcd779975d608c82c3e97b58168f67872b57af9a45cb0b0c49ad72e946a362b7bb463173ff0f11d21019c2b2ed682"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x102, &(0x7f0000000700)=ANY=[@ANYBLOB='\al']) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "154f01c1"}) syz_open_dev$evdev(&(0x7f0000000200), 0x1000, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000280)=@conn_svc_rsp={0x0, 0x0, 0xa, "c9608177", {0x3, 0x104}}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe5d, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e51e, [{{0x9, 0x2, 0xffffffffffffff01}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe18, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x156791, [{{0x9, 0x2, 0x4c}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1907.973769][ T2674] usb 4-1: config index 5 descriptor too short (expected 65329, got 72) [ 1908.004004][ T4970] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1908.033767][T22170] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1908.063676][ T2674] usb 4-1: config index 6 descriptor too short (expected 65329, got 72) [ 1908.090481][T10590] udc-core: couldn't find an available UDC or it's busy [ 1908.097509][T10590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1908.143749][ T2674] usb 4-1: config index 7 descriptor too short (expected 65329, got 72) [ 1908.173700][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1908.182754][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.190847][ T4970] usb 5-1: Product: syz [ 1908.195089][ T4970] usb 5-1: Manufacturer: syz [ 1908.199771][ T4970] usb 5-1: SerialNumber: syz [ 1908.253612][T31041] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1908.313632][ T7361] usb 2-1: Service connection timeout for: 257 [ 1908.319823][ T7361] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1908.323644][ T2674] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1908.331945][ T7361] ath9k_htc: Failed to initialize the device [ 1908.337075][ T2674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.351224][ T2674] usb 4-1: Product: syz [ 1908.355510][ T2674] usb 4-1: Manufacturer: syz [ 1908.360117][ T2674] usb 4-1: SerialNumber: syz [ 1908.364807][ T4453] usb 2-1: ath9k_htc: USB layer deinitialized [ 1908.387441][ T2618] usb 3-1: USB disconnect, device number 37 [ 1908.403897][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1908.434465][ T2674] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1908.483689][ T4970] cdc_ncm 5-1:1.0: bind() failure [ 1908.490215][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1908.497331][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1908.503602][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1908.512747][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1908.520863][T22170] usb 6-1: SerialNumber: syz [ 1908.527776][ T4970] usb 5-1: USB disconnect, device number 115 [ 1908.543836][T31041] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1908.713611][ T32] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1908.720720][ T32] ath9k_htc: Failed to initialize the device [ 1908.727065][ T4453] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1908.735087][ T2618] usb 3-1: ath9k_htc: USB layer deinitialized [ 1908.793859][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1908.802452][T22170] usb 6-1: USB disconnect, device number 8 12:25:05 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8262) read$hidraw(r0, &(0x7f0000001240)=""/201, 0xc9) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) write$hidraw(r1, &(0x7f0000000000)="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", 0x800000) write$hidraw(r0, &(0x7f0000001200)="0e", 0x1) read$hidraw(r0, &(0x7f0000001340)=""/4096, 0x20002340) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab537c81472d6dbb997c8100"}) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x7, 0x10200) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000240)={0x8, 0x311, 0x79d7, 0x1, 0x0, 0x400}) 12:25:05 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:05 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x3, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:05 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000200)={0x33, "24498ea758c94aca4899affac9e75f7e67d0e8f52df7c1278f070f059b3d84176cdbd43b24c5fea41d545c82314d6ca61e99787133c8eeb1c1dcb056ce35b2f5"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0xa4800) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000580)={[{0xa3, 0x4e00, "0ac02942d6dfedd03411a08aaee0789cce679a49c5544e78f969b5f645f3692df61774f71d54e1697f6b65c9d693da1e022660e66828dc451163772b49a8f4933d761a734d4bba47995c76ae6e83f80764b26455fe13dfc9d4eba6c0672e0f52f888dd19a41203448dbf8cb2a707b54fdfa328c7bbd6db1d909ff05b2dc6359602e0a4588517b1e29586563b8dbe92f32b8650d63bc1488537c63a617b0ca0e18b8f7d"}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x85, 0x0) [ 1909.013651][ T4453] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1909.025933][ T33] audit: type=1800 audit(1626783905.584:3309): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=14209 res=0 errno=0 [ 1909.043833][ T2674] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1909.163592][ T7347] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1909.255082][ T2674] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1909.260810][ T2674] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1909.272452][T22170] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1909.293893][ T2618] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1909.533664][T31041] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1909.542724][T31041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.550868][T31041] usb 1-1: Product: syz [ 1909.555173][T31041] usb 1-1: Manufacturer: syz [ 1909.559770][T31041] usb 1-1: SerialNumber: syz [ 1909.564453][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1909.574248][ T2618] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1909.575612][ T7347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1909.633839][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1909.634222][T31041] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1909.723713][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1909.732758][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1909.740927][T22170] usb 6-1: SerialNumber: syz [ 1909.813707][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1909.822992][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.831104][ T7347] usb 5-1: Product: syz [ 1909.835292][ T7347] usb 5-1: Manufacturer: syz [ 1909.839968][ T7347] usb 5-1: SerialNumber: syz [ 1909.856431][T10675] udc-core: couldn't find an available UDC or it's busy [ 1909.863391][T10675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1909.864068][ T4453] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1909.880083][ T4453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.888180][ T4453] usb 2-1: Product: syz [ 1909.892382][ T4453] usb 2-1: Manufacturer: syz [ 1909.897085][ T4453] usb 2-1: SerialNumber: syz 12:25:06 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x4, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1909.944320][ T4453] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1909.994097][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1910.011931][T22170] usb 6-1: USB disconnect, device number 9 12:25:06 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1910.134024][ T7347] cdc_ncm 5-1:1.0: bind() failure [ 1910.140902][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1910.147976][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1910.156264][ T7347] usb 5-1: USB disconnect, device number 116 [ 1910.280571][T10675] udc-core: couldn't find an available UDC or it's busy [ 1910.287599][T10675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1910.296833][ T32] usb 4-1: USB disconnect, device number 57 [ 1910.314591][ T2674] ath9k_htc: Failed to initialize the device [ 1910.320714][ T32] usb 4-1: ath9k_htc: USB layer deinitialized [ 1910.383691][T31041] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1910.396437][ T2618] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1910.405716][ T2618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.413743][ T2618] usb 3-1: Product: syz [ 1910.417915][ T2618] usb 3-1: Manufacturer: syz [ 1910.422501][ T2618] usb 3-1: SerialNumber: syz [ 1910.427193][T22170] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1910.474433][ T2618] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1910.543602][ T7347] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1910.554030][ T4453] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1910.787030][T10733] udc-core: couldn't find an available UDC or it's busy [ 1910.794336][T10733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1910.802308][T10733] udc-core: couldn't find an available UDC or it's busy [ 1910.803692][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1910.809371][T10733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1910.831278][T10856] udc-core: couldn't find an available UDC or it's busy [ 1910.838275][T10856] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1910.848129][T10733] udc-core: couldn't find an available UDC or it's busy [ 1910.855205][T10733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1910.863200][T10733] udc-core: couldn't find an available UDC or it's busy [ 1910.870332][T10733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1910.878580][T10733] udc-core: couldn't find an available UDC or it's busy [ 1910.885594][T10733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1910.893760][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1910.902830][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1910.911069][T22170] usb 6-1: SerialNumber: syz [ 1910.960464][T10730] udc-core: couldn't find an available UDC or it's busy [ 1910.967697][T10730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1910.975300][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.986176][ T7347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 12:25:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000280)=0x1) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0xffffffffffffff31}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000100)="975476776e0ec8ce7e66e47dd2d3fc07ce6c8b317bf9b821bcafd16af7f729c8842a952bcbc3a9e3b288c46c"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r3 = syz_usb_connect_ath9k(0x3, 0x17, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xe9, &(0x7f00000018c0)=@generic={0x1, 0x0, 0xe1, "13d1a400", "30787dfe7b16bad77eec723743265f772ed9e9d56a4831e6b0848a47442c7db1ee62ba59e792e6a174e55f96599b9affd1197ea52898b62170a1b2472deda7ff36ca0c89816111aa81db5fa7af0ca40b80e0505099f7cff6ddcea5ed0b62e98b7a9d1eb8490a68367ab017e675a926927ebfc969afd7c2d848290b5d31332a1ca45e35a4d7d306996b07b895bc8e8c76d1e97dab94bb1014a49e584c2b8e3ae2f7ada50b0cc99ceb024d7dc1a2e9fef07f4c2c44c4620151e700526f63aae0ac36c6cc388bb3839117067cf4a0e503c80132d22a8f92cdcb90889990957573d429"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000340)=@conn_svc_rsp={0x0, 0x0, 0xa, "665d0e44", {0x3, 0x105, 0x0, 0x0, 0x0, 0x5, 0x3f}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "bbb20505", {0x1, 0xffc1, 0x0, 0x0, 0x8}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00004eb7ed5205134972438d0b57f468a8f8000000004e3400004e84b1db982dbd96f1d17bcae1dec5c5231a1a4b204519132a59683e09000000fa45bc6b"]) r5 = syz_usb_connect_ath9k(0x3, 0xffffffffffffffd7, 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x6d, &(0x7f0000000480)=ANY=[@ANYBLOB="4bfd18050000652de216b455845a1290ff9ec71f6b67dfcff46c83f90b34fa105f4acff923b955c205cfbdd743e859395584f23fa8be336b5aadeb2f7c78323e9732c9f9a33444df8a7792a61aa886a289cf84d55d905bd19f8c46844736c8f650ca919e99a1f9333ceaf9de36"]) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x7a, &(0x7f00000017c0)=@generic={0x7, 0x0, 0x72, "7976e749", "8a2dcbaad752fd38dcaa9428e6944e161d17f2f5bd575c13a134b7d6826bfea21fb464d8f79bd94ec8d875554c1614a8e4d2eb8344b5f738d90523f39b73639d75b4f8322449566e3e5ef7c920066db8ba551ed8c47ab19b113ed58a8ceffb0d2979b7196920ed7b818c842b3cb2ddeac491"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1911.043633][ T2618] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:25:07 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x5, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1911.093654][ T32] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1911.117054][ T7361] usb 1-1: USB disconnect, device number 100 [ 1911.173836][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1911.183656][T22170] usb 6-1: USB disconnect, device number 10 [ 1911.200586][ T2674] usb 2-1: USB disconnect, device number 61 [ 1911.204159][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1911.215890][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.223930][ T7347] usb 5-1: Product: syz [ 1911.228109][ T7347] usb 5-1: Manufacturer: syz [ 1911.232720][ T7347] usb 5-1: SerialNumber: syz 12:25:08 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x4, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1911.463757][ T2618] usb 3-1: ath9k_htc: Invalid TX pipe: 0 [ 1911.469556][ T2618] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1911.533745][ T7347] cdc_ncm 5-1:1.0: bind() failure [ 1911.541900][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1911.548768][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1911.553769][T22170] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1911.553835][ T32] usb 4-1: device descriptor read/64, error -71 [ 1911.570426][ T7347] usb 5-1: USB disconnect, device number 117 12:25:08 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:08 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1911.864465][ T4970] usb 3-1: USB disconnect, device number 38 [ 1911.875695][ T2618] ath9k_htc: Failed to initialize the device [ 1911.881986][ T4970] usb 3-1: ath9k_htc: USB layer deinitialized [ 1911.923648][ T7347] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1911.943981][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1911.993642][T31041] usb 1-1: Service connection timeout for: 258 [ 1911.999823][T31041] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1912.010339][T31041] ath9k_htc: Failed to initialize the device [ 1912.013661][ T32] usb 4-1: too many configurations: 186, using maximum allowed: 8 [ 1912.017279][ T7361] usb 1-1: ath9k_htc: USB layer deinitialized [ 1912.073753][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1912.083122][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1912.091220][T22170] usb 6-1: SerialNumber: syz [ 1912.095924][ T4453] usb 2-1: Service connection timeout for: 257 [ 1912.102067][ T4453] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1912.118053][ T4453] ath9k_htc: Failed to initialize the device [ 1912.124212][ T2674] usb 2-1: ath9k_htc: USB layer deinitialized [ 1912.143642][ T32] usb 4-1: config index 0 descriptor too short (expected 65329, got 72) [ 1912.243659][ T32] usb 4-1: config index 1 descriptor too short (expected 65329, got 72) [ 1912.283704][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.294606][ T7347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 12:25:08 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x6, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1912.353959][ T32] usb 4-1: config index 2 descriptor too short (expected 65329, got 72) [ 1912.383636][ T7361] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1912.414086][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1912.425932][T22170] usb 6-1: USB disconnect, device number 11 [ 1912.437284][ T32] usb 4-1: config index 3 descriptor too short (expected 65329, got 72) [ 1912.493660][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1912.502748][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.510783][ T7347] usb 5-1: Product: syz [ 1912.513589][ T2674] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1912.514969][ T7347] usb 5-1: Manufacturer: syz [ 1912.524149][ T32] usb 4-1: config index 4 descriptor too short (expected 65329, got 72) [ 1912.527116][ T7347] usb 5-1: SerialNumber: syz [ 1912.613653][ T32] usb 4-1: config index 5 descriptor too short (expected 65329, got 72) [ 1912.683643][ T8666] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1912.694208][ T32] usb 4-1: config index 6 descriptor too short (expected 65329, got 72) 12:25:09 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x5, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1912.773928][ T32] usb 4-1: config index 7 descriptor too short (expected 65329, got 72) [ 1912.794646][ T2674] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1912.802575][T22170] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1912.823962][ T7347] cdc_ncm 5-1:1.0: bind() failure [ 1912.830935][ T7361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.841868][ T7361] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1912.855091][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1912.861998][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1912.869732][ T7347] usb 5-1: USB disconnect, device number 118 [ 1912.933690][ T32] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1912.942763][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.951010][ T32] usb 4-1: Product: syz [ 1912.955255][ T32] usb 4-1: Manufacturer: syz [ 1912.959867][ T32] usb 4-1: SerialNumber: syz [ 1913.004222][ T32] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1913.023854][ T8666] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1913.053663][ T7361] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1913.062749][ T7361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.070968][ T7361] usb 1-1: Product: syz [ 1913.075167][ T7361] usb 1-1: Manufacturer: syz [ 1913.079848][ T7361] usb 1-1: SerialNumber: syz 12:25:09 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000200)={0x33, "24498ea758c94aca4899affac9e75f7e67d0e8f52df7c1278f070f059b3d84176cdbd43b24c5fea41d545c82314d6ca61e99787133c8eeb1c1dcb056ce35b2f5"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0xa4800) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000580)={[{0xa3, 0x4e00, "0ac02942d6dfedd03411a08aaee0789cce679a49c5544e78f969b5f645f3692df61774f71d54e1697f6b65c9d693da1e022660e66828dc451163772b49a8f4933d761a734d4bba47995c76ae6e83f80764b26455fe13dfc9d4eba6c0672e0f52f888dd19a41203448dbf8cb2a707b54fdfa328c7bbd6db1d909ff05b2dc6359602e0a4588517b1e29586563b8dbe92f32b8650d63bc1488537c63a617b0ca0e18b8f7d"}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x85, 0x0) [ 1913.163989][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1913.200191][ T33] audit: type=1800 audit(1626783909.754:3310): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=14209 res=0 errno=0 [ 1913.243722][ T8666] usb 3-1: unable to read config index 1 descriptor/start: -71 [ 1913.251345][ T8666] usb 3-1: can't read configurations, error -71 [ 1913.253733][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1913.257652][ T7347] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1913.266654][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1913.282502][T22170] usb 6-1: SerialNumber: syz 12:25:09 executing program 0: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:09 executing program 0: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1913.403812][ T7361] cdc_ncm 1-1:1.0: bind() failure [ 1913.411258][ T7361] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1913.418424][ T7361] cdc_ncm 1-1:1.1: bind() failure [ 1913.436011][ T7361] usb 1-1: USB disconnect, device number 101 12:25:10 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x7, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1913.543779][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1913.554581][T22170] usb 6-1: USB disconnect, device number 12 [ 1913.573661][ T32] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1913.603786][ T2674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1913.612842][ T2674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.620861][ T2674] usb 2-1: Product: syz [ 1913.625072][ T2674] usb 2-1: Manufacturer: syz [ 1913.629798][ T2674] usb 2-1: SerialNumber: syz [ 1913.643615][ T8666] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1913.674252][ T2674] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1913.733752][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.744841][ T7347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1913.795271][ T32] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1913.800942][ T32] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1913.823596][ T7361] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1913.923676][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1913.932733][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.933703][T22170] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1913.945472][ T7347] usb 5-1: Product: syz [ 1913.957298][ T7347] usb 5-1: Manufacturer: syz [ 1913.961883][ T7347] usb 5-1: SerialNumber: syz [ 1913.966687][ T8666] usb 3-1: too many configurations: 186, using maximum allowed: 8 12:25:10 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x7, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1914.173651][ T7361] usb 1-1: too many configurations: 38, using maximum allowed: 8 [ 1914.243653][ T2674] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1914.273929][ T7347] cdc_ncm 5-1:1.0: bind() failure [ 1914.282390][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1914.289550][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1914.306655][ T7347] usb 5-1: USB disconnect, device number 119 [ 1914.314140][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1914.397174][T10865] udc-core: couldn't find an available UDC or it's busy [ 1914.404648][T10865] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1914.412648][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1914.422099][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1914.430500][T22170] usb 6-1: SerialNumber: syz [ 1914.648856][T10909] udc-core: couldn't find an available UDC or it's busy [ 1914.655954][T10909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1914.687238][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1914.700833][T22170] usb 6-1: USB disconnect, device number 13 [ 1914.713592][ T7347] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1914.823010][T10865] udc-core: couldn't find an available UDC or it's busy [ 1914.830042][T10865] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1914.840510][T31041] usb 4-1: USB disconnect, device number 58 [ 1914.854583][ T32] ath9k_htc: Failed to initialize the device [ 1914.860640][T31041] usb 4-1: ath9k_htc: USB layer deinitialized [ 1914.895136][ T4453] usb 2-1: USB disconnect, device number 62 [ 1914.913947][ T8666] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1914.923027][ T8666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.931292][ T8666] usb 3-1: Product: syz [ 1914.935566][ T8666] usb 3-1: Manufacturer: syz [ 1914.940937][ T8666] usb 3-1: SerialNumber: syz [ 1914.994423][ T8666] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1915.103724][ T7361] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1915.112927][ T7361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.120942][ T7361] usb 1-1: Product: syz [ 1915.125195][ T7361] usb 1-1: Manufacturer: syz [ 1915.129826][ T7361] usb 1-1: SerialNumber: syz [ 1915.193754][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1915.204970][ T7347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1915.218405][ T7361] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:11 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x8, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b5f5b10009058105db8d30a3ea625476c9ef7f5c06658eeb85e3bd2000000073695ba308abed6e074f16"], 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x22542) write$hidraw(r2, &(0x7f0000000000)="b8", 0x1) ioctl$HIDIOCGRAWINFO(r2, 0x6628, 0x0) write$hidraw(r2, &(0x7f0000000240)="715801a347774c0b7a21649261d96f624c9b2d89388c491bc10231f2ab302f9673c4174aa2573a2620d73261f6aadbe33d817797385054e52e3f8eee5937f2e7762589d0044c9b96cbe38348d340a46ee93012e943f896c0bdf59ec913967f84676763e39a53ac99c5b3d19a62cc9bea336420d6210e5b1534edec4bcb623f48fa7e5f8a324f2d945fbe9fe121dffcb3387be24ca4a2276f7e4c1a4153c11ab2dd4020366dbc1a0a2732924f9e8a017d2069744df42a991f9e1ac50b2187a2b9b29415821f97b99a42fd6b62df3c50fe3387c1917f00362c889b2dfa20de78c9f92dce0571fc01c6", 0xe8) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000180)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xa, "7f00000000000000d239"}, 0x0, 0x0, 0x0, 0x0}) 12:25:11 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1915.394151][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1915.403275][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.411335][ T7347] usb 5-1: Product: syz [ 1915.415581][ T7347] usb 5-1: Manufacturer: syz [ 1915.420184][ T7347] usb 5-1: SerialNumber: syz 12:25:12 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x9, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1915.643589][T31041] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1915.654103][T22170] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1915.673957][ T8666] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1915.703689][ T7347] cdc_ncm 5-1:1.0: bind() failure [ 1915.710828][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1915.717996][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1915.735484][ T7347] usb 5-1: USB disconnect, device number 120 [ 1915.753691][ T2674] usb 2-1: Service connection timeout for: 257 [ 1915.759883][ T2674] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1915.768598][ T2674] ath9k_htc: Failed to initialize the device [ 1915.774882][ T4453] usb 2-1: ath9k_htc: USB layer deinitialized [ 1915.803665][ T7361] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1916.003671][T31041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 7 [ 1916.014798][T31041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1499, setting to 1024 [ 1916.025979][T31041] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1916.033752][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1916.035122][T31041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.058839][T31041] usb 4-1: config 0 descriptor?? [ 1916.106686][T31041] igorplugusb 4-1:0.0: endpoint incorrect [ 1916.116150][ T8666] usb 3-1: ath9k_htc: Invalid TX pipe: 0 [ 1916.121837][ T8666] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1916.129937][ T7347] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1916.143869][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1916.152903][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1916.160911][T22170] usb 6-1: SerialNumber: syz [ 1916.165803][ T4453] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1916.230154][T10991] udc-core: couldn't find an available UDC or it's busy [ 1916.237188][T10991] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1916.306222][T11073] udc-core: couldn't find an available UDC or it's busy [ 1916.313193][T11073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:25:13 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x9, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1916.453952][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1916.460830][ T4453] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1916.473180][T22170] usb 6-1: USB disconnect, device number 14 [ 1916.488263][ T32] usb 1-1: USB disconnect, device number 102 [ 1916.493947][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.507870][ T7347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1916.521743][ T2618] usb 3-1: USB disconnect, device number 40 [ 1916.534731][ T8666] ath9k_htc: Failed to initialize the device [ 1916.540812][ T2618] usb 3-1: ath9k_htc: USB layer deinitialized [ 1916.673724][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1916.682760][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.690790][ T7347] usb 5-1: Product: syz [ 1916.695000][ T7347] usb 5-1: Manufacturer: syz [ 1916.699651][ T7347] usb 5-1: SerialNumber: syz [ 1916.853598][T22170] usb 6-1: new high-speed USB device number 15 using dummy_hcd 12:25:13 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0xa, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:13 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) write$hidraw(r0, &(0x7f0000000000)="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", 0x1db) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f00000003c0)=""/17, 0x11) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000002c0)=""/99) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xb, &(0x7f0000000200)="1585cb69d33c45218f6652"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x9, 0x0, 0x0, 0x0, "93e50c1b69e99a28d4a12e2bfbcbf853182868aeed5dbe71e5172d2157b00b5b"}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x6ab82) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "c7aa4a46", {0x3, 0x2f31c8bc2473a7a2, 0x0, 0x4, 0x480, 0x2}}) [ 1916.993717][ T7347] cdc_ncm 5-1:1.0: bind() failure 12:25:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "56991c17"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="0000004e0100004ed40000000500004e65331de2cc0000002800004e2c2274038e5b12f73664d5a54b0a5e8ecbc7c183d4ff29a5e04a00"/68]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, "aacdbd9d", {0x3, 0x101, 0x0, 0xff, 0x0, 0x0, 0x4}}) [ 1917.022699][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1917.029570][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1917.060964][ T7347] usb 5-1: USB disconnect, device number 121 [ 1917.073383][ T33] audit: type=1800 audit(1626783913.624:3311): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14146 res=0 errno=0 [ 1917.213661][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1917.273646][ T7361] usb 1-1: Service connection timeout for: 257 [ 1917.279925][ T7361] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1917.290765][ T7361] ath9k_htc: Failed to initialize the device [ 1917.297305][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1917.303817][ T4453] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1917.313268][ T4453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.321289][ T4453] usb 2-1: Product: syz [ 1917.325510][ T4453] usb 2-1: Manufacturer: syz [ 1917.330106][ T4453] usb 2-1: SerialNumber: syz [ 1917.334932][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1917.344023][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1917.352017][T22170] usb 6-1: SerialNumber: syz [ 1917.404443][ T2618] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1917.414433][ T4453] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1917.493599][ T7347] usb 5-1: new high-speed USB device number 122 using dummy_hcd 12:25:14 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xa, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1917.623736][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1917.634809][T22170] usb 6-1: USB disconnect, device number 15 [ 1917.703687][ T32] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1917.873643][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.884647][ T7347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1917.923713][ T2618] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1917.932772][ T2618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.940970][ T2618] usb 3-1: Product: syz [ 1917.945269][ T2618] usb 3-1: Manufacturer: syz [ 1917.949873][ T2618] usb 3-1: SerialNumber: syz [ 1917.993723][ T4453] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1918.004053][ T2618] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1918.023594][T22170] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1918.034417][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1918.053646][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1918.062800][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.071052][ T7347] usb 5-1: Product: syz [ 1918.075261][ T7347] usb 5-1: Manufacturer: syz [ 1918.079861][ T7347] usb 5-1: SerialNumber: syz 12:25:14 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0xf, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xff, "ed105400000000003ec13e2000"}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000008106b1d010140000102030109025f00c56254ba0009040000000103"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/158) [ 1918.363872][ T7347] cdc_ncm 5-1:1.0: bind() failure [ 1918.372450][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1918.379406][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1918.387013][ T2674] usb 4-1: USB disconnect, device number 59 [ 1918.397662][T11081] udc-core: couldn't find an available UDC or it's busy [ 1918.404819][T11081] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1918.424087][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1918.434683][ T7347] usb 5-1: USB disconnect, device number 122 [ 1918.523779][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1918.532863][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1918.540886][T22170] usb 6-1: SerialNumber: syz [ 1918.643715][ T2618] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1918.653262][ T8666] usb 2-1: USB disconnect, device number 63 12:25:15 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xb, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1918.813912][ T7347] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1918.813924][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1918.816106][ T2674] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1918.836537][T22170] usb 6-1: USB disconnect, device number 16 [ 1918.913746][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1918.923024][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.931088][ T32] usb 1-1: Product: syz [ 1918.935351][ T32] usb 1-1: Manufacturer: syz [ 1918.939942][ T32] usb 1-1: SerialNumber: syz [ 1918.984220][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1919.063723][ T2618] usb 3-1: ath9k_htc: Invalid TX pipe: 0 [ 1919.069392][ T2618] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1919.083729][ T2674] usb 4-1: Using ep0 maxpacket: 16 12:25:15 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1919.183839][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1919.194993][ T7347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 1919.213751][T22170] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1919.221435][ T2674] usb 4-1: config 98 has too many interfaces: 197, using maximum allowed: 32 [ 1919.230596][ T2674] usb 4-1: config 98 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.240802][ T2674] usb 4-1: config 98 has 1 interface, different from the descriptor's value: 197 [ 1919.363769][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1919.372864][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.380886][ T7347] usb 5-1: Product: syz [ 1919.385210][ T7347] usb 5-1: Manufacturer: syz [ 1919.389805][ T7347] usb 5-1: SerialNumber: syz [ 1919.414055][ T2674] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1919.423135][ T2674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.431190][ T2674] usb 4-1: Product: syz [ 1919.435393][ T2674] usb 4-1: Manufacturer: syz [ 1919.440003][ T2674] usb 4-1: SerialNumber: syz [ 1919.468060][ T7361] usb 3-1: USB disconnect, device number 41 [ 1919.494939][ T2618] ath9k_htc: Failed to initialize the device [ 1919.501015][ T7361] usb 3-1: ath9k_htc: USB layer deinitialized [ 1919.514294][ T4453] usb 2-1: Service connection timeout for: 257 [ 1919.520486][ T4453] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1919.533155][ T4453] ath9k_htc: Failed to initialize the device [ 1919.539384][ T8666] usb 2-1: ath9k_htc: USB layer deinitialized 12:25:16 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x4, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1919.623674][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1919.643587][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1919.673888][ T7347] cdc_ncm 5-1:1.0: bind() failure [ 1919.684080][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1919.690988][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1919.703478][ T7347] usb 5-1: USB disconnect, device number 123 [ 1919.773730][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1919.782940][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1919.791123][T22170] usb 6-1: SerialNumber: syz [ 1919.844033][ T2674] usb 4-1: MIDIStreaming interface descriptor not found [ 1919.864009][ T2674] usb 4-1: USB disconnect, device number 60 [ 1919.893980][ T8666] usb 2-1: new high-speed USB device number 64 using dummy_hcd 12:25:16 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xf, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1920.056704][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1920.063692][ T32] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 1920.066687][ T7347] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1920.069365][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1920.087795][T22170] usb 6-1: USB disconnect, device number 17 [ 1920.173681][ T8666] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1920.243735][ T2674] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1920.281593][T11147] udc-core: couldn't find an available UDC or it's busy [ 1920.288802][T11147] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1920.300275][ T4970] usb 1-1: USB disconnect, device number 103 [ 1920.309432][ T32] ath9k_htc: Failed to initialize the device [ 1920.317347][ T4970] usb 1-1: ath9k_htc: USB layer deinitialized [ 1920.443662][ T7347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1920.473656][ T7361] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1920.543630][T22170] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1920.633904][ T7347] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1920.643006][ T7347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.651455][ T7347] usb 5-1: Product: syz [ 1920.655712][ T7347] usb 5-1: Manufacturer: syz [ 1920.660353][ T7347] usb 5-1: SerialNumber: syz [ 1920.705877][ T7347] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1920.712705][ T7347] cdc_ncm 5-1:1.1: bind() failure [ 1920.721524][ T7361] usb 4-1: Using ep0 maxpacket: 16 12:25:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "56991c17"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="0000004e0100004ed40000000500004e65331de2cc0000002800004e2c2274038e5b12f73664d5a54b0a5e8ecbc7c183d4ff29a5e04a00"/68]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, "aacdbd9d", {0x3, 0x101, 0x0, 0xff, 0x0, 0x0, 0x4}}) [ 1920.843712][ T7361] usb 4-1: config 98 has too many interfaces: 197, using maximum allowed: 32 [ 1920.852533][ T7361] usb 4-1: config 98 has an invalid descriptor of length 0, skipping remainder of the config [ 1920.862721][ T7361] usb 4-1: config 98 has 1 interface, different from the descriptor's value: 197 [ 1920.873763][ T2674] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1920.882838][ T2674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:25:17 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1920.890933][ T2674] usb 3-1: Product: syz [ 1920.913680][ T2674] usb 3-1: can't set config #1, error -71 [ 1920.921150][ T2674] usb 3-1: USB disconnect, device number 42 [ 1920.922063][T31041] usb 5-1: USB disconnect, device number 124 [ 1920.953625][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1921.013738][ T8666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1921.022925][ T8666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.031082][ T8666] usb 2-1: Product: syz [ 1921.035344][ T8666] usb 2-1: Manufacturer: syz [ 1921.039937][ T8666] usb 2-1: SerialNumber: syz [ 1921.044603][ T7361] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1921.053698][ T7361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.061695][ T7361] usb 4-1: Product: syz [ 1921.064033][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1921.066061][ T7361] usb 4-1: Manufacturer: syz [ 1921.075338][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1921.079925][ T7361] usb 4-1: SerialNumber: syz [ 1921.087933][T22170] usb 6-1: SerialNumber: syz [ 1921.092614][ T7347] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1921.144544][ T8666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:17 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x18, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1921.323574][ T2674] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1921.353920][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1921.381043][T22170] usb 6-1: USB disconnect, device number 18 [ 1921.393953][ T7347] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1921.403804][T31041] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1921.453732][ T7361] usb 4-1: MIDIStreaming interface descriptor not found [ 1921.470954][ T7361] usb 4-1: USB disconnect, device number 61 12:25:18 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) write$hidraw(r0, &(0x7f0000000000)="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", 0x1db) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f00000003c0)=""/17, 0x11) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000002c0)=""/99) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xb, &(0x7f0000000200)="1585cb69d33c45218f6652"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x9, 0x0, 0x0, 0x0, "93e50c1b69e99a28d4a12e2bfbcbf853182868aeed5dbe71e5172d2157b00b5b"}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x6ab82) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "c7aa4a46", {0x3, 0x2f31c8bc2473a7a2, 0x0, 0x4, 0x480, 0x2}}) 12:25:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xff, "ed105400000000003ec13e2000"}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000008106b1d010140000102030109025f00c56254ba0009040000000103"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/158) [ 1921.633123][ T33] audit: type=1800 audit(1626783918.184:3312): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14338 res=0 errno=0 12:25:18 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) write$hidraw(r0, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb9751e2032bec608a62330d7b20f024c4444f6744028efa407cf24a5d88cb5ee5770ade7610a4b7c9169614fdd7c703c603d2ec04921ac203fba7b2372acafdc33dbdda972fa7fdc8825c5511e8d52328688097ff3f7d1788995571700db2d76712cf06c8b42e3006b302f686c7f94a958ffa68f90225bacd9a2a7ce6df2b474f77db88b05050ce7d5e5b82dc11dc39c3d0534fd56dfa5b2a20d510195f3e4304de5883a7ba1f80b2487276105a82dc2371edbfad94d518fdf74e05f33ca361ca3b2e75a640ac3412f1b3ed909293f96abe6bf0b19207844be8a509f190dbda564bc15e175c3b904a4be4", 0x1db) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f00000003c0)=""/17, 0x11) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000002c0)=""/99) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xb, &(0x7f0000000200)="1585cb69d33c45218f6652"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x9, 0x0, 0x0, 0x0, "93e50c1b69e99a28d4a12e2bfbcbf853182868aeed5dbe71e5172d2157b00b5b"}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x6ab82) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "c7aa4a46", {0x3, 0x2f31c8bc2473a7a2, 0x0, 0x4, 0x480, 0x2}}) 12:25:18 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) write$hidraw(r0, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb9751e2032bec608a62330d7b20f024c4444f6744028efa407cf24a5d88cb5ee5770ade7610a4b7c9169614fdd7c703c603d2ec04921ac203fba7b2372acafdc33dbdda972fa7fdc8825c5511e8d52328688097ff3f7d1788995571700db2d76712cf06c8b42e3006b302f686c7f94a958ffa68f90225bacd9a2a7ce6df2b474f77db88b05050ce7d5e5b82dc11dc39c3d0534fd56dfa5b2a20d510195f3e4304de5883a7ba1f80b2487276105a82dc2371edbfad94d518fdf74e05f33ca361ca3b2e75a640ac3412f1b3ed909293f96abe6bf0b19207844be8a509f190dbda564bc15e175c3b904a4be4", 0x1db) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f00000003c0)=""/17, 0x11) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000002c0)=""/99) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xb, &(0x7f0000000200)="1585cb69d33c45218f6652"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x9, 0x0, 0x0, 0x0, "93e50c1b69e99a28d4a12e2bfbcbf853182868aeed5dbe71e5172d2157b00b5b"}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x6ab82) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "c7aa4a46", {0x3, 0x2f31c8bc2473a7a2, 0x0, 0x4, 0x480, 0x2}}) [ 1921.674069][ T7347] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 1921.681697][ T7347] usb 1-1: can't read configurations, error -71 [ 1921.689414][ T33] audit: type=1800 audit(1626783918.244:3313): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14338 res=0 errno=0 [ 1921.723169][ T33] audit: type=1800 audit(1626783918.274:3314): pid=11414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14338 res=0 errno=0 [ 1921.763710][ T8666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1921.803744][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.823630][T22170] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1921.953624][ T2674] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1921.962743][ T2674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.970760][ T2674] usb 3-1: Product: syz [ 1921.973740][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1921.974956][ T2674] usb 3-1: Manufacturer: syz [ 1921.984134][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.988560][ T2674] usb 3-1: SerialNumber: syz [ 1921.996544][T31041] usb 5-1: Product: syz [ 1922.005346][T31041] usb 5-1: Manufacturer: syz [ 1922.010039][T31041] usb 5-1: SerialNumber: syz [ 1922.014896][ T7361] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1922.054248][ T2674] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1922.066502][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1922.073307][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1922.083797][ T7347] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1922.168342][T11243] udc-core: couldn't find an available UDC or it's busy [ 1922.175411][T11243] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1922.213811][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 12:25:18 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x9, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1922.271370][T31041] usb 5-1: USB disconnect, device number 125 [ 1922.277451][ T7361] usb 4-1: Using ep0 maxpacket: 16 [ 1922.314120][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1922.323239][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1922.331280][T22170] usb 6-1: SerialNumber: syz [ 1922.373874][ T7347] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1922.387416][ T4453] usb 2-1: USB disconnect, device number 64 [ 1922.394304][ T7361] usb 4-1: config 98 has too many interfaces: 197, using maximum allowed: 32 [ 1922.403155][ T7361] usb 4-1: config 98 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.413373][ T7361] usb 4-1: config 98 has 1 interface, different from the descriptor's value: 197 12:25:19 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x1d, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1922.583894][ T7361] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1922.593013][ T7361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.601054][ T7361] usb 4-1: Product: syz [ 1922.605272][ T7361] usb 4-1: Manufacturer: syz [ 1922.609878][ T7361] usb 4-1: SerialNumber: syz [ 1922.623720][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1922.636572][T22170] usb 6-1: USB disconnect, device number 19 [ 1922.723645][T31041] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1922.734158][ T2674] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:25:19 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1922.993712][ T7361] usb 4-1: MIDIStreaming interface descriptor not found [ 1923.005622][ T7361] usb 4-1: USB disconnect, device number 62 [ 1923.083715][T22170] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1923.083777][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1923.163724][ T2674] usb 3-1: ath9k_htc: Invalid TX pipe: 0 [ 1923.169406][ T2674] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1923.183702][ T7347] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1923.192777][ T7347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.200804][ T7347] usb 1-1: Product: syz [ 1923.204999][ T7347] usb 1-1: Manufacturer: syz [ 1923.209586][ T7347] usb 1-1: SerialNumber: syz [ 1923.214221][ T8666] usb 2-1: Service connection timeout for: 257 [ 1923.220378][ T8666] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1923.228828][ T8666] ath9k_htc: Failed to initialize the device [ 1923.235060][ T4453] usb 2-1: ath9k_htc: USB layer deinitialized [ 1923.274121][ T7347] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1923.303953][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1923.313043][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.321155][T31041] usb 5-1: Product: syz [ 1923.325349][T31041] usb 5-1: Manufacturer: syz [ 1923.329936][T31041] usb 5-1: SerialNumber: syz 12:25:19 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1923.374119][T31041] hub 5-1:1.0: bad descriptor, ignoring hub [ 1923.380078][T31041] hub: probe of 5-1:1.0 failed with error -5 [ 1923.389256][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1923.396155][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1923.483849][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 12:25:20 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xa, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1923.573953][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1923.583027][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1923.591086][T22170] usb 6-1: SerialNumber: syz [ 1923.604483][T31041] usb 3-1: USB disconnect, device number 43 [ 1923.626310][ T2674] ath9k_htc: Failed to initialize the device [ 1923.632380][T31041] usb 3-1: ath9k_htc: USB layer deinitialized [ 1923.632400][ T4453] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1923.693906][ T7361] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1923.853642][ T7347] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1923.900079][ T2661] usb 5-1: reset high-speed USB device number 126 using dummy_hcd [ 1923.913807][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1923.922929][T22170] usb 6-1: USB disconnect, device number 20 [ 1923.953812][ T4453] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1923.973751][ T7361] usb 4-1: too many configurations: 38, using maximum allowed: 8 12:25:20 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:20 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1924.223629][ T2661] usb 5-1: device firmware changed [ 1924.229002][ T2661] usb 5-1: USB disconnect, device number 126 [ 1924.275115][ T7347] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 1924.280881][ T7347] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1924.403580][T31041] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1924.476452][T11414] udc-core: couldn't find an available UDC or it's busy [ 1924.483691][T11414] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1924.494739][T30954] usb 1-1: USB disconnect, device number 105 [ 1924.503941][T22170] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1924.525160][ T7347] ath9k_htc: Failed to initialize the device [ 1924.531302][T30954] usb 1-1: ath9k_htc: USB layer deinitialized [ 1924.603612][ T2661] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1924.793646][ T4453] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1924.802782][ T4453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.811010][ T4453] usb 2-1: Product: syz [ 1924.813737][T31041] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1924.815208][ T4453] usb 2-1: Manufacturer: syz [ 1924.830713][ T4453] usb 2-1: SerialNumber: syz [ 1924.854470][ T7361] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1924.863720][ T7361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.871802][ T7361] usb 4-1: Product: syz [ 1924.873722][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1924.875982][ T7361] usb 4-1: Manufacturer: syz [ 1924.889453][ T4453] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1924.893497][ T7361] usb 4-1: SerialNumber: syz [ 1924.934309][ T7361] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:21 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1a7bc2) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x5, 0x1) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8c562) write$hidraw(r3, &(0x7f0000000000)="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", 0x800000) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) syz_open_dev$hidraw(0x0, 0x200000001, 0xc480) read$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r0, &(0x7f0000001280)="be1f360545934e59", 0x8) syz_open_dev$hidraw(&(0x7f0000002440), 0x401, 0x10802) read$hidraw(r2, &(0x7f0000002480)=""/4101, 0x1005) write$hidraw(r1, &(0x7f0000000000)="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", 0x30b300) syz_open_dev$hidraw(&(0x7f0000001200), 0x1, 0x10040) read$hidraw(0xffffffffffffffff, &(0x7f0000001300)=""/196, 0xc4) syz_open_dev$hidraw(&(0x7f0000001240), 0x0, 0x38981) syz_open_dev$hidraw(0x0, 0x49, 0x480080) read$hidraw(0xffffffffffffffff, &(0x7f0000001440)=""/4096, 0x1000) write$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000001340)=""/4096, 0x20002340) read$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 1924.993646][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1925.003108][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1925.011292][T22170] usb 6-1: SerialNumber: syz [ 1925.023950][ T2661] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1925.035058][T31041] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1925.044157][T31041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.052156][T31041] usb 3-1: Product: syz [ 1925.056364][T31041] usb 3-1: Manufacturer: syz [ 1925.060958][T31041] usb 3-1: SerialNumber: syz [ 1925.065673][ T33] audit: type=1800 audit(1626783921.614:3315): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14338 res=0 errno=0 [ 1925.090044][ T33] audit: type=1804 audit(1626783921.624:3316): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723137383937313137342F73797A6B616C6C65722E334567545A452F3937342F48C7C060 dev="sda1" ino=14338 res=1 errno=0 [ 1925.123644][ T33] audit: type=1804 audit(1626783921.624:3317): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723137383937313137342F73797A6B616C6C65722E334567545A452F3937342F48C7C060 dev="sda1" ino=14338 res=1 errno=0 [ 1925.156388][T31041] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1925.159265][ T33] audit: type=1804 audit(1626783921.714:3318): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723137383937313137342F73797A6B616C6C65722E334567545A452F3937342F48C7C060 dev="sda1" ino=14338 res=1 errno=0 [ 1925.163198][T31041] cdc_ncm 3-1:1.1: bind() failure [ 1925.218506][ T33] audit: type=1804 audit(1626783921.764:3319): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723137383937313137342F73797A6B616C6C65722E334567545A452F3937342F48C7C060 dev="sda1" ino=14338 res=1 errno=0 12:25:21 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1a7bc2) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x5, 0x1) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0xfffffffffffffffe, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8c562) write$hidraw(r3, &(0x7f0000000000)="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", 0x800000) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) syz_open_dev$hidraw(0x0, 0x200000001, 0xc480) read$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r0, &(0x7f0000001280)="be1f360545934e59", 0x8) syz_open_dev$hidraw(&(0x7f0000002440), 0x401, 0x10802) read$hidraw(r2, &(0x7f0000002480)=""/4101, 0x1005) write$hidraw(r1, &(0x7f0000000000)="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", 0x30b300) syz_open_dev$hidraw(&(0x7f0000001200), 0x1, 0x10040) read$hidraw(0xffffffffffffffff, &(0x7f0000001300)=""/196, 0xc4) syz_open_dev$hidraw(&(0x7f0000001240), 0x0, 0x38981) syz_open_dev$hidraw(0x0, 0x49, 0x480080) read$hidraw(0xffffffffffffffff, &(0x7f0000001440)=""/4096, 0x1000) write$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000001340)=""/4096, 0x20002340) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 12:25:21 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1925.256227][ T33] audit: type=1800 audit(1626783921.814:3320): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14338 res=0 errno=0 [ 1925.277722][ T33] audit: type=1800 audit(1626783921.814:3321): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14338 res=0 errno=0 [ 1925.303767][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1925.324561][T22170] usb 6-1: USB disconnect, device number 21 [ 1925.353990][ T2661] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1925.363084][ T2661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:25:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x132) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000006c0)="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", 0x19d) syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffffffffd, 0x408042) write$hidraw(0xffffffffffffffff, &(0x7f0000000880)="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", 0x807) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="36825607e3cd963aa192562e", 0xc) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)="1585cb69"}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x8a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) read$hidraw(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffef5, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x21, [{{0x9, 0x2, 0xbf1874d88a7377fe}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) [ 1925.371148][ T2661] usb 5-1: Product: syz [ 1925.375357][ T2661] usb 5-1: Manufacturer: syz [ 1925.379960][ T2661] usb 5-1: SerialNumber: syz [ 1925.389682][ T2674] usb 3-1: USB disconnect, device number 44 [ 1925.456209][ T2661] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1925.463315][ T2661] cdc_ncm 5-1:1.1: bind() failure 12:25:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x62, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e464, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x2, &(0x7f0000000e80)=@string={0x2}}, {0x2, 0x0}, {0x2, &(0x7f0000000f80)=@string={0x2}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x7f, 0x1c, 0x8, 0xfffffffe, "b1417a5b83d40a394aae1c3f45b7ac4093a627566305fc401c40207518763d36"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect(0x6, 0x517, &(0x7f0000000fc0)={{0x12, 0x1, 0x310, 0x8d, 0x8f, 0x36, 0x20, 0xc52, 0x2832, 0x6cc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x505, 0x2, 0x0, 0x4, 0xd0, 0x43, [{{0x9, 0x4, 0x84, 0x4, 0xa, 0x53, 0x63, 0x82, 0x9, [@hid_hid={0x9, 0x21, 0x22, 0x20, 0x1, {0x22, 0x7a1}}], [{{0x9, 0x5, 0xe, 0x10, 0x20, 0x0, 0x7f, 0x1, [@generic={0xd6, 0x7, "64180036ce73be2cc7a3145746858d9179c1a247c469b78826f8673483a8aba1fca289e10cc14325f850834cae85a500587b08d92e36c5dd84f62ced75d42cf9a1b04d9ae10a03778afc37d840061f42348deeb8d695e7474999a422139ee6d1a694e4ac06df46bac3fc6705bb3d9303314865feeb59a93a1cefb8dc2ba637e8fe5c71c83488b540f365846aa2ef10cddb78ad494acbd8853a4d54e1319e91ad24207799b76bfad7387709452dfe5e1c5b5c99f2910be36bdf06e0b290a74e4585880a54c8fb06264fe46b3e2d2c8cf6a22b2723"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x230, 0x40, 0x7f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0xa7, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2a, 0x4f9}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x39, 0x40, 0x4, [@generic={0xa3, 0x8, "09d0971b5f5f12291ac8731eb20f7e5274c82305748af4982c6103a6561da02605524cc7dd0625b7c638d9436f9e549ddfc27a767c88490f3a4c4bf9e5555b0c824390dc1b9d611308d98537323acee50320ced0c7c35dfbc6402a463e738dfd71f10e686aa090978b36bf64aa62deabd62c32bdaf3b8ca24ab1a8339fa9f1e64b63406c008dce99eed32a1502ed37f3656e3295e5aefb1c0ab270ccb8bb6eafd4"}, @uac_iso={0x7, 0x25, 0x1, 0x900cbbd450645109, 0xff, 0x5}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0xff}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0xec, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x33, 0x6}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x8, 0x0, 0x40, [@generic={0x78, 0xe, "2987c22ec705b9c620cfc4fac8df8731d8116713e11f3545183ee0d60298e9e5b0338c07cac36ad35b033c021ca20bd721fb2b79629e895cea678b7fdf0e80e2f317a6f51580da6b370571d2ae77f3079fd9ee016904ca5dfc1a7f0681d35e9e820c4e2fc99181ced56eea735b13900e64b99d206c8b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x3, 0xf9, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x3f, 0x71, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4b}]}}]}}, {{0x9, 0x4, 0x6b, 0x2, 0x5, 0x5e, 0xf5, 0x29, 0xae, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x40, 0x3, 0x2, 0x5, "3644ba765b"}]}, @hid_hid={0x9, 0x21, 0x4, 0x48, 0x1, {0x22, 0xa45}}], [{{0x9, 0x5, 0x6, 0x3, 0x10, 0x5, 0xb2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80}, @generic={0xc1, 0x8, "74c6dd443866fd469b19edea800511cbfd69d4a55bf488503e6a2b353d4a583880ec78cd0d71201f92a7fabd82f4b01cdd8d6d1994baeac25d3dd3a38dfbcaf1a1a7f95b9c32e05ff05a3d039bccc664a95a64f1468a8646dc4668cc0478cc9dd691d698b9a47db4674ad26a3d5b7a5d71ae4958d1f2e4f2a93ec0fd9f05b7d9b0dab95dd720ec7fd63847312ceb49029eae8c14c5e2ef1f1d1e7e3c80dc674a0673b2a8f48513451ab4ad86ccbdf66d84279e160d0d26cf6faac038474491"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x7, 0xf6, 0x5d, [@generic={0x89, 0xf, "6d7d457ba42a6e3743835669c66b69e19fd67d19afab4929f6e0bedf36c922b180e7743f286172d78b25ff7a7fa464082bf80f7aa01ec3916d24ac1d9f19bd9ad55f53d65310e570d7600343574b2911ad223b35b2d2de7d20297e7c16c903fc456aa16bbeb697a5a1bf0621826492a2a4b30e674d45a374bac8ceae25c2ee60098cc8afa5074e"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x1, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x800}, @generic={0xc, 0x11, "8cbf3dfa79bd3d8bcd39"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x4, 0x2, [@generic={0x9f, 0xf, "3e20334812ae57a48c7c7f0492b422b912e5db0a0d4132f8262ac8588070dabf45d1245eddc594687f21617b144fac1fd8ceb1c4b35e6a21a5bc9f3a9f63283f234006fa5a7c1904102770593c0b2d03b139f3992e77c776a2f521ff6b43fa179d119078c40d91937566dedf4b8f0a2ebf62351e3d2d18b682bbdc7ffbb90038f63d5621b3b40d7f8edd1585e365bbcb90e83fccfb52cd4ab43fb831a2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x91}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x1, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x9}, @generic={0x18, 0x23, "3709974f4f132386dec4860b162f9a486f7ab4646d5e"}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x1f, 0x0, 0x10, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x62, &(0x7f00000003c0)=@string={0x62, 0x3, "ecd90c6391525feca688192a5dba45a83e5b85eba5afb3b9a686af37c136b86dcec30a76c0b4e69713a68c8ed71d960cd6c3592e8ec6cdc6b242e33bfe69851b570b1def7bc8d7f8bc47a6b6f9ecce96df4fcee97641ac637abcb5c5dbb1b9dd"}}, {0x49, &(0x7f00000004c0)=@string={0x49, 0x3, "e40ab3dd900588cac3f788f7b96c1a165fb7d9ebd5d1bc111b8cd6041e4a04cb5329084c8a3f2a5e33c3b083574adc17dbf5a791543e001a0569a925ee084e9ac864ec1938f44d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x1c, &(0x7f0000000600)=@string={0x1c, 0x3, "b1857550d29da84e725619b443d1a1fd05fdb863b891ae6db595"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x2f, &(0x7f0000000700)=@string={0x2f, 0x3, "824db54317c2174c2af806e861bc70f99f2be070c216d1f3662e5fbe3ad8304b05c1927205b9874986bc881eae"}}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000840)=@conn_svc_rsp={0x0, 0x0, 0xa, "9ee81ce3", {0x3, 0x107, 0x0, 0x7, 0xff, 0x1, 0x9}}) syz_usb_ep_read(r2, 0x94, 0xea, &(0x7f0000000880)=""/234) syz_usb_connect_ath9k(0x3, 0xffffffffffffff6d, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x3ce, [{{0x9, 0x2, 0xfffffffffffffc92}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, "7b80000000799d5cd0ab479a3ffa6a6f2239a3ed58c024a41bf0630000000100"}) write$hidraw(r0, &(0x7f0000000280)="0ed1def9eda8513b2c405fef5c069e6b7dadac639dd9a0e8d8bb77e6693027d8128e7851cdec53efbd5807b671e612fdf718414ea8d17c0528a6fea3bbbd40c003f850f33050fc6ffd357820504db8ea411e66345779da8ca37721b71c0dffda456ec71e8e7024ca764176ed4b98f3a012631000d9c70fdfb6e689fbc98717b0d334fd5a22f549058c618aefdd864ff26cce4b096f1d3502f8b05a667cc1f967dd8df91d9bac64c3aaa868608d6c33a11d3a3e4d3bf0be9ecce9bddba8a6296c4c0a0d68915f21cb0ef7d162753358664436840f47d9", 0xd6) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "700f8f6e", {0x1, 0x0, 0x0, 0x69}}) [ 1925.573850][ T4453] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:25:22 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xf, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1925.662179][T31041] usb 5-1: USB disconnect, device number 127 [ 1925.713761][ T7361] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1925.733636][T22170] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1925.843589][ T2661] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1925.863593][ T2674] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1925.977257][T11465] udc-core: couldn't find an available UDC or it's busy [ 1925.984241][T11465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1926.093619][T31041] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1926.093805][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1926.134111][T11506] udc-core: couldn't find an available UDC or it's busy [ 1926.141062][T11506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1926.175311][ T2661] usb 1-1: too many configurations: 100, using maximum allowed: 8 [ 1926.193977][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1926.203062][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1926.211075][T22170] usb 6-1: SerialNumber: syz [ 1926.216639][ T8666] usb 2-1: USB disconnect, device number 65 [ 1926.376852][T30954] usb 4-1: USB disconnect, device number 63 [ 1926.393673][ T2674] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.402791][ T2674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.410916][ T2674] usb 3-1: Product: syz [ 1926.415126][ T2674] usb 3-1: Manufacturer: syz [ 1926.419720][ T2674] usb 3-1: SerialNumber: syz 12:25:23 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1926.464076][ T2674] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1926.478413][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1926.493970][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.494726][T22170] usb 6-1: USB disconnect, device number 22 12:25:23 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1926.703716][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1926.714826][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.722824][T31041] usb 5-1: Product: syz [ 1926.727048][T31041] usb 5-1: Manufacturer: syz [ 1926.731647][T31041] usb 5-1: SerialNumber: syz [ 1926.786213][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1926.793025][T31041] cdc_ncm 5-1:1.1: bind() failure 12:25:23 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1926.873597][T22170] usb 6-1: new high-speed USB device number 23 using dummy_hcd 12:25:23 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xf, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1926.991217][ T4970] usb 5-1: USB disconnect, device number 2 [ 1927.033898][ T4453] usb 2-1: Service connection timeout for: 257 [ 1927.040118][ T4453] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1927.048652][ T4453] ath9k_htc: Failed to initialize the device [ 1927.054875][ T8666] usb 2-1: ath9k_htc: USB layer deinitialized [ 1927.083628][ T2674] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1927.133839][ T2661] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1927.142928][ T2661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.150941][ T2661] usb 1-1: Product: syz [ 1927.155141][ T2661] usb 1-1: Manufacturer: syz [ 1927.159729][ T2661] usb 1-1: SerialNumber: syz [ 1927.203716][ T7361] usb 4-1: Service connection timeout for: 257 [ 1927.209985][ T7361] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1927.218657][ T2661] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1927.229267][ T7361] ath9k_htc: Failed to initialize the device [ 1927.233860][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1927.235339][T30954] usb 4-1: ath9k_htc: USB layer deinitialized [ 1927.286714][T11603] udc-core: couldn't find an available UDC or it's busy [ 1927.293863][T11603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1927.306256][ T2674] usb 3-1: ath9k_htc: Invalid TX pipe: 0 [ 1927.311928][ T2674] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1927.333657][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1927.342710][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1927.350939][T22170] usb 6-1: SerialNumber: syz [ 1927.423733][ T4970] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1927.473578][ T8666] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1927.507015][T11603] udc-core: couldn't find an available UDC or it's busy [ 1927.514012][T11603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1927.523055][ T32] usb 3-1: USB disconnect, device number 45 [ 1927.531690][ T2674] ath9k_htc: Failed to initialize the device [ 1927.539241][ T32] usb 3-1: ath9k_htc: USB layer deinitialized 12:25:24 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1927.613710][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1927.623186][T22170] usb 6-1: USB disconnect, device number 23 [ 1927.633788][T30954] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1927.783652][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.793698][ T8666] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1927.923659][ T2661] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1927.953709][T30954] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 1927.954016][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1927.970648][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.978920][ T4970] usb 5-1: Product: syz [ 1927.983083][ T4970] usb 5-1: Manufacturer: syz [ 1927.987716][ T4970] usb 5-1: SerialNumber: syz [ 1927.994995][T22170] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1928.025955][T11713] udc-core: couldn't find an available UDC or it's busy [ 1928.032988][T11713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1928.036406][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1928.047561][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1928.064459][T11720] udc-core: couldn't find an available UDC or it's busy 12:25:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x132) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000006c0)="0b969cfea3342060ee1629ff4776e0611eb00f9e753e861e8244d4306de25c42915516a6720c1eb5e1adfbbe717a1ad3e474a7b840721aaee08003507d0e08561ec9e3bcf8e6f3d37b1446132ac8c62179505307b751a7719554b7edfe98a7342107a0f26d1e962e58bd1090fc8cdede5f0000648f1be4d93c6a08b5009af94d7dcff27813d87896fac38544aa3df1ed7826c5d663d0f60a7cc8b452f56a5c3808230cce4e16496d5fb587a1e6ae2f0d650691a48bc7599073644ac3e7c448d55f606a275c548f8c3031edc01612ceeb1c62dd07de019bc5a22100000000d3b7deff94381b766d2fff217420f94d6d37f7c404cb0c4a12387e5826216507005034b6d2ea7d406658d446d8b3b8bedf815ff0b06e230410f1c08ecad3206a9dd2ae1b3f6863e0c9c330ecf6ff3c07402b96136f8c9d36f8c3cfd1a3dae6df5ab38c25ad1ea45f8703ba2e4b25185d55033d7911cde86a4875b9d440d08ea69eaa8db315ec196898501e847769285f6121346b070319a52bcd38218e22f97bd7955a1b9048682e59429e7fafa23a0f33a220eb3d830ba9bb3fa00a9feddc", 0x19d) syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffffffffd, 0x408042) write$hidraw(0xffffffffffffffff, &(0x7f0000000880)="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", 0x807) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="36825607e3cd963aa192562e", 0xc) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)="1585cb69"}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x8a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) read$hidraw(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffef5, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x21, [{{0x9, 0x2, 0xbf1874d88a7377fe}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) [ 1928.071432][T11720] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1928.129722][T11608] udc-core: couldn't find an available UDC or it's busy [ 1928.137012][T11608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:25:24 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1928.241420][ T4970] usb 5-1: USB disconnect, device number 3 [ 1928.346055][T11608] udc-core: couldn't find an available UDC or it's busy [ 1928.353192][T11608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1928.361730][T11608] udc-core: couldn't find an available UDC or it's busy [ 1928.368857][T11608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1928.376375][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1928.380745][T11608] udc-core: couldn't find an available UDC or it's busy [ 1928.396537][T11608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1928.463628][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1928.472696][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1928.480830][T22170] usb 6-1: SerialNumber: syz [ 1928.493646][ T32] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1928.607114][ T2674] usb 1-1: USB disconnect, device number 106 [ 1928.653590][ T4970] usb 5-1: new high-speed USB device number 4 using dummy_hcd 12:25:25 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1928.744008][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1928.753256][T22170] usb 6-1: USB disconnect, device number 24 [ 1928.783752][ T8666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1928.792855][ T8666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.801034][ T8666] usb 2-1: Product: syz [ 1928.805242][ T8666] usb 2-1: Manufacturer: syz [ 1928.811830][ T8666] usb 2-1: SerialNumber: syz [ 1928.864077][ T8666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1928.933757][T30954] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1928.942857][T30954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.950936][T30954] usb 4-1: Product: syz [ 1928.955191][T30954] usb 4-1: Manufacturer: syz [ 1928.959787][T30954] usb 4-1: SerialNumber: syz [ 1929.006129][T30954] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1929.014053][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.025545][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1929.034626][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.042613][ T32] usb 3-1: Product: syz [ 1929.046802][ T32] usb 3-1: Manufacturer: syz [ 1929.051385][ T32] usb 3-1: SerialNumber: syz 12:25:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x62, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e464, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x2, &(0x7f0000000e80)=@string={0x2}}, {0x2, 0x0}, {0x2, &(0x7f0000000f80)=@string={0x2}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x7f, 0x1c, 0x8, 0xfffffffe, "b1417a5b83d40a394aae1c3f45b7ac4093a627566305fc401c40207518763d36"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect(0x6, 0x517, &(0x7f0000000fc0)={{0x12, 0x1, 0x310, 0x8d, 0x8f, 0x36, 0x20, 0xc52, 0x2832, 0x6cc8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x505, 0x2, 0x0, 0x4, 0xd0, 0x43, [{{0x9, 0x4, 0x84, 0x4, 0xa, 0x53, 0x63, 0x82, 0x9, [@hid_hid={0x9, 0x21, 0x22, 0x20, 0x1, {0x22, 0x7a1}}], [{{0x9, 0x5, 0xe, 0x10, 0x20, 0x0, 0x7f, 0x1, [@generic={0xd6, 0x7, "64180036ce73be2cc7a3145746858d9179c1a247c469b78826f8673483a8aba1fca289e10cc14325f850834cae85a500587b08d92e36c5dd84f62ced75d42cf9a1b04d9ae10a03778afc37d840061f42348deeb8d695e7474999a422139ee6d1a694e4ac06df46bac3fc6705bb3d9303314865feeb59a93a1cefb8dc2ba637e8fe5c71c83488b540f365846aa2ef10cddb78ad494acbd8853a4d54e1319e91ad24207799b76bfad7387709452dfe5e1c5b5c99f2910be36bdf06e0b290a74e4585880a54c8fb06264fe46b3e2d2c8cf6a22b2723"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x230, 0x40, 0x7f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0xa7, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2a, 0x4f9}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0x39, 0x40, 0x4, [@generic={0xa3, 0x8, "09d0971b5f5f12291ac8731eb20f7e5274c82305748af4982c6103a6561da02605524cc7dd0625b7c638d9436f9e549ddfc27a767c88490f3a4c4bf9e5555b0c824390dc1b9d611308d98537323acee50320ced0c7c35dfbc6402a463e738dfd71f10e686aa090978b36bf64aa62deabd62c32bdaf3b8ca24ab1a8339fa9f1e64b63406c008dce99eed32a1502ed37f3656e3295e5aefb1c0ab270ccb8bb6eafd4"}, @uac_iso={0x7, 0x25, 0x1, 0x900cbbd450645109, 0xff, 0x5}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0xff}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0xec, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x2, 0x33, 0x6}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x8, 0x0, 0x40, [@generic={0x78, 0xe, "2987c22ec705b9c620cfc4fac8df8731d8116713e11f3545183ee0d60298e9e5b0338c07cac36ad35b033c021ca20bd721fb2b79629e895cea678b7fdf0e80e2f317a6f51580da6b370571d2ae77f3079fd9ee016904ca5dfc1a7f0681d35e9e820c4e2fc99181ced56eea735b13900e64b99d206c8b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x3, 0xf9, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x3f, 0x71, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4b}]}}]}}, {{0x9, 0x4, 0x6b, 0x2, 0x5, 0x5e, 0xf5, 0x29, 0xae, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x40, 0x3, 0x2, 0x5, "3644ba765b"}]}, @hid_hid={0x9, 0x21, 0x4, 0x48, 0x1, {0x22, 0xa45}}], [{{0x9, 0x5, 0x6, 0x3, 0x10, 0x5, 0xb2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80}, @generic={0xc1, 0x8, "74c6dd443866fd469b19edea800511cbfd69d4a55bf488503e6a2b353d4a583880ec78cd0d71201f92a7fabd82f4b01cdd8d6d1994baeac25d3dd3a38dfbcaf1a1a7f95b9c32e05ff05a3d039bccc664a95a64f1468a8646dc4668cc0478cc9dd691d698b9a47db4674ad26a3d5b7a5d71ae4958d1f2e4f2a93ec0fd9f05b7d9b0dab95dd720ec7fd63847312ceb49029eae8c14c5e2ef1f1d1e7e3c80dc674a0673b2a8f48513451ab4ad86ccbdf66d84279e160d0d26cf6faac038474491"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x7, 0xf6, 0x5d, [@generic={0x89, 0xf, "6d7d457ba42a6e3743835669c66b69e19fd67d19afab4929f6e0bedf36c922b180e7743f286172d78b25ff7a7fa464082bf80f7aa01ec3916d24ac1d9f19bd9ad55f53d65310e570d7600343574b2911ad223b35b2d2de7d20297e7c16c903fc456aa16bbeb697a5a1bf0621826492a2a4b30e674d45a374bac8ceae25c2ee60098cc8afa5074e"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x1, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x800}, @generic={0xc, 0x11, "8cbf3dfa79bd3d8bcd39"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x4, 0x2, [@generic={0x9f, 0xf, "3e20334812ae57a48c7c7f0492b422b912e5db0a0d4132f8262ac8588070dabf45d1245eddc594687f21617b144fac1fd8ceb1c4b35e6a21a5bc9f3a9f63283f234006fa5a7c1904102770593c0b2d03b139f3992e77c776a2f521ff6b43fa179d119078c40d91937566dedf4b8f0a2ebf62351e3d2d18b682bbdc7ffbb90038f63d5621b3b40d7f8edd1585e365bbcb90e83fccfb52cd4ab43fb831a2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x91}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x1, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x9}, @generic={0x18, 0x23, "3709974f4f132386dec4860b162f9a486f7ab4646d5e"}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0x1f, 0x0, 0x10, 0x8}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x6, [{0x62, &(0x7f00000003c0)=@string={0x62, 0x3, "ecd90c6391525feca688192a5dba45a83e5b85eba5afb3b9a686af37c136b86dcec30a76c0b4e69713a68c8ed71d960cd6c3592e8ec6cdc6b242e33bfe69851b570b1def7bc8d7f8bc47a6b6f9ecce96df4fcee97641ac637abcb5c5dbb1b9dd"}}, {0x49, &(0x7f00000004c0)=@string={0x49, 0x3, "e40ab3dd900588cac3f788f7b96c1a165fb7d9ebd5d1bc111b8cd6041e4a04cb5329084c8a3f2a5e33c3b083574adc17dbf5a791543e001a0569a925ee084e9ac864ec1938f44d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x1c, &(0x7f0000000600)=@string={0x1c, 0x3, "b1857550d29da84e725619b443d1a1fd05fdb863b891ae6db595"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x2f, &(0x7f0000000700)=@string={0x2f, 0x3, "824db54317c2174c2af806e861bc70f99f2be070c216d1f3662e5fbe3ad8304b05c1927205b9874986bc881eae"}}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000840)=@conn_svc_rsp={0x0, 0x0, 0xa, "9ee81ce3", {0x3, 0x107, 0x0, 0x7, 0xff, 0x1, 0x9}}) syz_usb_ep_read(r2, 0x94, 0xea, &(0x7f0000000880)=""/234) syz_usb_connect_ath9k(0x3, 0xffffffffffffff6d, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x3ce, [{{0x9, 0x2, 0xfffffffffffffc92}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, "7b80000000799d5cd0ab479a3ffa6a6f2239a3ed58c024a41bf0630000000100"}) write$hidraw(r0, &(0x7f0000000280)="0ed1def9eda8513b2c405fef5c069e6b7dadac639dd9a0e8d8bb77e6693027d8128e7851cdec53efbd5807b671e612fdf718414ea8d17c0528a6fea3bbbd40c003f850f33050fc6ffd357820504db8ea411e66345779da8ca37721b71c0dffda456ec71e8e7024ca764176ed4b98f3a012631000d9c70fdfb6e689fbc98717b0d334fd5a22f549058c618aefdd864ff26cce4b096f1d3502f8b05a667cc1f967dd8df91d9bac64c3aaa868608d6c33a11d3a3e4d3bf0be9ecce9bddba8a6296c4c0a0d68915f21cb0ef7d162753358664436840f47d9", 0xd6) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "700f8f6e", {0x1, 0x0, 0x0, 0x69}}) [ 1929.094268][ T32] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1929.123624][T22170] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1929.193616][ T2661] usb 1-1: Service connection timeout for: 256 [ 1929.199816][ T2661] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1929.208130][ T2661] ath9k_htc: Failed to initialize the device [ 1929.213646][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1929.223131][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.231210][ T4970] usb 5-1: Product: syz [ 1929.235390][ T4970] usb 5-1: Manufacturer: syz [ 1929.239982][ T4970] usb 5-1: SerialNumber: syz [ 1929.244693][ T2674] usb 1-1: ath9k_htc: USB layer deinitialized 12:25:26 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x2, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1929.483668][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1929.504606][ T8666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1929.534007][ T4970] cdc_ncm 5-1:1.0: bind() failure [ 1929.542817][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1929.549672][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1929.561960][ T4970] usb 5-1: USB disconnect, device number 4 [ 1929.574066][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1929.583130][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1929.591216][T22170] usb 6-1: SerialNumber: syz [ 1929.603803][ T2674] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1929.643917][T30954] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1929.693710][ T32] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:25:26 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1929.854040][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1929.869669][T22170] usb 6-1: USB disconnect, device number 25 [ 1929.893712][ T2674] usb 1-1: too many configurations: 100, using maximum allowed: 8 [ 1929.917700][T11648] udc-core: couldn't find an available UDC or it's busy [ 1929.921485][T11725] udc-core: couldn't find an available UDC or it's busy [ 1929.924686][T11648] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1929.939411][T11725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1929.975206][ T4970] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1929.982727][ T32] usb 3-1: ath9k_htc: Invalid TX pipe: 0 [ 1929.988390][ T32] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1930.086390][T11657] udc-core: couldn't find an available UDC or it's busy [ 1930.093349][T11657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1930.152110][ T7361] usb 2-1: USB disconnect, device number 66 [ 1930.176040][T11725] udc-core: couldn't find an available UDC or it's busy [ 1930.183123][T11725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1930.195930][T31041] usb 3-1: USB disconnect, device number 46 [ 1930.215083][ T32] ath9k_htc: Failed to initialize the device [ 1930.221191][T31041] usb 3-1: ath9k_htc: USB layer deinitialized [ 1930.293661][T22170] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1930.326535][ T7347] usb 4-1: USB disconnect, device number 64 [ 1930.339449][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.503829][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1930.512903][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.520980][ T4970] usb 5-1: Product: syz [ 1930.525177][ T4970] usb 5-1: Manufacturer: syz [ 1930.529762][ T4970] usb 5-1: SerialNumber: syz [ 1930.576917][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1930.583847][ T4970] cdc_ncm 5-1:1.1: bind() failure 12:25:27 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:27 executing program 2: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="1bd800d5dd273757c438e050819d62e3f8f515103d", 0x15) read$hidraw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x801) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000280)=@conn_svc_rsp={0x0, 0x0, 0xa, "729b4349", {0x3, 0x2, 0x0, 0x5, 0xcc99, 0x4}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "e8af806c", {0x3, 0x2, 0x0, 0x6, 0x4}}) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0x7b0651d1, 0x80000001}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000340)=""/95) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "4771b701", {0x1, 0x2, 0x2, 0xcb, 0x3}}) [ 1930.683889][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1930.727382][ T33] kauditd_printk_skb: 3 callbacks suppressed [ 1930.727398][ T33] audit: type=1800 audit(1626783927.284:3325): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=13954 res=0 errno=0 [ 1930.755060][ T2674] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1930.764154][ T2674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.772161][ T2674] usb 1-1: Product: syz 12:25:27 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x3, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1930.776461][ T2674] usb 1-1: Manufacturer: syz [ 1930.781054][ T2674] usb 1-1: SerialNumber: syz [ 1930.789323][ T4970] usb 5-1: USB disconnect, device number 5 12:25:27 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) write$hidraw(r1, &(0x7f0000000000)="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", 0x300000) ioctl$HIDIOCGRAWNAME(r0, 0x6628, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x22542) write$hidraw(r3, &(0x7f0000000000)="b8", 0x1) ioctl$HIDIOCGRAWINFO(r3, 0x6628, 0x0) write$hidraw(r3, &(0x7f0000000700)="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", 0x200) read$hidraw(r0, &(0x7f0000000380)=""/191, 0xbf) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x4, 0x22542) syz_open_dev$hidraw(&(0x7f0000000240), 0x9, 0x210000) read$hidraw(r0, &(0x7f0000000440)=""/159, 0x9f) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x90081) r5 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x5, 0x202800) write$hidraw(r5, &(0x7f0000000340)='(', 0x0) ioctl$HIDIOCGRAWINFO(r4, 0x6628, 0x0) write$hidraw(r4, &(0x7f0000000200)="196421b03a94f654482f8b53ce0bbdf02cf6549d7a4cabd4", 0x18) [ 1930.824158][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1930.833253][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1930.841323][T22170] usb 6-1: SerialNumber: syz [ 1930.854022][ T2674] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1930.893137][ T33] audit: type=1800 audit(1626783927.444:3326): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=14066 res=0 errno=0 12:25:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103495f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3f, &(0x7f00000008c0)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x317, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0xd8, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x1, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x2, 0x2, "", "8c83"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x20, 0x1, 0x80, 0x81, "b6ab23"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x0, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x4, 0x2}, @as_header={0x7, 0x24, 0x1, 0xff, 0x4, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x3, 0x8, "b3eb0102f2473bc7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x1, 0x5, {0x7, 0x25, 0x1, 0x3, 0x20, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x2, 0x80, 0x5, "f3c175e29f311d"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfacd, 0x401, 0x7, "1ba8f64689"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x5, 0x0, "bc975452d085"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x6, {0x7, 0x25, 0x1, 0x82, 0x1, 0x3f}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x15, 0x1f, 0x4, 0x10, 0x5}, 0xa3, &(0x7f0000000300)={0x5, 0xf, 0xa3, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x80, 0x0, 0x3ff, [0xc000, 0xffff3f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x9, 0x1}, @generic={0x23, 0x10, 0x4, "635e65ad519a9e0497aeb9d1860134d334b74c20d48cf1dfe66bf5166b8ce935"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x9a54, 0xf000, 0x3, [0xc0c0, 0xc0f0, 0x30, 0x8040cf]}, @generic={0x41, 0x10, 0x1, "79f8a8763cf90efd837ced7995fa603b1d9379edbaced331c3271b73e9eca21e25121759e4c16794a17dc1a06c3d2ab7cf5680bbb903531cfd3e0f0032b1"}]}, 0x2, [{0x5b, &(0x7f00000003c0)=@string={0x5b, 0x3, "ca6a2d50c27eb0c2557007e870cba169a83b195d12aa19ec4b9ca9f608a9384f3c7683ea35099a463ca6228517903d02631d7db43a42884b2dcf47d1d8b18b7e0501aebe2b146b53e2b52c30615c51beac03c91b7075f0e6a2"}}, {0x3a, &(0x7f0000000180)=@string={0x3a, 0x3, "c534ab2ac96870c57a6e54b15b80e279e7fa13b0796838eed4b5b6eb0aee6f438e21cb6eed4ba0a851e181780c813c30b99003554213b0af"}}]}) [ 1930.916011][ T33] audit: type=1804 audit(1626783927.464:3327): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723430313933313430362F73797A6B616C6C65722E467A303375572F313037392F48C7C060 dev="sda1" ino=14066 res=1 errno=0 [ 1930.947154][ T33] audit: type=1804 audit(1626783927.464:3328): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723430313933313430362F73797A6B616C6C65722E467A303375572F313037392F48C7C060 dev="sda1" ino=14066 res=1 errno=0 [ 1930.980631][ T8666] usb 2-1: Service connection timeout for: 257 [ 1930.986875][ T8666] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1930.995294][ T8666] ath9k_htc: Failed to initialize the device [ 1931.001326][ T7361] usb 2-1: ath9k_htc: USB layer deinitialized [ 1931.013881][T31041] usb 3-1: new high-speed USB device number 47 using dummy_hcd 12:25:27 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1931.133742][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1931.148681][T22170] usb 6-1: USB disconnect, device number 26 [ 1931.203579][T30954] usb 4-1: Service connection timeout for: 257 [ 1931.209785][T30954] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1931.213601][ T4970] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1931.221960][T30954] ath9k_htc: Failed to initialize the device [ 1931.231230][ T7347] usb 4-1: ath9k_htc: USB layer deinitialized [ 1931.363648][ T7361] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1931.473637][ T2674] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1931.523682][T22170] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1931.553813][T31041] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1931.562881][T31041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.570978][T31041] usb 3-1: Product: syz [ 1931.575224][T31041] usb 3-1: Manufacturer: syz [ 1931.579802][T31041] usb 3-1: SerialNumber: syz [ 1931.593897][ T7347] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1931.623906][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1931.624162][T31041] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1931.673678][ T7361] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1931.703787][T11775] udc-core: couldn't find an available UDC or it's busy [ 1931.710741][T11775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1931.813856][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1931.822923][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.830951][ T4970] usb 5-1: Product: syz [ 1931.835222][ T4970] usb 5-1: Manufacturer: syz [ 1931.839805][ T4970] usb 5-1: SerialNumber: syz [ 1931.885858][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1931.892673][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1931.921184][T11775] udc-core: couldn't find an available UDC or it's busy [ 1931.928249][T11775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1931.935854][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1931.941244][T11775] udc-core: couldn't find an available UDC or it's busy [ 1931.956228][T11775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1931.963776][ T7347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1931.974668][ T7347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1865, setting to 1024 [ 1931.980463][T11775] udc-core: couldn't find an available UDC or it's busy [ 1931.985834][ T7347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1931.993193][T11775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1932.006006][ T7347] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1932.022493][ T7347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.032327][ T7347] usb 4-1: config 0 descriptor?? [ 1932.053883][T11867] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1932.063706][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1932.073025][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1932.081284][T22170] usb 6-1: SerialNumber: syz 12:25:28 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x4, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1932.097883][ T4970] usb 5-1: USB disconnect, device number 6 [ 1932.236091][ T32] usb 1-1: USB disconnect, device number 107 [ 1932.263725][T31041] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:25:28 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1932.353988][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1932.363412][T22170] usb 6-1: USB disconnect, device number 27 [ 1932.466664][T11840] udc-core: couldn't find an available UDC or it's busy [ 1932.473682][T11840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1932.514292][ T7347] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 1932.525056][ T7347] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0055/input/input111 [ 1932.553707][ T4970] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1932.563845][ T7361] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1932.572894][ T7361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.581038][ T7361] usb 2-1: Product: syz [ 1932.585316][ T7361] usb 2-1: Manufacturer: syz [ 1932.589902][ T7361] usb 2-1: SerialNumber: syz [ 1932.608268][ T7347] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1932.634482][ T7361] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1932.687484][ T4453] usb 3-1: USB disconnect, device number 47 [ 1932.716648][T11867] udc-core: couldn't find an available UDC or it's busy [ 1932.723693][T11867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:25:29 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x448f2) write$hidraw(r0, &(0x7f0000001200)="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", 0x234) r1 = syz_open_dev$hidraw(&(0x7f00000010c0), 0x200, 0x105300) read$hidraw(r1, &(0x7f0000001440)=""/151, 0xbf) read$hidraw(r0, &(0x7f0000001100)=""/155, 0x9b) write$hidraw(r0, &(0x7f0000000000)="bf3116cecdd052ba41ae73c9d5d284aab07681770b2b01728febc3724fcae6594916ba767655071b7ceb76a3b395d9a6d1b924dfd31c9a25103839f8d870e3ab348e1537fb541c628570dfcf3480235b5e5fc9c119cc393240db43856283fdbf5e2d7e4e2caf48af27b1e45539fc93bfaed71f3c7441d3f0e31924c3c05962c004c9b57303b2d574cb76a757029734d0660e7725039adf068032205ef7524131c8c3a837b193aff16c4d794cef52f16b64541728d6ff39e169990401deb204f9b110560802473d2869a4dc2b3970634aee1752647575d47333f505193ba21c29562a72e1d127e402cc0b4511f252ff5bbe2dbbe3dec12bf1fba382cd361f13571e4dbed0f068c93034793827bcd9f57629fc7d6f88c7b811a39b807c58cd996d17f79244ce1d07d78722337c9691ed2e5be05328ade71746f131e8ea84155d8a338981a082ace62357b8b8aafe5ade975a86fef5dd0d74588fb0b243fb56c06bac7123d2e9c91d96fb1984dbd3f235f5a775e559ab237ca76f012495d917596b5197feb1891b383795d2fba0f8a24b6e3182a51d663f43c2d5275970875f9e3f4ce26fd8ea602261cbefd060b895cba571941013b9f9db9f2187d8f41cf7c3fbed97797372bd9ad13308755b0c8d83194aeb897bf7f1ecf90d67bb2eb1cd3bc1ec5f98de345b0e4f9a3f873a2a4e54312e6fa395f01c11ee32d8e730be8e9cabd83d0c853669e4768f6fe44978e2d458acfef495122cb0f91362526a627d087231881d11cbb0e4450ed115e7f13e9c818191fbcd87abd4fc8f9f5688c89989039a1060eba10974cc0a757852890ee7c01a236551a5b287b0f54b2244af4d289ec87154ccc530c8b506027988167f0070e22de92ffdeb3cad81be8cd3a5b94c7f0b62ec5cafb23ff992e6a5d72bb3bd2a257576d2ce2440486fcfcbd311db4d7ffd47b9a07283a1c933b5f78ef0aabbfd9f15a488a42492623c0e7533e3b55529d2efe23dc202a8025105dc12f0afb672d30dd4edb545ae7eeb58cc36b46e4d88e2005e8c2ecc65b76fb5bebec5e59da2cf63859b7913618e81bb9e7f8c6b801df4d7a65529a00d7e3cab24d682aff901ffef66e284704b4d109471c2fc7cdc85690207f6dd4f541a9eef8e8bdbc6c7f68983ed9387a023183a13ea518a0e67f2abf372ccf56cada007d5b149dac7f5483156f33eaccdfa6f708d42ae719d66060ed8f355ba6ee3bc2a2d72df1da4c4529b46e0dc937e416b51867ed255afed18687571b74c05c2c3cfb43a226593e8a7605e8a9a43c6f9312a7bd029ed893ef1b4a615f97fb44798012779c92ef073a805fb3c97ade6db3079e6f8f2e4b016676fc3e78e52c2ba8d7cc0ea482619abfc9fb8498e603fa91804759bb629491b070ad2be5d08ed7c4351e6f8c4d800dd7f0a871dc4cc728f3bdfc926461e6425e9843e3b70fb9c742d7e511b56155711f1b105ea604e04402e05159f40ce46abe7987863d8a01f427e5685ef7d4f7f952770f37efee8c94862815a1e3f581787b356226221ee95efbe58c14d149fde3f95614f8963e8065adf79ef066fd77772cd853ddb2aa8904489df54d6bb9046f51304026e06826a68f61f7c98d45c2616f6dab858ac8c78c34f3d666e6f10f1306fa96342f96220015163263c03bcee9782b8c04a2ca3b79303a6a2cd5938d54a591519f7bbab07653ce3236b2917578e3b195ac802c7769ce233f36e0e72e521f89558f2e5798f6f3c4c099490027298b65e8c14f840a0383cfea94dc76ae774407d80a58d824835ec121cba09a0267fdac7c32790476d3bc3f1d65717f1d961c5ff29c7e0948effb03cf385ff0c6a81e4e09342ad62f7069134e22790f084b97ef46c66181e4e9d2dd622bba4ec9d077727ce80adcb4d81b8183f18e325f6b95616dcbddc3450237179f641d98020fb336c08a4b203f685978b9dc5891ed17872bdeb20609bf3de541d5017d3376dcc5e160cf84b55d78406e6ad07749b241da07ac74bdf4cb091fd6227b7f87d77e4dc621c30386510c10927146f17cab137c8d8acfff6f99d270390e9503ff69fdb5832096fb2298fc3906a550389cddca92a82fa365c8009e1ed69b2c6c3be60fd896d07103fea3b523ff0872bfa23ea1af815e92757be3ad262b7cfd33a51a9d929e7937a2441c9e136138ce6e9fa13ce85d6035bd576239eb4a9eac83cc70741d188e6b719a24f1c7c71263bab18b766219c2a21a3ec0c100b07d09951d90b8cc351b3ca6e059b92ef14cfe794a5c91d11ff45934c1f5a8960813f8636474bdf3e94524cb979a87da1c3954d56319211ad385769f3b644258bac2ade94cfc9b811eb21c3c080de7134da0dce6653cd943d51950ae0159e39066004ed608b22d873c2dde83a743c6fe9bfb03c57d6bd0d462ceb7f193ec0ef3af82d83478f3d7fbc06b4d6a7873d26065867a5e186ecb3e05aa00ff11c9285e20c032a5fafe4d283e3daa6c3d444581e53d721d6b5efcfa7ecb0007260ec8db5652d8ae8e9bb6cd2b85f15ca0f513d790585280c0f9b02ee43df4e262ba706c45a7fb5fd40884fe8df9e06224b1205d1a817f83b22e900d62a7bcc31a8128b698506b73d1eb06ec5aeb022624324480eb5549804394e4b0a44f6404cb73b87a50bcfd987ba25a3e4d527d5dbb95a1d7a36d9567710a910de675b33e1487859ba95489559c0b376f2417a04cceabdd65a6dd4bacf188948ac7d5139e20f1d0c485796b2ba045a45bc0cd142d52e9656524679e713564578ef4f80b91d8a98aee9df008abd77d2f07a4fd09e830fc4577bd8beb7a11807b03da72614729b659244566f3bdd4e524ac9ec53ec64c8a1986b901477c684cc854c4b2fb9f3746641bb460bd09f4e9acc31c31ce8658322f5b5c9d54555992083457eb7560e683655ce6355c51fabebf335f7b29178b5ef37701a5e0883dae9b3d1e216fa862b2dff6e836edbb79b20726edd3abab66dfb517bf0b000db2738a883afd508e09c168700dd888fe9ad1277339dbe1a821698729a32f1b8d39a88aa7ae830fd4cff580fc664ff151e7f517b99c51f75d63064f5cbe0d0f4ae1027d4131c631ef0d8fbc9dd2b072594daa54c995f48c03f7da20c20173e2a5784216c4501a01e6130b8f6d891ccb02f5e36830d419c3a33c5083a717e2d57bb4f897f29d1b8c354c7354f04a5b752866bd0189b5e6be794500d996c5124d68eaae38f9c5ef734010302a7f96f7e7503e85c40482a34692e30e34f016b8262a65d5be0f81d43352726735ceee34c1cd49219dc8af9555fdd4c8f3cad3608374b0b5ecc4ed607a4ad0a3ad1447445bdb868ac6d96ac88dacfcb844c5346a54590a76bc75f1fdead1ba3fbb1b7a97b99e996940b61e3c49f1732da8f8c8606959f85b000ba12ebe446291c5dcd19e8eff85cea718a18ee53495e0429b7de5d3b38077f27a51491511ee8bbcd7ad1970e125e7eed82c43ec5621521097e32c30b5ee226b09090a095787a044818f0f1c5e57c2806426cd77bd8bc4d332db1e744c0d96f15eb69747d83ac1fc2cfba1486186ec67bc0a4d584ae129d8fbcd860866b0fb37d96ed984ef7b25c55f00303dfdbe9f09f9c6ea0cc63985a54ee735791cb48614b90c9e351f4c7decc2f02f540da794ed62fc9bbc745ec7dee35ac9aee35db435684b00ec7fa43ded3931d71e5869e5628b9a1c26c6d4fa3a66258eb0b4285eef9b8c5657c4f350d3f925e1645932a739d8b7b0843303d99b07a8cefd033091ad9891939d3074e87a9f3e24c25418a78e5f86da3639a35608d772b226bcae20fbb53a112757f765e73ac25b915d65879ee05dfcf48be1a3a37be2bd272364a07029c57cc1f62789c21e707c1adb8715a594d4fab22ab11ed9f7a0aa8c4606e27a2ee736a237a30cb14982cc705c3125408da0bdf4baee8a1eaa3a0afc2973f42d99723c2c65ca9db7bbac4fdf461115c4ddddeaed7cb9abf7d6d2f2e5b63fd5535a13c8c02fc1b8f32e5ba2387f001cb6e8c2d041717fd01504b5c59b18f63f977a7e78d108f7a3b8193edff215905f4deb5f098a21707dd4b24b8f4ff906a2df286b0d6c46f6ff79c16e0cdeef39ec63623ed2f94ac33840eaa15c1bda2ef0b6cbacfb12f69a39a8794c7a8c3634ce6a4d2df791720978b35dffb1997319f57c7bbff11516ed407a501bce9dbd47650a667db7ce14003c2b1b9526b4abc4120d80de38cebebb9cbf1e039c4bc09cb5669e561f7e4513d0828a8ed9c60326971156b3933f14bc76ebab962faa1214adfb2badcc6b3827f5a82f2f567000c4339fa1d6c5cfd3369b61bbc3bafc121162dc59ed6e924db7db35aad7dcf5cd787c1ecdd7d732652cfe2d86d5ef413d78b0398a278b864be4a4fbce4cdffe4605f16b7d801ab87c336bfd10b60e3711f56deba1c7d6c3b232d09f859f3746a310d838acc4d3e9055735dce4f2897cfe88009c961277d395dc9c4e5106e71993654e95600073e235b8bffb311a0559b36f0c53a357696f61ce791d0342eb6de9fa6a36a54e0a6735afe6a1f5351e0a03587c810697e6b7ea0117b69fdedc82b61c270096bcd57cb174d435510cf97fe7530deac541527bd28846a467dcf09f7c523a4df821f34fe33d8e7fb0af413ddebab4e6a820f9dcd27ac55e6e6dbcec48430063253cd51462ae0f206a8ac0b3e5886323fd9edb41a186da074468eaee60c2919ca1c6af54c9d779f9a616e2b88cd32e10e3b889f1f373f6f5ce215235581ff2df10c0c9c3395895fe7e9acd2c2f6b568f1c2b74c596f64216372ba227ab1623076dedf43c8e5ffa8c4bc57e8d57c8d5a60697a24092a15f0cafd7d83fbcd3eb6ab06ed297a55ecfbaaa033f5619a02c37684041e55205ddb4b106a51e5ff30686d22c2872670576824bd334f10e39385585aed83be7b374a8fd74751710a637a4ec13f42dbee97ae924acbdbbbc927f993f69a6104fe9b5cee6ad18c3aee809d997b05459160c30bfe0d26936c44acc777bffb365495be0ec6f7248b447d42720a6a94600ba22e5156a3cfb7a23ad4d76d0ed0af914aec92ab5913f6c780795f3f2266d89fd4e35e81ad0b4ab7b16292ff2b134f478aa5a04787fdcf5df13f474c486f79ebe7a6fa28bedcb744a061b1e8ced2bf1eb2ef0c52dd51acdf0630af865d1fb580c32580de9e217c4491df28ce4dc8031f46995956428bb4bf5d3d7a37dddda076d90ced5d29f2915b87d0d75823be52e7c5a5a8e0779f1756c1b1ba9b782f8be28ce02ee6acf3dc713bddea84ea8efeaa537a4fc218319e811d671e51a5997dd931d90599b76f1739f1142ddb753f799fa4b27cbe00bb641210b37ef99b34bebd8ffe4f6d8ebf6dc22ab4bad31012fc6178f1933f2cc4043213e7171c58656f915300dd6118d8c5c1cc4553db88d613001c1e984f446bfb1965abdd423b669bc6df8d42a27af0126bf85f25b355492300243e29dc51b70210da5642151e6012822071a1aa3b9adbba0840a9ca5be53da0983c8ce0048ca03b75a69305b61f19eaffa5f6b4fee8900565386f89731139cdee6499c76d4d08886daaa944394214a196e633bac56d1381f13f4cb6c07dfdd8b64868cf734d47135ab5c2e365c0f1e871248c928c4a620d0b2aa27d53c588fa47ae43a0a1ce6e8ed46b54c8632d57e4a9fc3e0b1a00071a0e78c788cbcaa3a7ee22a402173b6ae478a8bf33c99fb9cf8ca05c1cf2f61dff15d42a03fdba8ade1a6b4a5fd7e0a56cf29321dd9697386cb8e11650737cd4e8c698407209", 0x1000) [ 1932.744012][T11867] udc-core: couldn't find an available UDC or it's busy [ 1932.750986][T11867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1932.760934][T22170] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1932.778577][T11867] udc-core: couldn't find an available UDC or it's busy [ 1932.785710][T11867] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1932.796845][ T2618] usb 4-1: USB disconnect, device number 65 [ 1932.803748][ T2674] usb 1-1: Service connection timeout for: 256 [ 1932.809949][ T2674] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1932.827540][ T2674] ath9k_htc: Failed to initialize the device [ 1932.833938][ T32] usb 1-1: ath9k_htc: USB layer deinitialized 12:25:29 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x101142) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x24441) write$hidraw(r1, &(0x7f0000000000)="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", 0xe00) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) write$hidraw(r2, &(0x7f00000011c0)="9b", 0x1) read$hidraw(r0, &(0x7f0000001200)=""/4096, 0x1000) [ 1932.835687][ T33] audit: type=1800 audit(1626783929.394:3329): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=13960 res=0 errno=0 12:25:29 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x101142) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x24441) write$hidraw(r1, &(0x7f0000000000)="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", 0xe00) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) write$hidraw(r2, &(0x7f00000011c0)="9b", 0x1) read$hidraw(r0, &(0x7f0000001200)=""/4096, 0x1000) 12:25:29 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x101142) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x24441) write$hidraw(r1, &(0x7f0000000000)="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", 0xe00) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) write$hidraw(r2, &(0x7f00000011c0)="9b", 0x1) read$hidraw(r0, &(0x7f0000001200)=""/4096, 0x1000) [ 1932.963682][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.153662][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1933.166740][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1933.175797][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.183822][ T4970] usb 5-1: Product: syz [ 1933.187997][ T4970] usb 5-1: Manufacturer: syz [ 1933.192583][ T4970] usb 5-1: SerialNumber: syz [ 1933.199727][T11992] udc-core: couldn't find an available UDC or it's busy [ 1933.206749][T11992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1933.213737][ T7361] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1933.256382][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1933.263457][ T4970] cdc_ncm 5-1:1.1: bind() failure [ 1933.284149][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1933.293370][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1933.301405][T22170] usb 6-1: SerialNumber: syz [ 1933.312006][T12006] udc-core: couldn't find an available UDC or it's busy [ 1933.319340][T12006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1933.353629][T31041] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1933.360585][T31041] ath9k_htc: Failed to initialize the device [ 1933.368080][ T4453] usb 3-1: ath9k_htc: USB layer deinitialized [ 1933.461207][ T4970] usb 5-1: USB disconnect, device number 7 [ 1933.583735][T22170] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1933.592744][T22170] usb 6-1: USB disconnect, device number 28 [ 1933.617185][T11836] udc-core: couldn't find an available UDC or it's busy [ 1933.624165][T11836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1933.837414][ T8666] usb 2-1: USB disconnect, device number 67 12:25:30 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4e, [{{0x9, 0x2, 0xffffffffffffffc8}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x2237a39d160816f6, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x4}, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0xb05, 0x183d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb66}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0x67}}}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0x0, 0x1, 0x8, 0xff}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4}}, {0x2, &(0x7f0000000d80)=@string={0x2}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000700)=[0x9]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f0000001280)={0xa, &(0x7f0000000180)={0xa}, 0x1f, &(0x7f00000002c0)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0xd4e18b68891d2eb8, 0x0, [0xffff0f]}]}, 0x9, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x59, &(0x7f0000001100)=@string={0x59, 0x3, "04719fd90f224dbe6cfbd3780e54bf43c6840c4400d77efc1ee5facb0a1068a2661dfa0e8ac741b4cc0bfaa745e160cdbc6564e954168aa98ad273e80b1f7511cc05425557e6b34e69e0efd75e54f0dda8a506f07e2d10"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x43e}}, {0x2d, &(0x7f0000000980)=@string={0x2d, 0x3, "37aaadb60d143e98828d0d3cd77141bc58d61e05052ec47355337e2de09904f6e20d1c274e82c29a292b41"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x31, &(0x7f0000000d40)=@string={0x31, 0x3, "2974086f7c6d7b6a2b311eceb230566aa4834bac6b1bc32941912497580a17789076331a8522ec87dab480a56f94f8"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x424}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b80000000799d5ceeab479a3ffa6a6f2239a3e458c024a41bf0630000000100"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x2}, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="010075b5f41fcf475711746243d2a44eec63344454271df67c99427e6bf7ceddef1c0513c2b285edb466003c7fa325e2276a7ad9140acb925d90df599f4a1a278cd7f961575d6b36bb8b7b40d6cad90c4b61a22ca48d1a666f1b67a6603cb5e9c333056b1e16fa73522a9f56029fff0890096b9b3013047f094790714baea6ab2683945ef48c3ae438092c56bec19199d9a64dcd0890a76f3571e9aa7ec74ac354dadbf3b4b3045513252bd752df9ea236aba589b01e656143ba9a83a7b8faaa849e687966181f22cdd404cbc3124cfa48487991530d85cc07574dbc1fc464729c900b1e591bf6223195157296f3c3572de6799f0340b8242131e7ef3d08e6117cf2f1f4fe864b89929d680bebaefba4c2585d4bde21ddf38058185a90911848fa08b24ca87cff03000000000000ea93efefa0cd58098748cddf04ec8fd3b66c929d4503f82a79bde2d818c59028558a96e9237ede0c68"], 0x6, [{0x8d, &(0x7f0000000b40)=@string={0x8d, 0x3, "c86223e001df9a42a8e3f4cff5dfbf2afed9e8c8e658f2448f6dedfdaa05cc40a77ee048dc25f442186476b29ef3ef2f7369c85bda2060b29af44e9cfd0612256b2fd09cfea2aa7dab8bd91d7f8de4f4394c9c9b6fc148d59755b8f3cb87bc2fca4e63dda83e8f310c58baf822eca23bd4c169ad5a582031b98e6d1e9608f3539c3b922b4bde6885700ead"}}, {0x18, &(0x7f0000000c40)=@string={0x18, 0x3, "8d75f440d5c759f9ffa7aab5f3de8b955b705e833b39"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x64, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x81eb06ce0c758a1d}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000006a0561004000010203010902240001010400ff090400"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa}, 0x0, 0x0, 0x2, [{0x16, &(0x7f00000003c0)=@string={0x16, 0x3, "2b86b1c1ea1e703aecd2db22e4b376461b36891f"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:25:30 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x101142) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x24441) write$hidraw(r1, &(0x7f0000000000)="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", 0xe00) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) write$hidraw(r2, &(0x7f00000011c0)="9b", 0x1) read$hidraw(r0, &(0x7f0000001200)=""/4096, 0x1000) 12:25:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103495f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3f, &(0x7f00000008c0)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x317, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0xd8, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x1, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x2, 0x2, "", "8c83"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x20, 0x1, 0x80, 0x81, "b6ab23"}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x0, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x4, 0x2}, @as_header={0x7, 0x24, 0x1, 0xff, 0x4, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x3, 0x8, "b3eb0102f2473bc7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x1, 0x5, {0x7, 0x25, 0x1, 0x3, 0x20, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x2, 0x80, 0x5, "f3c175e29f311d"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfacd, 0x401, 0x7, "1ba8f64689"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x5, 0x0, "bc975452d085"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x6, {0x7, 0x25, 0x1, 0x82, 0x1, 0x3f}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x15, 0x1f, 0x4, 0x10, 0x5}, 0xa3, &(0x7f0000000300)={0x5, 0xf, 0xa3, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x80, 0x0, 0x3ff, [0xc000, 0xffff3f]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0x9, 0x1}, @generic={0x23, 0x10, 0x4, "635e65ad519a9e0497aeb9d1860134d334b74c20d48cf1dfe66bf5166b8ce935"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x9a54, 0xf000, 0x3, [0xc0c0, 0xc0f0, 0x30, 0x8040cf]}, @generic={0x41, 0x10, 0x1, "79f8a8763cf90efd837ced7995fa603b1d9379edbaced331c3271b73e9eca21e25121759e4c16794a17dc1a06c3d2ab7cf5680bbb903531cfd3e0f0032b1"}]}, 0x2, [{0x5b, &(0x7f00000003c0)=@string={0x5b, 0x3, "ca6a2d50c27eb0c2557007e870cba169a83b195d12aa19ec4b9ca9f608a9384f3c7683ea35099a463ca6228517903d02631d7db43a42884b2dcf47d1d8b18b7e0501aebe2b146b53e2b52c30615c51beac03c91b7075f0e6a2"}}, {0x3a, &(0x7f0000000180)=@string={0x3a, 0x3, "c534ab2ac96870c57a6e54b15b80e279e7fa13b0796838eed4b5b6eb0aee6f438e21cb6eed4ba0a851e181780c813c30b99003554213b0af"}}]}) 12:25:30 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x5, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:30 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x40100) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/225) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/99) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000001c0)=""/139) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0xc, &(0x7f00000003c0)=ANY=[]}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r4, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000440)={0x17, 0xd1, &(0x7f0000000340)="833062767ebadd888cc61ed1d2ad4c8f9047ce8fdd25b934dd54e5d1eb7bbc347e8bc7e30dd87c9fb24f0d1e277d3f4a3b0abd538ad87cd3eb3800ad6ace05b1222e37ab702e197d4eac487cd76ced3dfb72bd390577195afb1b0d73adc0209f7208b8434fe6657dc1c936b45be3f8888a0cd3e4fd980947a8be461d45b6935ddbd3b9fcd252657ddf396e394041c1696c742b7210361e4f09481a05d54c8f543c3a7f90681eae7cf283ef5b2d36a58759164f878e498bfef543d69ac87afd3aee325b2bc5dd42ddf7bfb52e492f0af639"}) ioctl$EVIOCGSND(r3, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000300)={0xf9, 0x7ff, 0x0, 0x6, 0x53, 0x1}) [ 1934.633591][ T7347] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1934.641282][T31041] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1934.643628][T22170] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1934.650807][T30954] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1934.713587][ T7361] usb 2-1: Service connection timeout for: 257 [ 1934.719794][ T7361] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1934.730912][ T7361] ath9k_htc: Failed to initialize the device [ 1934.733558][ T4970] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1934.738046][ T8666] usb 2-1: ath9k_htc: USB layer deinitialized [ 1934.973763][T22170] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 1935.003749][ T4970] usb 1-1: Using ep0 maxpacket: 32 [ 1935.023938][T31041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.035424][T31041] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1865, setting to 1024 [ 1935.046576][T31041] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1935.059704][T31041] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1935.068773][T31041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.076836][ T7347] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1935.089897][T30954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.103701][T31041] usb 4-1: config 0 descriptor?? [ 1935.123792][T12039] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1935.163629][ T8666] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1935.173970][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1935.174877][ T4970] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1935.183064][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1935.198953][ T7347] usb 6-1: SerialNumber: syz [ 1935.254190][T30954] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1935.263248][T30954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.271388][T30954] usb 5-1: Product: syz [ 1935.275584][T30954] usb 5-1: Manufacturer: syz [ 1935.280180][T30954] usb 5-1: SerialNumber: syz [ 1935.293655][ T4970] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1935.302620][ T4970] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1935.313095][ T4970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1935.325089][T30954] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1935.331862][T30954] cdc_ncm 5-1:1.1: bind() failure 12:25:32 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1935.443641][ T8666] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1935.463687][ T7347] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1935.475325][ T7347] usb 6-1: USB disconnect, device number 29 12:25:32 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x6, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1935.513811][ T4970] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1935.522889][ T4970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.531206][ T4970] usb 1-1: Product: syz [ 1935.535444][ T4970] usb 1-1: Manufacturer: syz [ 1935.536220][T30954] usb 5-1: USB disconnect, device number 8 [ 1935.540043][ T4970] usb 1-1: SerialNumber: syz [ 1935.584736][T31041] keytouch 0003:0926:3333.0056: fixing up Keytouch IEC report descriptor [ 1935.599798][T31041] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0056/input/input112 [ 1935.703939][T31041] keytouch 0003:0926:3333.0056: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1935.803195][T12039] udc-core: couldn't find an available UDC or it's busy [ 1935.810266][T12039] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1935.829707][T12039] udc-core: couldn't find an available UDC or it's busy [ 1935.836760][T12039] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1935.843614][ T7347] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1935.849509][T12039] udc-core: couldn't find an available UDC or it's busy [ 1935.859006][T12039] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1935.872300][ T4453] usb 4-1: USB disconnect, device number 66 [ 1935.903942][ T4970] usb 1-1: 0:2 : does not exist [ 1935.913017][ T4970] usb 1-1: USB disconnect, device number 108 [ 1935.983777][T22170] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1935.992861][T22170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.000984][T22170] usb 3-1: Product: syz [ 1936.005187][T22170] usb 3-1: Manufacturer: syz [ 1936.009797][T22170] usb 3-1: SerialNumber: syz [ 1936.013793][T30954] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1936.064376][T22170] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1936.203707][ T7347] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1936.253678][ T8666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1936.262977][ T8666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.271058][ T8666] usb 2-1: Product: syz [ 1936.275272][ T8666] usb 2-1: Manufacturer: syz [ 1936.279868][ T8666] usb 2-1: SerialNumber: syz 12:25:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x169440) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x15, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x101, &(0x7f00000013c0)=@generic={0x0, 0x2, 0xf9, "c4b948a4", "506fe024f36824480e01d9b72ed643227d7e8bda1fe0e98428a6dc961894f522feaab6ff907750e006b45787edfda7a4a96e7cace26af6c8e33acb37c79db0b052868007e4ba7a90c4dadfbbe7bb619102be9970cc175a172cf4ca7b6ec8a125ca90dedc2ae27f0f24ba5be176eafdff46cdb35ad7e99af1fe4c8a67a479e90a38a6f7cbe10fe1e436f115f700a0ff43368daf10e92599b202b4c34f2980db132be311625054e5dec70414ea590e6b22097181b6be177b0f89d47d5334ad949d8097f74b6ebe41019a83ff476f774729739ae3a111c9578aaef901ffe75d6ec330599f3123b839efbff6f1be84ce8a30e4a086008e0bb3ef1f"}) [ 1936.323846][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1936.332981][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1936.341112][ T7347] usb 6-1: SerialNumber: syz [ 1936.346716][ T8666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1936.404264][T30954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:25:33 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1936.573736][T30954] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1936.582810][T30954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.590818][T30954] usb 5-1: Product: syz [ 1936.595049][T30954] usb 5-1: Manufacturer: syz [ 1936.599641][T30954] usb 5-1: SerialNumber: syz [ 1936.603568][ T4970] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1936.633823][ T7347] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1936.646541][T30954] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1936.653572][T30954] cdc_ncm 5-1:1.1: bind() failure [ 1936.660223][ T7347] usb 6-1: USB disconnect, device number 30 [ 1936.693594][ T4453] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1936.701322][T22170] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:25:33 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x7, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1936.850740][ T2618] usb 5-1: USB disconnect, device number 9 [ 1936.873571][ T4970] usb 1-1: Using ep0 maxpacket: 32 [ 1936.899268][T12040] udc-core: couldn't find an available UDC or it's busy [ 1936.906430][T12040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1936.963660][ T8666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1936.993696][ T4453] usb 4-1: too many configurations: 210, using maximum allowed: 8 [ 1937.033608][ T7347] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1937.033694][ T4970] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1937.115754][T12040] udc-core: couldn't find an available UDC or it's busy [ 1937.122876][T12040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1937.123874][ T4970] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1937.131465][T12040] udc-core: couldn't find an available UDC or it's busy [ 1937.139162][ T4970] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1937.139190][ T4970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1937.165408][T12040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1937.174907][T12040] udc-core: couldn't find an available UDC or it's busy [ 1937.182053][T12040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1937.190826][T12040] udc-core: couldn't find an available UDC or it's busy [ 1937.197844][T12040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1937.273623][ T2618] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1937.293809][ T4970] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1937.302894][ T4970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.311455][ T4970] usb 1-1: Product: syz [ 1937.315710][ T4970] usb 1-1: Manufacturer: syz [ 1937.320371][ T4970] usb 1-1: SerialNumber: syz [ 1937.368092][T12053] udc-core: couldn't find an available UDC or it's busy [ 1937.375350][T12053] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1937.425984][ T32] usb 3-1: USB disconnect, device number 48 [ 1937.463699][ T7347] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1937.543714][ T4970] usb 1-1: 0:2 : does not exist [ 1937.553373][ T4970] usb 1-1: USB disconnect, device number 109 [ 1937.564399][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1937.573594][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1937.581772][ T7347] usb 6-1: SerialNumber: syz [ 1937.596593][ T2674] usb 2-1: USB disconnect, device number 68 [ 1937.644004][ T2618] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.813664][ T4453] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1937.822760][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.830977][ T4453] usb 4-1: Product: syz [ 1937.835180][ T4453] usb 4-1: Manufacturer: syz [ 1937.839768][ T4453] usb 4-1: SerialNumber: syz [ 1937.844445][ T2618] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1937.853544][ T2618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.861539][ T2618] usb 5-1: Product: syz [ 1937.865757][ T2618] usb 5-1: Manufacturer: syz [ 1937.870447][ T2618] usb 5-1: SerialNumber: syz [ 1937.873746][ T7347] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1937.887969][ T7347] usb 6-1: USB disconnect, device number 31 [ 1937.934228][ T4453] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1937.944933][ T2618] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1937.951834][ T2618] cdc_ncm 5-1:1.1: bind() failure 12:25:34 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x40100) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/225) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/99) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000001c0)=""/139) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0xc, &(0x7f00000003c0)=ANY=[]}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r4, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000440)={0x17, 0xd1, &(0x7f0000000340)="833062767ebadd888cc61ed1d2ad4c8f9047ce8fdd25b934dd54e5d1eb7bbc347e8bc7e30dd87c9fb24f0d1e277d3f4a3b0abd538ad87cd3eb3800ad6ace05b1222e37ab702e197d4eac487cd76ced3dfb72bd390577195afb1b0d73adc0209f7208b8434fe6657dc1c936b45be3f8888a0cd3e4fd980947a8be461d45b6935ddbd3b9fcd252657ddf396e394041c1696c742b7210361e4f09481a05d54c8f543c3a7f90681eae7cf283ef5b2d36a58759164f878e498bfef543d69ac87afd3aee325b2bc5dd42ddf7bfb52e492f0af639"}) ioctl$EVIOCGSND(r3, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000300)={0xf9, 0x7ff, 0x0, 0x6, 0x53, 0x1}) 12:25:34 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:34 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:34 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x9, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1938.158495][ T7361] usb 5-1: USB disconnect, device number 10 [ 1938.243585][T22170] usb 3-1: Service connection timeout for: 257 [ 1938.249779][T22170] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1938.260609][T22170] ath9k_htc: Failed to initialize the device [ 1938.266750][ T32] usb 3-1: ath9k_htc: USB layer deinitialized [ 1938.393569][ T7347] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1938.404169][T30954] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1938.473578][ T8666] usb 2-1: Service connection timeout for: 257 [ 1938.479841][ T8666] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1938.490362][ T8666] ath9k_htc: Failed to initialize the device [ 1938.496620][ T2674] usb 2-1: ath9k_htc: USB layer deinitialized [ 1938.563583][ T7361] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1938.633609][ T32] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1938.641783][ T2618] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1938.643556][T30954] usb 1-1: Using ep0 maxpacket: 32 [ 1938.753695][ T7347] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1938.813672][T30954] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1938.842042][T31041] usb 4-1: USB disconnect, device number 67 [ 1938.848698][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:25:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000008c0)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x60}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x7}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xc4, &(0x7f0000000900)=@string={0xc4, 0x3, "3d348ba9d6f75b681235a9b2991ea5182b890f5aeac038875823206a35fbc38df216be2150d150242b10bb204e95e5a7f41db3d162b111907d5c78e40618e7c3e475a85c3c0fa9b165c2b4e92254942350f916b292e2bbb4e12a111808071180b983a9bc7bed3984935041b1d82591480f1b5691fd76cc05142db9e35593c7126c55204f3de13b5f790c67b3a7c1024ab15d5e90ad925566f7acbc20ca07100c7d760733fc9938493fde9d1824efa6606a812cad394bb41230a59ca268b1a5efdcc8"}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x5}, 0x0, 0x0, 0x3, [{0x41, &(0x7f0000000800)=ANY=[@ANYBLOB="4103956fbcb35edbc185aba5e7e732c22a6ba2b6171bcba14918e7817d8d9275416ec409afc972ee7b7b3661e5937ec956299e583a38c9"]}, {0x47, &(0x7f0000000fc0)=ANY=[@ANYBLOB="470322ef207d40f14d7a34ca6e70a4f455cd84325b50af903524d3f24270e8c7aa6c83a39bedb97671db002a5935030000000000000000004609a43b3d88771e3ab8"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=@generic={0x1, 0x2, 0x0, "06bc4904"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e539, [{{0x9, 0x2, 0xffffffffffffffd8}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x20, &(0x7f0000000d80)=ANY=[@ANYBLOB="050f200002"], 0x2, [{0x2, &(0x7f0000000680)=ANY=[@ANYBLOB='3']}, {0x4, &(0x7f0000000c80)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010002000000402505"], &(0x7f0000000f40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x2}, 0x11, &(0x7f0000000d40)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}, 0x5, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x5, &(0x7f0000000ec0)=@string={0x5, 0x3, "ddc234"}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000007c0)=@generic={0x3, 0x0, 0x0, "4dab806b"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1938.857845][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1938.865949][ T7347] usb 6-1: SerialNumber: syz [ 1938.873616][ T2674] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1938.934483][T30954] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1938.943290][T30954] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1938.953722][T30954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1938.983680][ T7361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.013680][ T32] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1939.103698][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1939.112798][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1939.120823][ T32] usb 3-1: SerialNumber: syz 12:25:35 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x18, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1939.144659][T30954] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1939.153843][T30954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.161841][T30954] usb 1-1: Product: syz [ 1939.163965][ T2674] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1939.166175][T30954] usb 1-1: Manufacturer: syz [ 1939.178569][T30954] usb 1-1: SerialNumber: syz [ 1939.184889][ T7347] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1939.205930][ T7347] usb 6-1: USB disconnect, device number 32 [ 1939.234519][ T7361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1939.243824][ T7361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.252584][ T7361] usb 5-1: Product: syz [ 1939.256900][ T7361] usb 5-1: Manufacturer: syz [ 1939.261739][ T7361] usb 5-1: SerialNumber: syz [ 1939.327621][ T7361] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1939.334760][ T7361] cdc_ncm 5-1:1.1: bind() failure 12:25:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/15) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffff8, 0x40201) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000140)={0x7, 0x11, 0x2, 0x4, "a638ba54df3addce45dfc95e5cab0025600301619b22e1390aa28c9aabffb6c7"}) syz_usb_control_io$hid(r1, 0x0, 0x0) [ 1939.413712][ T32] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 1939.424549][ T32] usb 3-1: USB disconnect, device number 49 12:25:36 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0xa, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1939.536206][ T7361] usb 5-1: USB disconnect, device number 11 [ 1939.613714][ T7347] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1939.621657][T30954] usb 1-1: 0:2 : does not exist [ 1939.633870][T30954] usb 1-1: USB disconnect, device number 110 [ 1939.673600][ T2618] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1939.680725][ T2618] ath9k_htc: Failed to initialize the device [ 1939.690879][T31041] usb 4-1: ath9k_htc: USB layer deinitialized [ 1939.783626][ T32] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1939.973638][ T2674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1939.982723][ T2674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.990755][ T2674] usb 2-1: Product: syz [ 1939.993583][ T7361] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1939.994961][ T2674] usb 2-1: Manufacturer: syz [ 1940.007085][ T2674] usb 2-1: SerialNumber: syz 12:25:36 executing program 0: ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000000c0)={0xa0, 0x80, 0x0, 0x5, 0x3}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000680)={0x16, 0x4f, &(0x7f0000000600)="d32019373d19bbda11eaf6ea20f02e3ff70c493c8f4958c25718d9e1d69b13407eb2a21df5425e8f2126b15c4e70143666e8127621a1fc90f9bce2f2e3b318dd3a50686405ba118dd0655e3277752c"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000280)={0x0, 0x9a, &(0x7f00000003c0)="254e6e6457b94a706f24b50b613bff3ebc5d669fcccfa7539dec9b67573fe9fe31fd712d55ac76b885d2ef5c535d1622962d706343eaf12d7abd5807823ec7ca6f45b0ed0c82289e1dc00fa40b0c6cfba5d882d2e07d943e4761e7cfcb900a43038cdee3afb200c911d20bcdab3ce19a11ac8e9d0abcef82b399e1fa04fa7f9b3dd714cbb6bb14b6172ddd199fc8e689936916cf4f0a289c4b99"}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x4, 0x50100) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000004c0)={0x6, 0xad, 0x80, 0x80000001}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/150) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000240)={0x7f, 0x0, 0x7, 0x7, "13e1f2c21a230f3bf54ae897933a6a1cccf0595a2ef48c9421f86472cae1459a"}) write$hidraw(0xffffffffffffffff, &(0x7f00000006c0)="6731d030b152bfb11ecd7652552b874c0d0234e438d1d275ab6bfda4a4b73adcb3d9f04a7ebfc95be3d4b10eeceedb11ec424a1061d1000d66a6a621125312eda072c8a857fbfd8bfb9e5142848d68abccc6619180fc13fcdfb368c8ca31d2801fa908f49304b472bd4d822c8ba00b6365b2af76456ded9772683e3c2dc494d112c019e618cd5ade1c5da83e83a34322eed1b078c9b6c27492f019c8b213ecd204dcfb", 0xa3) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000500)=""/137) [ 1940.054245][ T2674] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1940.073575][ T32] usb 3-1: device descriptor read/64, error 18 [ 1940.073820][ T7347] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1940.092831][T31041] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1940.193659][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1940.202748][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1940.210847][ T7347] usb 6-1: SerialNumber: syz [ 1940.373692][ T8666] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1940.403706][T31041] usb 4-1: too many configurations: 221, using maximum allowed: 8 12:25:37 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x1d, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1940.423701][ T7361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.463600][ T32] usb 3-1: device descriptor read/64, error 18 [ 1940.493739][ T7347] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1940.504209][ T7347] usb 6-1: USB disconnect, device number 33 [ 1940.633638][ T2674] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1940.663758][ T7361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1940.672861][ T7361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.680903][ T7361] usb 5-1: Product: syz [ 1940.685142][ T7361] usb 5-1: Manufacturer: syz [ 1940.689738][ T7361] usb 5-1: SerialNumber: syz [ 1940.733683][ T32] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1940.736647][ T7361] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1940.748137][ T7361] cdc_ncm 5-1:1.1: bind() failure [ 1940.893584][ T7347] usb 6-1: new high-speed USB device number 34 using dummy_hcd 12:25:37 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0xf, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1940.949293][ T7361] usb 5-1: USB disconnect, device number 12 [ 1941.003925][ T8666] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1941.013026][ T8666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.021618][ T8666] usb 1-1: Product: syz [ 1941.023594][ T32] usb 3-1: device descriptor read/64, error 18 [ 1941.025791][ T8666] usb 1-1: Manufacturer: syz [ 1941.036531][ T8666] usb 1-1: SerialNumber: syz [ 1941.037249][T12250] udc-core: couldn't find an available UDC or it's busy [ 1941.048298][T12250] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1941.074412][ T8666] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1941.273650][ T7347] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1941.288959][T22170] usb 2-1: USB disconnect, device number 69 [ 1941.323757][T31041] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1941.332847][T31041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.340876][T31041] usb 4-1: Product: syz [ 1941.345136][T31041] usb 4-1: Manufacturer: syz [ 1941.349814][T31041] usb 4-1: SerialNumber: syz [ 1941.383633][ T7361] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1941.394352][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1941.403384][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1941.411429][ T7347] usb 6-1: SerialNumber: syz [ 1941.416758][T31041] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1941.423794][ T32] usb 3-1: device descriptor read/64, error 18 [ 1941.543718][ T32] usb usb3-port1: attempt power cycle [ 1941.673749][ T8666] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1941.683844][ T7347] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1941.693232][ T7347] usb 6-1: USB disconnect, device number 34 12:25:38 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:38 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x2, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1941.743724][ T7361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:25:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000102067a9364000010203010902780003010000000904000000010100000a240100000002010205240400000904010000010200000904010101010200000c2492ca850e1201ea69ce0e08240201000000000905010900000000000725010000000009040200000102000009040201010102000009058209000000000007250100000000"], 0x0) [ 1941.893789][ T2618] usb 4-1: USB disconnect, device number 68 [ 1941.908161][T31041] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1941.917524][ T7361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1941.917717][ T2618] usb 4-1: ath9k_htc: USB layer deinitialized [ 1941.926629][ T7361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:25:38 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x6342) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0xfffffffffffffffc, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) write$hidraw(r1, &(0x7f0000001200)="9d", 0x1) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000200)="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", 0x200) [ 1941.926655][ T7361] usb 5-1: Product: syz [ 1941.926672][ T7361] usb 5-1: Manufacturer: syz [ 1941.926689][ T7361] usb 5-1: SerialNumber: syz [ 1941.966076][ T7361] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1941.973232][ T7361] cdc_ncm 5-1:1.1: bind() failure [ 1941.973539][ T32] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1942.030826][ T33] audit: type=1800 audit(1626783938.584:3330): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13966 res=0 errno=0 12:25:38 executing program 3: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x6342) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0xfffffffffffffffc, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) write$hidraw(r1, &(0x7f0000001200)="9d", 0x1) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000200)="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", 0x200) [ 1942.052622][ T33] audit: type=1804 audit(1626783938.584:3331): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723430313933313430362F73797A6B616C6C65722E467A303375572F313038352F48C7C060 dev="sda1" ino=13966 res=1 errno=0 [ 1942.083540][ T33] audit: type=1804 audit(1626783938.594:3332): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723430313933313430362F73797A6B616C6C65722E467A303375572F313038352F48C7C060 dev="sda1" ino=13966 res=1 errno=0 [ 1942.097644][ T8666] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 1942.119906][ T8666] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1942.138843][ T33] audit: type=1800 audit(1626783938.694:3333): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=48C7C060 dev="sda1" ino=13966 res=0 errno=0 [ 1942.160482][ T33] audit: type=1804 audit(1626783938.694:3334): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723430313933313430362F73797A6B616C6C65722E467A303375572F313038362F48C7C060 dev="sda1" ino=13966 res=1 errno=0 [ 1942.191132][ T2674] usb 2-1: Service connection timeout for: 257 [ 1942.191770][ T33] audit: type=1804 audit(1626783938.694:3335): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723430313933313430362F73797A6B616C6C65722E467A303375572F313038362F48C7C060 dev="sda1" ino=13966 res=1 errno=0 [ 1942.197347][ T2674] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 12:25:38 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x18, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1942.236025][ T2674] ath9k_htc: Failed to initialize the device [ 1942.242105][T22170] usb 2-1: ath9k_htc: USB layer deinitialized [ 1942.253583][ T7347] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1942.261553][ T7361] usb 5-1: USB disconnect, device number 13 12:25:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000000000001000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x2c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x60}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x7}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x440a}}, {0x0, 0x0}, {0x2, 0x0}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=@generic={0x1, 0x2, 0x0, "06bc4904"}) syz_usb_connect_ath9k(0x3, 0x7e, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e6f6, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1e5e, 0x313, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, {0x9}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x0, 0x1}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="05290500b5b0"], 0x1, [{0x4, &(0x7f0000000f00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e539, [{{0x9, 0x2, 0xffffffffffffffd8}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5aff5b65d8aa014e, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e5b3, [{{0x9, 0x2, 0x2560b6671ffb0e56}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000004f0453b6400e0102030109022400010100b000090400000003010000092100000001220000090581030000000000"], &(0x7f0000000840)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x0, 0x20}, 0x41, &(0x7f0000000fc0)={0x5, 0xf, 0x41, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x10001}, @generic={0x30, 0x10, 0x0, "c9518f59bd848896211e5cdc1390c8a61f66db6489e8920e461a17eaf704fffbff48441ee233b7037143f28f85"}]}, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000c80)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000f40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x2}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1942.294849][ T32] usb 3-1: device descriptor read/8, error -61 [ 1942.319111][T31041] usb 1-1: USB disconnect, device number 111 [ 1942.327892][ T8666] ath9k_htc: Failed to initialize the device [ 1942.335550][T31041] usb 1-1: ath9k_htc: USB layer deinitialized 12:25:38 executing program 2: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x105762) syz_open_dev$hidraw(0xfffffffffffffffc, 0x2, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x9f2) read$hidraw(r0, &(0x7f0000001380)=""/4096, 0x1009) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x2}, {}, @rumble={0x0, 0xfff}}) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x141f42) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r2, &(0x7f00000002c0)="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", 0xfffffc71) write$hidraw(r1, &(0x7f0000002480)="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", 0x108) syz_open_dev$hidraw(&(0x7f0000000040), 0x16, 0x660601) ioctl$HIDIOCGRAWNAME(r1, 0x40305828, &(0x7f0000000080)) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x1e, 0x0, 0x101, "fe105402c66a6a003ec13e200000000000060000000000000000000400df00"}) [ 1942.443762][ T33] audit: type=1800 audit(1626783939.004:3336): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=13972 res=0 errno=0 [ 1942.465957][ T33] audit: type=1804 audit(1626783939.004:3337): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313139372F48C7C060 dev="sda1" ino=13972 res=1 errno=0 [ 1942.496805][ T33] audit: type=1804 audit(1626783939.004:3338): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313139372F48C7C060 dev="sda1" ino=13972 res=1 errno=0 12:25:39 executing program 2: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x9c8, 0x121444) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x5, 0x1) write$hidraw(r0, &(0x7f0000000000)="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", 0x1f0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000180)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa}, 0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="050f5e00031410245bae59b98250a40410c22529567bea77bb14100409246f3508687e6620bd6d6dbd01436b92311001ce1a666d584c5ac91947695239abea950e"], 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]}) syz_usb_control_io(r3, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xcc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x4}, 0x8, &(0x7f0000000480)={0x5, 0xf, 0x8, 0x1, [@generic={0x3}]}, 0x5, [{0x4, &(0x7f00000005c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x4, &(0x7f0000000740)=@lang_id={0x4}}, {0x4, &(0x7f0000000780)=@lang_id={0x4}}, {0x87, &(0x7f0000000640)=@string={0x87, 0x3, "f39047760b7aa05c272ee4c8499ed606ceac29e0d9698aeb6e23e306c943ab4258f949139070fbcf40f3dfe6f0cc318216cbc9c045c3f08707c0f287dd3d12e23c1058646c798b4706256e12909c541ce90b67e9781e852ad6b39095b87f2eeb57422c1fe98a266e023b1e5453c00c78a3ab632dc9185f8274d4b9e6cc302bed6c00b8d176"}}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 1942.528518][ T33] audit: type=1804 audit(1626783939.004:3339): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313139372F48C7C060 dev="sda1" ino=13972 res=1 errno=0 [ 1942.558572][ T32] usb 3-1: device descriptor read/8, error -71 [ 1942.633645][ T7347] usb 6-1: config 1 has an invalid interface descriptor of length 2, skipping [ 1942.633710][ T2618] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1942.642655][ T7347] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.650585][T22170] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1942.660662][ T7347] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1942.683598][ T7361] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1942.753821][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1942.762913][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1942.770948][ T7347] usb 6-1: SerialNumber: syz [ 1943.003806][ T2618] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1943.011845][T22170] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1943.024574][ T4970] usb 6-1: USB disconnect, device number 35 [ 1943.044089][ T7361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1943.083660][ T32] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1943.091746][ T4453] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1943.233943][ T7361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1943.234171][ T32] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 1943.243144][ T7361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.258973][ T7361] usb 5-1: Product: syz [ 1943.263380][ T7361] usb 5-1: Manufacturer: syz [ 1943.268076][ T7361] usb 5-1: SerialNumber: syz [ 1943.326276][ T7361] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1943.333159][ T7361] cdc_ncm 5-1:1.1: bind() failure [ 1943.532185][ T7361] usb 5-1: USB disconnect, device number 14 12:25:40 executing program 0: ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f00000000c0)={0xa0, 0x80, 0x0, 0x5, 0x3}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000680)={0x16, 0x4f, &(0x7f0000000600)="d32019373d19bbda11eaf6ea20f02e3ff70c493c8f4958c25718d9e1d69b13407eb2a21df5425e8f2126b15c4e70143666e8127621a1fc90f9bce2f2e3b318dd3a50686405ba118dd0655e3277752c"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000280)={0x0, 0x9a, &(0x7f00000003c0)="254e6e6457b94a706f24b50b613bff3ebc5d669fcccfa7539dec9b67573fe9fe31fd712d55ac76b885d2ef5c535d1622962d706343eaf12d7abd5807823ec7ca6f45b0ed0c82289e1dc00fa40b0c6cfba5d882d2e07d943e4761e7cfcb900a43038cdee3afb200c911d20bcdab3ce19a11ac8e9d0abcef82b399e1fa04fa7f9b3dd714cbb6bb14b6172ddd199fc8e689936916cf4f0a289c4b99"}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x4, 0x50100) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000004c0)={0x6, 0xad, 0x80, 0x80000001}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/150) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000240)={0x7f, 0x0, 0x7, 0x7, "13e1f2c21a230f3bf54ae897933a6a1cccf0595a2ef48c9421f86472cae1459a"}) write$hidraw(0xffffffffffffffff, &(0x7f00000006c0)="6731d030b152bfb11ecd7652552b874c0d0234e438d1d275ab6bfda4a4b73adcb3d9f04a7ebfc95be3d4b10eeceedb11ec424a1061d1000d66a6a621125312eda072c8a857fbfd8bfb9e5142848d68abccc6619180fc13fcdfb368c8ca31d2801fa908f49304b472bd4d822c8ba00b6365b2af76456ded9772683e3c2dc494d112c019e618cd5ade1c5da83e83a34322eed1b078c9b6c27492f019c8b213ecd204dcfb", 0xa3) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000500)=""/137) 12:25:40 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x3, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:40 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x1d, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1943.653927][ T4453] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1943.663083][ T4453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.671270][ T4453] usb 1-1: Product: syz [ 1943.675582][ T4453] usb 1-1: Manufacturer: syz [ 1943.713694][ T4453] usb 1-1: can't set config #1, error -71 [ 1943.720481][ T4453] usb 1-1: USB disconnect, device number 112 [ 1943.833675][T22170] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1943.842777][T22170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.851018][T22170] usb 2-1: Product: syz [ 1943.855494][T22170] usb 2-1: Manufacturer: syz [ 1943.860130][T22170] usb 2-1: SerialNumber: syz [ 1943.864797][ T2618] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1943.873904][ T2618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.881885][ T2618] usb 4-1: Product: syz [ 1943.886064][ T2618] usb 4-1: Manufacturer: syz [ 1943.890659][ T2618] usb 4-1: SerialNumber: syz [ 1943.923803][ T7347] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1943.934435][ T2618] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1943.943203][T22170] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1944.083653][ T7361] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1944.093615][ T4453] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1944.101895][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1944.111305][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.119338][ T32] usb 3-1: Product: syz [ 1944.123656][ T32] usb 3-1: Manufacturer: syz [ 1944.128295][ T32] usb 3-1: SerialNumber: syz [ 1944.174369][ T32] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1944.373792][ T7347] usb 6-1: config 1 has an invalid interface descriptor of length 3, skipping [ 1944.382731][ T7347] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.392820][ T7347] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1944.483651][ T7361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1944.494948][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1944.504011][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1944.512012][ T7347] usb 6-1: SerialNumber: syz [ 1944.523701][T22170] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1944.533755][ T2618] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1944.663783][ T4453] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1944.672945][ T4453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.681027][ T4453] usb 1-1: Product: syz [ 1944.685302][ T4453] usb 1-1: Manufacturer: syz [ 1944.689913][ T4453] usb 1-1: SerialNumber: syz [ 1944.693616][ T7361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1944.704236][ T7361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.712319][ T7361] usb 5-1: Product: syz [ 1944.716613][ T7361] usb 5-1: Manufacturer: syz [ 1944.721742][ T7361] usb 5-1: SerialNumber: syz [ 1944.734228][ T4453] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1944.746639][ T32] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1944.769155][ T7361] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1944.775988][ T7361] cdc_ncm 5-1:1.1: bind() failure [ 1944.792314][ T7361] usb 6-1: USB disconnect, device number 36 [ 1944.940802][T12433] udc-core: couldn't find an available UDC or it's busy [ 1944.948225][T12433] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1944.958814][T12474] udc-core: couldn't find an available UDC or it's busy [ 1944.967767][T12474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1944.976682][T12474] udc-core: couldn't find an available UDC or it's busy [ 1944.982718][ T7347] usb 5-1: USB disconnect, device number 15 [ 1944.983783][T12474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1945.013128][T12474] udc-core: couldn't find an available UDC or it's busy [ 1945.020273][T12474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1945.030953][T12474] udc-core: couldn't find an available UDC or it's busy [ 1945.038107][T12474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1945.046592][T12474] udc-core: couldn't find an available UDC or it's busy [ 1945.053802][T12474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1945.151344][T12490] udc-core: couldn't find an available UDC or it's busy [ 1945.158434][T12490] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1945.167248][T12490] udc-core: couldn't find an available UDC or it's busy [ 1945.174386][T12490] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1945.185906][ T2674] usb 2-1: USB disconnect, device number 70 [ 1945.284956][ T7347] usb 4-1: USB disconnect, device number 69 [ 1945.323648][ T4453] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1945.397175][ T7361] usb 3-1: USB disconnect, device number 53 12:25:42 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:42 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x4, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:42 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000000000001000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x2c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x60}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x7}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x440a}}, {0x0, 0x0}, {0x2, 0x0}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=@generic={0x1, 0x2, 0x0, "06bc4904"}) syz_usb_connect_ath9k(0x3, 0x7e, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e6f6, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1e5e, 0x313, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, {0x9}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x0, 0x1}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="05290500b5b0"], 0x1, [{0x4, &(0x7f0000000f00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e539, [{{0x9, 0x2, 0xffffffffffffffd8}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5aff5b65d8aa014e, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e5b3, [{{0x9, 0x2, 0x2560b6671ffb0e56}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000004f0453b6400e0102030109022400010100b000090400000003010000092100000001220000090581030000000000"], &(0x7f0000000840)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x0, 0x20}, 0x41, &(0x7f0000000fc0)={0x5, 0xf, 0x41, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x10001}, @generic={0x30, 0x10, 0x0, "c9518f59bd848896211e5cdc1390c8a61f66db6489e8920e461a17eaf704fffbff48441ee233b7037143f28f85"}]}, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000c80)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000f40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x2}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1945.745129][ T4453] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 1945.750794][ T4453] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1945.946968][T30954] usb 1-1: USB disconnect, device number 113 [ 1945.956055][ T4453] ath9k_htc: Failed to initialize the device [ 1945.962401][T30954] usb 1-1: ath9k_htc: USB layer deinitialized [ 1945.971576][T31041] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1945.983590][ T8666] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1945.993721][T22170] usb 2-1: Service connection timeout for: 257 [ 1945.999924][T22170] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1946.008397][T22170] ath9k_htc: Failed to initialize the device [ 1946.014958][ T2674] usb 2-1: ath9k_htc: USB layer deinitialized [ 1946.153592][ T2618] usb 4-1: Service connection timeout for: 257 [ 1946.159783][ T2618] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1946.170402][ T2618] ath9k_htc: Failed to initialize the device [ 1946.176465][ T7347] usb 4-1: ath9k_htc: USB layer deinitialized [ 1946.233660][ T32] usb 3-1: Service connection timeout for: 257 [ 1946.239992][ T32] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1946.252070][ T32] ath9k_htc: Failed to initialize the device [ 1946.258470][ T7361] usb 3-1: ath9k_htc: USB layer deinitialized [ 1946.333648][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1946.344765][ T8666] usb 6-1: config 1 has an invalid interface descriptor of length 4, skipping [ 1946.353717][ T8666] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1946.362400][ T8666] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1946.372511][ T8666] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1946.403565][ T2674] usb 2-1: new high-speed USB device number 71 using dummy_hcd 12:25:43 executing program 0: ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000300)={0x3, 0x0, 0xdfff0001, 0x0, 0x3}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000200)=""/7) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000680)={0x4, 0xfffffffffffffd9b, &(0x7f0000000500)="d32019373d19bbda11eaf6ea20f02e3ff70c493c8f4958c25718d9e1d69b13407eb2a21df5425e8f2126b15c4e70143666e8127621a1fc90f9bce2f2e3b318dd3a50686405ba118dd0655e327775"}) syz_open_dev$evdev(&(0x7f0000000340), 0x100, 0x10800) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0x5dd, &(0x7f0000000940)="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"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x33d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "ffe0ebf1", {0x1, 0x1, 0x8, 0x7, 0x5}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x99}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000005c0)=@lang_id={0x4}}]}) [ 1946.453966][ T8666] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1946.463021][ T8666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1946.471073][ T8666] usb 6-1: SerialNumber: syz 12:25:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x6}, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0xc1, &(0x7f0000000e80)=@string={0xc1, 0x3, "1df23af6fc444dc31da52f2eb2ec62da9b958aac0069ab93b4a45e4df69443e05418bcea4a173e0843dd4d7a381dd13a033371bbe74deff8bc3796dcabf3b355d7ff383ed50087fd4d720bfa03959281a39d9580e58d90c4c488d1d744d9037a89e5a5f6f6bbee66ca0a4f140ab5070253d1f5e408b8939ea7228c326fcf8b4cbdc2f0a4264c895255e1ef955aa0faef4430471676266954035dfd7f936f1b69c1854a71c250d87f1a31218d3ca1065d62062e3ee1d3596c51e482d22882c9"}}, {0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="0203d13f33e9525d75d71e9888c5357a1f5f884b2e2a95fa0e106fa2abc28fc08bc63dcfd352b4b1db247bfa9fb21e231332cb57c04a4629468a8d"]}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2001}}, {0x81, &(0x7f0000000f80)=@string={0x81, 0x3, "c102096ef5a6083605b9106f10889c9104ae9c5e9637e423ecc81ac62358879290307d9f2cb15ea44093f4b32a96b38b452e94b78434b04f2a804c9908541985b952142acdfab829a6629727e63c60c1695c8a5506ca75b17b4509873babef3ceef18d88b307b30debd28f0bda4246574b9fd4454a1bc3b4594d28f945d36b"}}, {0x101, &(0x7f0000000d40)=ANY=[@ANYRES16]}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000003c0)=0x6) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffc3a}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], &(0x7f0000001240)={0xa, &(0x7f0000000180)={0xa}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b80000000799d5ceeab479a3ffa6a6f2239a3e458c024a41bf0630000000100"}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x10}, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="01d6"], 0x6, [{0xc1, &(0x7f0000000b40)=@string={0xc1, 0x3, "c86223e001df9a42a8e3f4cff5dfbf2afed9e8c8e658f2448f6dedfdaa05cc40a77ee048dc25f442186476b29ef3ef2f7369c85bda2060b29af44e9cfd0612256b2fd09cfea2aa7dab8bd91d7f8de4f4394c9c9b6fc148d59755b8f3cb87bc2fca4e63dda83e8f310c58baf822eca23bd4c169ad5a582031b98e6d1e9608f3539c3b922b4bde6885700eadf47f1ee6327f4b5a2f756b891d4338ea9160af8b95782c05e4c9274dd8ff2a194277a3692cd4148ca211eed0e2581e09be46745b"}}, {0x1d, &(0x7f0000000c40)=@string={0x1d, 0x3, "8d75f440d5c759f9ffa7aab5f3de8b955b705e833b3987b925134b"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1401}}, {0x18, &(0x7f0000000940)=@string={0x18, 0x3, "2702726a3dc86cf0c981b3db43053730d7c8598e6ca7"}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000006a0561004000010203010902240001010400ff09040000000301000000210000030122f10f0905810300000040ff0cfd147c4a18a03808f81d"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa}, 0x0, 0x0, 0x2, [{0x16, &(0x7f0000001040)=ANY=[@ANYBLOB="16032b86b1c1ea1e703aecd2db22e4b376461b36891f61b9cfa777a9fe732e3a58daf9245171283d9a77622aed51cf334187da1b229b4bf6a034289ee0325d428791d1ece4f6b7211f5a61224873a1497b0e68a6e5fb79a38b4bafa7671e256767770acac19dc8eac7904abc9a0ed09dbb18130165ded91b470f806fe7166add1c08725098227c93dc873982c46347cd32"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1946.533818][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1946.542904][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.551444][T31041] usb 5-1: Product: syz [ 1946.555684][T31041] usb 5-1: Manufacturer: syz [ 1946.560281][T31041] usb 5-1: SerialNumber: syz [ 1946.573854][ T7347] usb 4-1: new high-speed USB device number 70 using dummy_hcd 12:25:43 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x5, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1946.723654][ T2674] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1946.734440][ T8666] usb 6-1: USB disconnect, device number 37 12:25:43 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x2, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1946.774163][ T4453] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1946.843685][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1946.851879][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1946.858858][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1946.873618][ T7347] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1946.881512][ T7361] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1946.891454][T31041] usb 5-1: USB disconnect, device number 16 [ 1947.093669][ T4453] usb 1-1: too many configurations: 221, using maximum allowed: 8 [ 1947.133592][ T8666] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1947.163624][ T7361] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 1947.253620][T31041] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1947.493740][ T8666] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping [ 1947.502632][ T8666] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.512870][ T8666] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1947.594016][ T8666] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1947.603212][ T8666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1947.611411][ T8666] usb 6-1: SerialNumber: syz [ 1947.633840][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.683686][ T7347] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1947.692953][ T7347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.701405][ T7347] usb 4-1: Product: syz [ 1947.705769][ T7347] usb 4-1: Manufacturer: syz [ 1947.710540][ T7347] usb 4-1: SerialNumber: syz [ 1947.723952][ T2674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1947.733125][ T2674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.741203][ T2674] usb 2-1: Product: syz [ 1947.745441][ T2674] usb 2-1: Manufacturer: syz [ 1947.750030][ T2674] usb 2-1: SerialNumber: syz [ 1947.754205][ T7347] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1947.814345][ T2674] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1947.833919][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1947.842956][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.850985][T31041] usb 5-1: Product: syz [ 1947.855185][T31041] usb 5-1: Manufacturer: syz [ 1947.859784][T31041] usb 5-1: SerialNumber: syz 12:25:44 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x6, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1947.867882][T22170] usb 6-1: USB disconnect, device number 38 [ 1948.003737][ T7361] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1948.012883][ T7361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.020905][ T7361] usb 3-1: Product: syz [ 1948.025164][ T7361] usb 3-1: Manufacturer: syz [ 1948.029843][ T7361] usb 3-1: SerialNumber: syz [ 1948.073720][ T4453] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1948.074184][ T7361] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1948.082916][ T4453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.099027][ T4453] usb 1-1: Product: syz [ 1948.103206][ T4453] usb 1-1: Manufacturer: syz [ 1948.107845][ T4453] usb 1-1: SerialNumber: syz 12:25:44 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x3, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1948.183630][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1948.192453][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1948.199557][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1948.248092][T31041] usb 5-1: USB disconnect, device number 17 [ 1948.264445][ T4453] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1948.353651][T22170] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1948.373663][ T7347] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1948.503626][ T2674] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1948.623610][T31041] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1948.663695][ T7361] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1948.783702][T22170] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1948.792600][T22170] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.802798][T22170] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1948.805441][T12602] udc-core: couldn't find an available UDC or it's busy [ 1948.819408][T12602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1948.835279][T12602] udc-core: couldn't find an available UDC or it's busy [ 1948.842315][T12602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1948.852949][T12602] udc-core: couldn't find an available UDC or it's busy [ 1948.860013][T12602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1948.870423][T12640] udc-core: couldn't find an available UDC or it's busy [ 1948.870633][T12602] udc-core: couldn't find an available UDC or it's busy [ 1948.877509][T12640] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1948.884514][T12602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1948.903997][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1948.907302][T12597] udc-core: couldn't find an available UDC or it's busy [ 1948.913306][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1948.920432][T12597] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1948.928461][T22170] usb 6-1: SerialNumber: syz [ 1948.938182][T12602] udc-core: couldn't find an available UDC or it's busy [ 1948.947519][T12602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.013667][ T4453] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1949.033749][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1949.095140][T12640] udc-core: couldn't find an available UDC or it's busy [ 1949.102085][T12640] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.111636][T12640] udc-core: couldn't find an available UDC or it's busy [ 1949.118808][T12640] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.128164][T12640] udc-core: couldn't find an available UDC or it's busy [ 1949.135214][T12640] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.143158][T12640] udc-core: couldn't find an available UDC or it's busy [ 1949.150161][T12640] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.167636][ T8666] usb 2-1: USB disconnect, device number 71 [ 1949.181741][T30954] usb 4-1: USB disconnect, device number 70 12:25:45 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x7, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1949.203975][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1949.204478][T22170] usb 6-1: USB disconnect, device number 39 [ 1949.213307][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.213336][T31041] usb 5-1: Product: syz [ 1949.213353][T31041] usb 5-1: Manufacturer: syz [ 1949.236332][T31041] usb 5-1: SerialNumber: syz [ 1949.378112][ T32] usb 3-1: USB disconnect, device number 54 [ 1949.446942][T12634] udc-core: couldn't find an available UDC or it's busy [ 1949.454228][T12634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.462833][T12634] udc-core: couldn't find an available UDC or it's busy [ 1949.469847][T12634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.477944][T12634] udc-core: couldn't find an available UDC or it's busy [ 1949.485092][T12634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:25:46 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x4, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1949.493186][T12634] udc-core: couldn't find an available UDC or it's busy [ 1949.501055][T12634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1949.511314][ T2661] usb 1-1: USB disconnect, device number 114 [ 1949.593660][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1949.600499][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1949.607808][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1949.621592][T31041] usb 5-1: USB disconnect, device number 18 [ 1949.634075][T22170] usb 6-1: new high-speed USB device number 40 using dummy_hcd 12:25:46 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0xb6, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x5, 0x1e, 0x0, 0x0, "969d405438a1819a250fcc83857c290b63daff707f1fd5013ab9cc2a590fbd9f"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYRES64], 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000340)={0x1b, 0x16, 0x0, 0x0, "c0b4d34c7aa8c0ba318d525442d64406abcd4b0a46daf82937994772fe3f221d"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000300)={0x1, 0x6, 0x0, 0x0, "f186f0fe8b8fc1a47f69d0158bbf9aebd8870b73a62d2c390f0b169154bafda6"}) syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000007c0)=""/139) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000000fc0df8ffffff0102030109022400010100000009040000000301000009210000000122916b1a8bb50bb2bd64fa304175f10000090681030000000000"], &(0x7f0000000a00)={0xa, &(0x7f0000000480)={0xa}, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f050018115c"], 0x3, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000940)=@lang_id={0x4}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 12:25:46 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x5}, {0x0, 0x3}, @rumble={0x1, 0xffff}}) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1e1f42) write$hidraw(r1, &(0x7f00000003c0)="d0", 0x1) ioctl$HIDIOCGRAWNAME(r1, 0x40305839, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000140), 0x3, 0x228200) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000180)=""/56) write$hidraw(r0, &(0x7f0000000000)="03", 0xfd50) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000001340)) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="3673dd62", 0x4) read$hidraw(0xffffffffffffffff, &(0x7f0000001480)=""/145, 0x91) read$hidraw(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x800000) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) syz_open_dev$hidraw(&(0x7f0000000100), 0x8001, 0x501000) read$hidraw(0xffffffffffffffff, &(0x7f0000001380)=""/246, 0xf6) r2 = syz_open_dev$hidraw(&(0x7f0000001280), 0x0, 0x430182) read$hidraw(r1, &(0x7f0000001540)=""/235, 0xeb) read$hidraw(r2, 0x0, 0x0) read$hidraw(r2, 0x0, 0x5) [ 1949.983583][T31041] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1949.993739][ T7347] usb 4-1: Service connection timeout for: 257 [ 1949.997024][ T2674] usb 2-1: Service connection timeout for: 257 [ 1950.000057][ T7347] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1950.006202][ T2674] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1950.010169][ T2674] ath9k_htc: Failed to initialize the device 12:25:46 executing program 2: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x5}, {0x0, 0x3}, @rumble={0x1, 0xffff}}) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1e1f42) write$hidraw(r1, &(0x7f00000003c0)="d0", 0x1) ioctl$HIDIOCGRAWNAME(r1, 0x40305839, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000140), 0x3, 0x228200) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000180)=""/56) write$hidraw(r0, &(0x7f0000000000)="03", 0xfd50) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000001340)) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="3673dd62", 0x4) read$hidraw(0xffffffffffffffff, &(0x7f0000001480)=""/145, 0x91) read$hidraw(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x800000) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040)) syz_open_dev$hidraw(&(0x7f0000000100), 0x8001, 0x501000) read$hidraw(0xffffffffffffffff, &(0x7f0000001380)=""/246, 0xf6) r2 = syz_open_dev$hidraw(&(0x7f0000001280), 0x0, 0x430182) read$hidraw(r1, &(0x7f0000001540)=""/235, 0xeb) read$hidraw(r2, 0x0, 0x0) read$hidraw(r2, 0x0, 0x5) [ 1950.015225][ T7347] ath9k_htc: Failed to initialize the device [ 1950.034557][ T8666] usb 2-1: ath9k_htc: USB layer deinitialized [ 1950.041608][T30954] usb 4-1: ath9k_htc: USB layer deinitialized [ 1950.053902][T22170] usb 6-1: config 1 has an invalid interface descriptor of length 7, skipping [ 1950.062830][T22170] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.072947][T22170] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 12:25:46 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xc0, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x17, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x33, &(0x7f0000000e00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe6d}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="05"], 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000000400)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x2, [{0x41, &(0x7f0000000940)=ANY=[@ANYBLOB="4103956fb0bb5edbc100000000000004016ba20100000000000000c47772ee7b7b3661e5937ec956299e583a38c900002bf04f6a2e17bab382f4faa9af777b2d6e7a2f7c00000000000000000000000000005226fb2332a947fe5d93d05e3d07ed014d25dafdf321b1056b617f6850c83335f895e8983232183e93c85bffa557f6e98f"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="a1000000"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x61, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12"], &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa}, 0x20, &(0x7f0000000700)=ANY=[@ANYRESOCT=r2], 0x1, [{0x4, &(0x7f0000000c80)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYRESOCT], &(0x7f0000000f40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x2}, 0x11, &(0x7f0000000d40)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}, 0x5, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB]}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000c686f9de517337b47ee086fa21a405271188160b8d0011d4881ff764448e06955cac55e8b3d9329488fdc6f8224a652867c603a6e39c0258"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000ac0)=@ready={0x0, 0x0, 0x8, "b4ff29da", {0x1, 0x5, 0x8, 0xcf, 0x9}}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x5) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:25:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x0, 0x1f, 0x5, 0x800, "9dccbd6e626abc3a725eeefc4a83c9b8d6e869684f77ffcbadd0460d663221f0"}) syz_usb_connect$cdc_ncm(0x3, 0x83, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x9, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x32}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x32}, [@obex={0x5, 0x24, 0x15, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x5}, @mbim_extended={0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "499d4a137d4bbfa01e74b5bfe2f663be"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x2}]}, 0x2, [{0x2b, 0x0}, {0x3, &(0x7f0000000380)=@string={0x3, 0x3, "b1"}}]}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000240)={0x5, 0x5, 0x96, 0x6, "50779295ad99e02b23dc5eb59ec1cfeda12c5a025ac360aee1c9365bb1136ebe"}) ioctl$EVIOCGSND(r1, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x76, 0xd, 0xe0, 0xe18, "3bf62057007baf74da6ebbd5e7a8ad5bcf45145fd582b987d17804d1d5b90a95"}) [ 1950.203786][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1950.212901][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1950.220967][T22170] usb 6-1: SerialNumber: syz [ 1950.233577][ T7361] usb 3-1: Service connection timeout for: 257 [ 1950.239792][ T7361] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1950.255330][ T7361] ath9k_htc: Failed to initialize the device [ 1950.262534][ T32] usb 3-1: ath9k_htc: USB layer deinitialized [ 1950.313695][ T4453] usb 1-1: Service connection timeout for: 256 [ 1950.319935][ T4453] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1950.330824][ T4453] ath9k_htc: Failed to initialize the device [ 1950.337750][ T2661] usb 1-1: ath9k_htc: USB layer deinitialized [ 1950.363746][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1950.423569][T30954] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1950.431398][ T8666] usb 2-1: new high-speed USB device number 72 using dummy_hcd 12:25:47 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x8, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1950.481139][T22170] usb 6-1: USB disconnect, device number 40 [ 1950.533703][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1950.542921][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.550942][T31041] usb 5-1: Product: syz [ 1950.555223][T31041] usb 5-1: Manufacturer: syz [ 1950.559823][T31041] usb 5-1: SerialNumber: syz [ 1950.663722][ T32] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1950.713686][ T2661] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1950.724238][T30954] usb 4-1: too many configurations: 210, using maximum allowed: 8 [ 1950.732116][ T8666] usb 2-1: too many configurations: 38, using maximum allowed: 8 12:25:47 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x5, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1950.883819][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1950.890563][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1950.897470][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1950.913615][T22170] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1950.915333][T31041] usb 5-1: USB disconnect, device number 19 [ 1950.993642][ T2661] usb 1-1: too many configurations: 192, using maximum allowed: 8 [ 1951.053634][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.064562][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1951.074750][ T32] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1951.084547][ T32] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1951.273605][T31041] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1951.303640][T22170] usb 6-1: config 1 has an invalid interface descriptor of length 8, skipping [ 1951.312617][T22170] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.322764][T22170] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1951.363878][ T32] usb 3-1: language id specifier not provided by device, defaulting to English [ 1951.403928][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1951.413159][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1951.421393][T22170] usb 6-1: SerialNumber: syz [ 1951.523692][T30954] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1951.532859][T30954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.541037][T30954] usb 4-1: Product: syz [ 1951.543699][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1951.545258][T30954] usb 4-1: Manufacturer: syz [ 1951.554290][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.554322][ T32] usb 3-1: Product: syz [ 1951.554337][ T32] usb 3-1: SerialNumber: syz [ 1951.558908][T30954] usb 4-1: SerialNumber: syz [ 1951.580461][ T8666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1951.589624][ T8666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.597767][ T8666] usb 2-1: Product: syz [ 1951.602022][ T8666] usb 2-1: Manufacturer: syz [ 1951.606861][ T8666] usb 2-1: SerialNumber: syz [ 1951.644253][ T8666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1951.654245][T30954] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:48 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0xa, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1951.683839][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.703878][ T2674] usb 6-1: USB disconnect, device number 41 [ 1951.853754][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1951.862919][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.870979][T31041] usb 5-1: Product: syz [ 1951.875246][T31041] usb 5-1: Manufacturer: syz [ 1951.879849][T31041] usb 5-1: SerialNumber: syz [ 1951.884612][ T2661] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1951.893697][ T2661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.901689][ T2661] usb 1-1: Product: syz [ 1951.903894][ T32] cdc_ncm 3-1:1.0: bind() failure [ 1951.905870][ T2661] usb 1-1: Manufacturer: syz [ 1951.915480][ T2661] usb 1-1: SerialNumber: syz [ 1951.920841][ T32] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1951.927886][ T32] cdc_ncm 3-1:1.1: bind() failure [ 1951.959029][ T32] usb 3-1: USB disconnect, device number 55 [ 1951.964136][ T2661] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:48 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x6, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1952.143589][ T2674] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1952.233876][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1952.240726][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1952.247638][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1952.256440][T31041] usb 5-1: USB disconnect, device number 20 [ 1952.273953][ T8666] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:25:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x0, 0x1f, 0x5, 0x800, "9dccbd6e626abc3a725eeefc4a83c9b8d6e869684f77ffcbadd0460d663221f0"}) syz_usb_connect$cdc_ncm(0x3, 0x83, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x9, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x32}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x32}, [@obex={0x5, 0x24, 0x15, 0x20}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x5}, @mbim_extended={0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "499d4a137d4bbfa01e74b5bfe2f663be"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x2}]}, 0x2, [{0x2b, 0x0}, {0x3, &(0x7f0000000380)=@string={0x3, 0x3, "b1"}}]}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000240)={0x5, 0x5, 0x96, 0x6, "50779295ad99e02b23dc5eb59ec1cfeda12c5a025ac360aee1c9365bb1136ebe"}) ioctl$EVIOCGSND(r1, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x76, 0xd, 0xe0, 0xe18, "3bf62057007baf74da6ebbd5e7a8ad5bcf45145fd582b987d17804d1d5b90a95"}) [ 1952.282958][T30954] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1952.478760][T12764] udc-core: couldn't find an available UDC or it's busy [ 1952.485894][T12764] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1952.543644][ T2661] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1952.543684][ T2674] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1952.562744][ T2674] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1952.633984][T31041] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1952.678991][T12760] udc-core: couldn't find an available UDC or it's busy [ 1952.686039][T12760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1952.694198][ T2674] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1952.695169][T12764] udc-core: couldn't find an available UDC or it's busy [ 1952.703242][ T2674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1952.703268][ T2674] usb 6-1: SerialNumber: syz [ 1952.725843][T12764] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1952.736191][T12764] udc-core: couldn't find an available UDC or it's busy [ 1952.743148][T12764] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1952.751775][T12764] udc-core: couldn't find an available UDC or it's busy [ 1952.758860][T12764] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1952.764296][ T2674] cdc_ether 6-1:1.0: skipping garbage [ 1952.767373][T12764] udc-core: couldn't find an available UDC or it's busy [ 1952.771734][ T2674] cdc_ether 6-1:1.0: invalid descriptor buffer length [ 1952.779292][T12764] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1952.785985][ T2674] usb 6-1: bad CDC descriptors [ 1952.803725][ T32] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1952.936372][ T2674] usb 2-1: USB disconnect, device number 72 [ 1952.963530][T12793] udc-core: couldn't find an available UDC or it's busy [ 1952.970545][T12793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:25:49 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0xb, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1952.983846][ T7361] usb 6-1: USB disconnect, device number 42 [ 1953.003963][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.005892][T12793] udc-core: couldn't find an available UDC or it's busy [ 1953.021905][T12793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1953.032624][ T7347] usb 4-1: USB disconnect, device number 71 [ 1953.054932][T12793] udc-core: couldn't find an available UDC or it's busy [ 1953.061913][T12793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1953.070618][T12793] udc-core: couldn't find an available UDC or it's busy [ 1953.077770][T12793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1953.086292][T12793] udc-core: couldn't find an available UDC or it's busy [ 1953.093249][T12793] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1953.173646][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1953.182687][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.190774][T31041] usb 5-1: Product: syz [ 1953.194982][T31041] usb 5-1: Manufacturer: syz [ 1953.199576][T31041] usb 5-1: SerialNumber: syz [ 1953.213751][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.224786][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1953.235477][ T32] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1953.245250][ T32] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1953.306238][ T4453] usb 1-1: USB disconnect, device number 115 12:25:50 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1953.413593][ T7361] usb 6-1: new high-speed USB device number 43 using dummy_hcd 12:25:50 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:50 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x7, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1953.523651][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1953.532031][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1953.539025][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1953.543841][ T32] usb 3-1: language id specifier not provided by device, defaulting to English [ 1953.570219][T31041] usb 5-1: USB disconnect, device number 21 [ 1953.683715][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1953.692793][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.700810][ T32] usb 3-1: Product: syz [ 1953.704992][ T32] usb 3-1: SerialNumber: syz [ 1953.753555][T30954] usb 2-1: Service connection timeout for: 257 [ 1953.759750][T30954] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1953.768447][T30954] ath9k_htc: Failed to initialize the device [ 1953.774652][ T2674] usb 2-1: ath9k_htc: USB layer deinitialized [ 1953.786019][ T7361] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 12:25:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xc0, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x17, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x33, &(0x7f0000000e00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe6d}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="05"], 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000000400)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x2, [{0x41, &(0x7f0000000940)=ANY=[@ANYBLOB="4103956fb0bb5edbc100000000000004016ba20100000000000000c47772ee7b7b3661e5937ec956299e583a38c900002bf04f6a2e17bab382f4faa9af777b2d6e7a2f7c00000000000000000000000000005226fb2332a947fe5d93d05e3d07ed014d25dafdf321b1056b617f6850c83335f895e8983232183e93c85bffa557f6e98f"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="a1000000"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000cc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x61, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12"], &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa}, 0x20, &(0x7f0000000700)=ANY=[@ANYRESOCT=r2], 0x1, [{0x4, &(0x7f0000000c80)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYRESOCT], &(0x7f0000000f40)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x2}, 0x11, &(0x7f0000000d40)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}, 0x5, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4}}, {0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB]}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000c686f9de517337b47ee086fa21a405271188160b8d0011d4881ff764448e06955cac55e8b3d9329488fdc6f8224a652867c603a6e39c0258"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000ac0)=@ready={0x0, 0x0, 0x8, "b4ff29da", {0x1, 0x5, 0x8, 0xcf, 0x9}}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x5) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1953.796715][ T7361] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1953.833626][ T8666] usb 4-1: Service connection timeout for: 257 [ 1953.839810][ T8666] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1953.851616][ T8666] ath9k_htc: Failed to initialize the device [ 1953.858028][ T7347] usb 4-1: ath9k_htc: USB layer deinitialized [ 1953.883783][ T7361] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1953.892966][ T7361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1953.901006][ T7361] usb 6-1: SerialNumber: syz [ 1953.944168][ T7361] cdc_ether 6-1:1.0: skipping garbage [ 1953.949581][ T7361] usb 6-1: bad CDC descriptors [ 1953.954589][T31041] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1954.043826][ T32] cdc_ncm 3-1:1.0: bind() failure [ 1954.052219][ T32] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1954.059073][ T32] cdc_ncm 3-1:1.1: bind() failure [ 1954.079873][ T32] usb 3-1: USB disconnect, device number 56 [ 1954.151690][T22170] usb 6-1: USB disconnect, device number 43 [ 1954.153556][ T2661] usb 1-1: Service connection timeout for: 257 [ 1954.157712][ T2674] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1954.163886][ T2661] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services 12:25:50 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0xc, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1954.198798][ T2661] ath9k_htc: Failed to initialize the device [ 1954.206440][ T4453] usb 1-1: ath9k_htc: USB layer deinitialized [ 1954.214051][ T7347] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1954.323631][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1954.463737][ T2674] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1954.493634][ T7347] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 1954.502053][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:25:51 executing program 2: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1954.511199][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.519277][T31041] usb 5-1: Product: syz [ 1954.523578][T31041] usb 5-1: Manufacturer: syz [ 1954.528966][T31041] usb 5-1: SerialNumber: syz [ 1954.603638][ T4453] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1954.623637][T22170] usb 6-1: new high-speed USB device number 44 using dummy_hcd 12:25:51 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x9, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1954.803818][ T7361] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1954.853889][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1954.860708][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1954.867602][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1954.875729][T31041] usb 5-1: USB disconnect, device number 22 [ 1954.894282][ T4453] usb 1-1: too many configurations: 192, using maximum allowed: 8 [ 1955.003660][T22170] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.013787][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1955.093752][ T7361] usb 3-1: too many configurations: 38, using maximum allowed: 8 [ 1955.104126][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1955.113177][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1955.121206][T22170] usb 6-1: SerialNumber: syz [ 1955.174367][T22170] usb 6-1: bad CDC descriptors [ 1955.233633][T31041] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1955.323661][ T2674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1955.332798][ T2674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.333699][ T7347] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1955.340842][ T2674] usb 2-1: Product: syz [ 1955.349893][ T7347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.354053][ T2674] usb 2-1: Manufacturer: syz [ 1955.354070][ T2674] usb 2-1: SerialNumber: syz 12:25:51 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0xd, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1955.371238][ T7347] usb 4-1: Product: syz [ 1955.375488][ T7347] usb 4-1: Manufacturer: syz [ 1955.380087][ T7347] usb 4-1: SerialNumber: syz [ 1955.394426][ T2674] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1955.397862][ T2222] usb 6-1: USB disconnect, device number 44 [ 1955.424306][ T7347] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1955.623680][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1955.783700][ T4453] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1955.792838][ T4453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.794046][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1955.800896][ T4453] usb 1-1: Product: syz [ 1955.810164][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.814284][ T4453] usb 1-1: Manufacturer: syz [ 1955.822236][T31041] usb 5-1: Product: syz [ 1955.826821][ T4453] usb 1-1: SerialNumber: syz [ 1955.830951][T31041] usb 5-1: Manufacturer: syz [ 1955.840139][T31041] usb 5-1: SerialNumber: syz [ 1955.844963][ T2222] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1955.884164][ T4453] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1955.933744][ T7361] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1955.942852][ T7361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.950857][ T7361] usb 3-1: Product: syz [ 1955.955045][ T7361] usb 3-1: Manufacturer: syz [ 1955.959696][ T7361] usb 3-1: SerialNumber: syz [ 1956.004123][ T7361] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:52 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0xa, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1956.063674][ T7347] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1956.093676][ T2674] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1956.183811][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1956.190687][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1956.197604][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1956.203780][ T2222] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.216633][ T2222] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1956.230694][T31041] usb 5-1: USB disconnect, device number 23 [ 1956.313679][ T2222] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1956.322761][ T2222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1956.330909][ T2222] usb 6-1: SerialNumber: syz [ 1956.374429][ T2222] usb 6-1: bad CDC descriptors [ 1956.485727][T12950] udc-core: couldn't find an available UDC or it's busy [ 1956.492676][T12950] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1956.501052][T12936] udc-core: couldn't find an available UDC or it's busy [ 1956.508083][T12936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1956.526292][ T4453] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:25:53 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0xe, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1956.573680][ T7361] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1956.583664][T31041] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1956.587360][T22170] usb 6-1: USB disconnect, device number 45 [ 1956.728553][ T32] usb 2-1: USB disconnect, device number 73 [ 1956.740046][ T2618] usb 4-1: USB disconnect, device number 72 [ 1956.963634][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.971643][T12966] udc-core: couldn't find an available UDC or it's busy [ 1956.981515][T12966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1956.992966][T12966] udc-core: couldn't find an available UDC or it's busy [ 1956.995420][T13007] udc-core: couldn't find an available UDC or it's busy [ 1957.000055][T12966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1957.006865][T13007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1957.031545][T12966] udc-core: couldn't find an available UDC or it's busy [ 1957.040115][T12966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1957.043593][T22170] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1957.053287][T12966] udc-core: couldn't find an available UDC or it's busy [ 1957.062431][T12966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1957.073190][T12966] udc-core: couldn't find an available UDC or it's busy [ 1957.080223][T12966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:25:53 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1957.163657][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1957.172762][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.180950][T31041] usb 5-1: Product: syz [ 1957.185152][T31041] usb 5-1: Manufacturer: syz [ 1957.189740][T31041] usb 5-1: SerialNumber: syz 12:25:53 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1957.242046][ T4970] usb 3-1: USB disconnect, device number 57 [ 1957.306803][ T2222] usb 1-1: USB disconnect, device number 116 12:25:54 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0xf, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1957.463771][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1957.514026][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1957.522605][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1957.529519][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1957.537290][T31041] usb 5-1: USB disconnect, device number 24 [ 1957.573821][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1957.582902][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1957.591022][T22170] usb 6-1: SerialNumber: syz [ 1957.593674][ T7347] usb 4-1: Service connection timeout for: 257 [ 1957.596097][ T2674] usb 2-1: Service connection timeout for: 257 [ 1957.601777][ T7347] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1957.607927][ T2674] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1957.622642][ T7347] ath9k_htc: Failed to initialize the device [ 1957.624368][ T2674] ath9k_htc: Failed to initialize the device [ 1957.635593][ T2618] usb 4-1: ath9k_htc: USB layer deinitialized [ 1957.643182][ T32] usb 2-1: ath9k_htc: USB layer deinitialized [ 1957.684430][T22170] usb 6-1: bad CDC descriptors 12:25:54 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x5, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:54 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x8, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:54 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0xf, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1957.891685][T22170] usb 6-1: USB disconnect, device number 46 [ 1957.915336][T31041] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1958.013599][ T2618] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1958.021230][ T32] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1958.083555][ T7361] usb 3-1: Service connection timeout for: 257 [ 1958.089759][ T7361] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1958.100266][ T7361] ath9k_htc: Failed to initialize the device [ 1958.106556][ T4970] usb 3-1: ath9k_htc: USB layer deinitialized [ 1958.153712][ T4453] usb 1-1: Service connection timeout for: 257 [ 1958.159916][ T4453] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1958.168593][ T4453] ath9k_htc: Failed to initialize the device [ 1958.175049][ T2222] usb 1-1: ath9k_htc: USB layer deinitialized [ 1958.303672][ T32] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1958.311512][ T2618] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 1958.323648][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1958.333580][T22170] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1958.463648][ T4970] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1958.493629][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1958.502718][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.510781][T31041] usb 5-1: Product: syz [ 1958.514976][T31041] usb 5-1: Manufacturer: syz [ 1958.519569][T31041] usb 5-1: SerialNumber: syz [ 1958.543586][ T2222] usb 1-1: new high-speed USB device number 117 using dummy_hcd 12:25:55 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x18, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1958.724115][T22170] usb 6-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 1958.734469][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1958.843945][ T4970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1958.844026][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1958.855062][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1958.868015][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1958.869033][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1958.875803][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1958.883767][T22170] usb 6-1: SerialNumber: syz [ 1958.903729][ T2222] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 1958.912649][ T2222] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.922781][ T2222] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1958.932845][T31041] usb 5-1: USB disconnect, device number 25 [ 1958.944786][T22170] usb 6-1: bad CDC descriptors [ 1959.033982][ T2222] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1959.043082][ T2222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1959.051342][ T2222] usb 1-1: SerialNumber: syz [ 1959.083727][ T4970] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1959.092801][ T4970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.100879][ T4970] usb 3-1: Product: syz [ 1959.105113][ T4970] usb 3-1: Manufacturer: syz [ 1959.109716][ T4970] usb 3-1: SerialNumber: syz 12:25:55 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x10, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1959.150915][ T4453] usb 6-1: USB disconnect, device number 47 [ 1959.273682][ T32] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1959.282804][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.290848][ T32] usb 2-1: Product: syz [ 1959.295077][ T32] usb 2-1: Manufacturer: syz [ 1959.299685][ T32] usb 2-1: SerialNumber: syz [ 1959.313777][T31041] usb 5-1: new high-speed USB device number 26 using dummy_hcd 12:25:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0xfc, 0x0, 0x2477, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000200004025000001010902410001010000080904060012020600550b24060000da467439a76905240000000d240f0103f8a00000000000000905820200020000000905030200020000000000"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0xa, {0xa, 0x30, "2cdf7c77f4dae1f2"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0x1, 0x2a, "b0960243e68000e672012aaeb4a91af5174d0bdf6c99e9170dceb34a79b12a77332ab8154174633af3fb"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}}) [ 1959.314219][T22170] usb 1-1: USB disconnect, device number 117 [ 1959.343826][ T2618] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1959.352921][ T2618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.361017][ T2618] usb 4-1: Product: syz [ 1959.365270][ T2618] usb 4-1: Manufacturer: syz [ 1959.369880][ T2618] usb 4-1: SerialNumber: syz [ 1959.375061][ T32] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:25:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa}, 0x0, 0x0, 0x4, [{0x81, &(0x7f0000000f80)=@string={0x81, 0x3, "ed911577a2c2e844ff8eeb65f5dd5222189dabdb446caecd94f267f73726e13fb37859cf91d2b286d0ca694cd19ace6a7478790462b61857732865908c400fe17c1fe14f407ae109d608d9d5f9cee60d6b547392b889bd8e1619ad36dc0e98214062edf4a22d64f6d48dda0282f1d247f009881386a7792f2ba3aac6885f22"}}, {0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="0203d13f33e9525d75d71e98"]}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x101, 0x0}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000dc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000c80)=@lang_id={0x4}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x2, &(0x7f0000000d80)=@string={0x2}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x90, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], &(0x7f0000000c40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x439}}, {0x18, &(0x7f0000000a80)=@string={0x18, 0x3, "a2d2faa5fe19df44dab6f44e7bd5d8540626f8365b25"}}, {0x27, &(0x7f0000000bc0)=@string={0x27, 0x3, "0e2760515ee9f5c8355a1b642f9d33b19baf8181607fdff6d7d7503d1f558149aa654fc2ca"}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b80000000799d5ceeab479a3ffa6a6f2239a3e458c024a41bf0630000000100"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000400)={0xa}, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="01"], 0x7, [{0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="04ef"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x210}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000b00)=@lang_id={0x4}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:25:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d0f11a40ac053692a219bf0203010902220001000000000904000001031900000905000000000000000705884f6645"], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x100) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x202000) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000100)=""/54) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17ef, 0x6049, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000240)=""/225) [ 1959.424104][ T2618] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1959.493981][ T4970] cdc_ncm 3-1:1.0: bind() failure [ 1959.501229][ T4970] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1959.508240][ T4970] cdc_ncm 3-1:1.1: bind() failure [ 1959.525927][ T4970] usb 3-1: USB disconnect, device number 58 [ 1959.633668][ T4453] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1959.733603][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.783677][T22170] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1959.883631][ T4970] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1959.963650][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1959.963708][ T32] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1959.972752][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.989692][T31041] usb 5-1: Product: syz [ 1959.993692][ T4453] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.993864][T31041] usb 5-1: Manufacturer: syz [ 1960.004021][ T2618] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1960.008462][T31041] usb 5-1: SerialNumber: syz [ 1960.022230][ T4453] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1960.113928][ T4453] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1960.123280][ T4453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1960.131651][ T4453] usb 6-1: SerialNumber: syz [ 1960.186010][ T4453] usb 6-1: bad CDC descriptors [ 1960.214088][T22170] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1960.221675][T22170] usb 1-1: can't read configurations, error -61 12:25:56 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x1d, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1960.283845][ T4970] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1960.294395][ T4970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1960.305436][ T4970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 1382, setting to 1024 [ 1960.316613][ T4970] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1960.343653][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1960.350430][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1960.357512][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1960.375760][T31041] usb 5-1: USB disconnect, device number 26 [ 1960.393857][T22170] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1960.404515][T13108] udc-core: couldn't find an available UDC or it's busy [ 1960.411476][T13108] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1960.420084][ T4453] usb 6-1: USB disconnect, device number 48 [ 1960.443060][T13109] udc-core: couldn't find an available UDC or it's busy [ 1960.450134][T13109] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1960.523754][ T4970] usb 3-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=19.a2 [ 1960.532929][ T4970] usb 3-1: New USB device strings: Mfr=191, Product=2, SerialNumber=3 [ 1960.541285][ T4970] usb 3-1: Product: syz [ 1960.545476][ T4970] usb 3-1: Manufacturer: syz [ 1960.550175][ T4970] usb 3-1: SerialNumber: syz [ 1960.558654][ T4970] usb 3-1: config 0 descriptor?? [ 1960.583938][T13241] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1960.647487][ T2674] usb 2-1: USB disconnect, device number 74 [ 1960.667008][ T7361] usb 4-1: USB disconnect, device number 73 [ 1960.733568][T31041] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1960.816524][T13241] udc-core: couldn't find an available UDC or it's busy [ 1960.823475][T13241] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1960.843620][ T4970] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 1960.864023][ T4970] appledisplay: probe of 3-1:0.0 failed with error -71 [ 1960.883917][T22170] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1960.891580][T22170] usb 1-1: can't read configurations, error -61 [ 1960.898841][T22170] usb usb1-port1: attempt power cycle [ 1960.915276][ T4970] usb 3-1: USB disconnect, device number 59 [ 1961.093628][T31041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:25:57 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:25:57 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x18, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:25:57 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x11, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1961.263920][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1961.272989][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.281316][T31041] usb 5-1: Product: syz [ 1961.285767][T31041] usb 5-1: Manufacturer: syz [ 1961.290803][T31041] usb 5-1: SerialNumber: syz 12:25:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d0f11a40ac053692a219bf0203010902220001000000000904000001031900000905000000000000000705884f6645"], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x100) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x202000) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000100)=""/54) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17ef, 0x6049, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000240)=""/225) [ 1961.333664][T22170] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1961.342563][T13317] udc-core: couldn't find an available UDC or it's busy [ 1961.349570][T13317] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1961.483707][ T4970] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1961.513762][ T2618] usb 4-1: Service connection timeout for: 257 [ 1961.519999][ T2618] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1961.527978][ T32] usb 2-1: Service connection timeout for: 257 12:25:58 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x4}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1961.534251][ T32] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1961.543073][ T32] ath9k_htc: Failed to initialize the device [ 1961.549996][ T2674] usb 2-1: ath9k_htc: USB layer deinitialized [ 1961.559639][ T2618] ath9k_htc: Failed to initialize the device [ 1961.567615][ T7361] usb 4-1: ath9k_htc: USB layer deinitialized [ 1961.613913][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1961.622197][T31041] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1961.629204][T31041] cdc_ncm 5-1:1.1: bind() failure [ 1961.633976][T22170] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1961.641817][T22170] usb 1-1: can't read configurations, error -61 [ 1961.650604][T31041] usb 5-1: USB disconnect, device number 27 [ 1961.793580][T22170] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1961.804225][ T7347] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1961.883636][ T4970] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.893900][ T4970] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1961.923581][ T2674] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1961.943663][ T7361] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1961.983633][ T4970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1961.992712][ T4970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1962.000767][ T4970] usb 6-1: SerialNumber: syz [ 1962.023609][T31041] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1962.044256][ T4970] usb 6-1: bad CDC descriptors [ 1962.054017][T22170] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1962.061609][T22170] usb 1-1: can't read configurations, error -61 [ 1962.068244][T22170] usb usb1-port1: unable to enumerate USB device [ 1962.203646][ T2674] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1962.223651][ T7347] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1962.234150][ T7347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 12:25:58 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x12, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1962.245033][ T7347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 1382, setting to 1024 [ 1962.256124][ T7347] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1962.263319][T22170] usb 6-1: USB disconnect, device number 49 12:25:58 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086602, &(0x7f0000000080)) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r0, &(0x7f0000000440), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="bfadefcdb3521fd28c241753f52954cb5d33a33866f1dab4efa99602be9e5d100ad18f4bc1ab5eacb4a6a5fb21595b942c4e83db835a819eeedda10ade441b71ba", 0x41) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x90}, @rumble={0x0, 0xbff}}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x22542) write$hidraw(r3, &(0x7f0000000000)="b8", 0x1) ioctl$HIDIOCGRAWINFO(r3, 0x6628, 0x0) write$hidraw(r3, &(0x7f00000002c0)="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", 0xfffffffffffffc1c) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r2, &(0x7f0000000000)="03", 0xfd50) ioctl$HIDIOCGRAWNAME(r1, 0x40305829, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000700)="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", 0x2b1) syz_open_dev$hidraw(&(0x7f0000000040), 0x7f, 0x8040) [ 1962.381780][ T33] audit: type=1800 audit(1626783958.934:3340): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14098 res=0 errno=0 [ 1962.404459][ T7361] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:25:59 executing program 0: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086602, &(0x7f0000000080)) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r0, &(0x7f0000000440), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000001c0)="bfadefcdb3521fd28c241753f52954cb5d33a33866f1dab4efa99602be9e5d100ad18f4bc1ab5eacb4a6a5fb21595b942c4e83db835a819eeedda10ade441b71ba", 0x41) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {0x90}, @rumble={0x0, 0xbff}}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x22542) write$hidraw(r3, &(0x7f0000000000)="b8", 0x1) ioctl$HIDIOCGRAWINFO(r3, 0x6628, 0x0) write$hidraw(r3, &(0x7f00000002c0)="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", 0xfffffffffffffc1c) write$hidraw(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r2, &(0x7f0000000000)="03", 0xfd50) ioctl$HIDIOCGRAWNAME(r1, 0x40305829, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000700)="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", 0x2b1) syz_open_dev$hidraw(&(0x7f0000000040), 0x7f, 0x8040) [ 1962.426796][ T33] audit: type=1800 audit(1626783958.984:3341): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14098 res=0 errno=0 [ 1962.454593][ T7347] usb 3-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=19.a2 [ 1962.463684][ T7347] usb 3-1: New USB device strings: Mfr=191, Product=2, SerialNumber=3 [ 1962.472038][ T7347] usb 3-1: Product: syz [ 1962.476777][ T7347] usb 3-1: Manufacturer: syz [ 1962.481385][ T7347] usb 3-1: SerialNumber: syz [ 1962.486081][T31041] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1962.493366][ T33] audit: type=1800 audit(1626783959.034:3342): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=48C7C060 dev="sda1" ino=14098 res=0 errno=0 [ 1962.496186][T31041] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 12:25:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/166) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x108, &(0x7f0000000340)={[{0x1, 0x4e00, ']'}, {0x1c, 0x4e00, "e3f6ea41af35868487127237a30bd10ed3f5ed34bd8bf76e3bf63de1"}, {0xaa, 0x4e00, "06fd9c1feac44f0ce9c89e37441c5900be09f382de4a412df622e840af18595efb54d5b2ab9d82e613309efc76d25bdb264904968776d735f14597f35f4e120696d96172d0bccd9b922a268d996474d94dda6a8f5b723c1381b5e04f11f47ec1c840aed12456f32e2dc088ae27fcbee509bd3017daf231e91bf1b2c51c1512e1e78db8d571f2ae9556c7874a1710c8d0be270aad03550df41fa928474582ab50c4d85568ab197689a99c"}, {0x1, 0x4e00, "bd"}, {0xd, 0x4e00, "3a45d532112200000000000000"}, {}, {0x1, 0x4e00, "e1"}, {0x1, 0x4e00, "b1"}]}) [ 1962.496590][T31041] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1962.542794][ T7347] usb 3-1: config 0 descriptor?? [ 1962.564843][T13322] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1962.643813][ T7361] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1962.652894][ T7361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.660905][ T7361] usb 4-1: Product: syz [ 1962.665109][ T7361] usb 4-1: Manufacturer: syz [ 1962.669701][ T7361] usb 4-1: SerialNumber: syz [ 1962.673591][T22170] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1962.734016][T31041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1962.743136][T31041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.751257][T31041] usb 5-1: Product: syz [ 1962.755458][T31041] usb 5-1: Manufacturer: syz [ 1962.760267][T31041] usb 5-1: SerialNumber: syz [ 1962.789500][T13322] udc-core: couldn't find an available UDC or it's busy [ 1962.796653][T13322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1962.813683][ T7347] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 1962.822376][T31041] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1962.829333][T31041] cdc_ncm 5-1:1.0: bind() failure [ 1962.835300][ T7347] appledisplay: probe of 3-1:0.0 failed with error -71 [ 1962.843558][ T4970] usb 1-1: new high-speed USB device number 122 using dummy_hcd 12:25:59 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1a81c1) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x10f609) read$hidraw(r0, &(0x7f0000000040)=""/132, 0x84) write$hidraw(r0, &(0x7f0000000000)="8b", 0x40c00) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x300) [ 1962.884998][ T7347] usb 3-1: USB disconnect, device number 60 12:25:59 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f00000003c0)="a33b2af9a13850f35600fceebd1d3f93bd7d1f8ff53099faa51f8097bf6b1afa2ba81d3b1e6d0b313f10633d2f67e517a32e19889589dc726ca881c6a2d15c2338faf7eccc1c84bd22b8a7383bab72ec22b0f3f06106a92188f65dc35a55ab324e33317a65c25eb2e8514b82ea755269cb3b352761d0d3030c23c8f2250dbf5301995887e438f842f3d6d024fa3122e29baad05d7f5c3100676ada303f1162e846d23f64d4628e3ca627", 0xaa) syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x1) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x121) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0xffffffff, 0x3000) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000380)=""/17) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) write$hidraw(0xffffffffffffffff, &(0x7f0000000240)="4840a3b98b5b4454560955f6ad26c82b352cb4fb6d9c47c62e709f0dcd26a346a7650d5054673b0d4abc09214993add16ced7952dd9f9ea9f60ac0ec87a0746c9b5ae22318f795dd0f80f2a6b11a616c8f92457e7e7b99619d0cd53c26aa0c75d5db48a8cb049b7bb41c5a4f943bf21b3d2c1de80063091602c84177d40022e4940c4448eeb10e230cd87f7c11a1c9a0d60eddcf8e1d", 0x96) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '8\x00'}) write$hidraw(0xffffffffffffffff, &(0x7f0000000300)="8708cb7df6833e3973763236d4dcf3b7df8fecc304cf01e07a2675d6cca9d3cd603bac1be59786256a26e0a2f8d6a100c2e772ad885c2771a395f4c1938e3226c46feb75768c987c7b3c", 0x4a) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) [ 1962.954954][ T33] audit: type=1804 audit(1626783959.514:3343): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723430313933313430362F73797A6B616C6C65722E467A303375572F313039332F48C7C060 dev="sda1" ino=14098 res=1 errno=0 12:25:59 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1963.024404][ T4453] usb 5-1: USB disconnect, device number 28 [ 1963.043606][ T7361] cdc_ncm 4-1:1.0: bind() failure [ 1963.043785][ T2674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1963.053043][ T7361] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1963.057837][ T2674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.064620][ T7361] cdc_ncm 4-1:1.1: bind() failure [ 1963.072587][ T2674] usb 2-1: Product: syz [ 1963.081726][ T2674] usb 2-1: Manufacturer: syz [ 1963.086368][ T2674] usb 2-1: SerialNumber: syz [ 1963.091161][T22170] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.110416][T22170] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1963.152673][ T7361] usb 4-1: USB disconnect, device number 74 [ 1963.174464][ T2674] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1963.203825][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1963.212889][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1963.221028][T22170] usb 6-1: SerialNumber: syz [ 1963.264321][T22170] usb 6-1: bad CDC descriptors [ 1963.433627][ T4970] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1963.442719][ T4970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.450805][ T4970] usb 1-1: Product: syz [ 1963.455016][ T4970] usb 1-1: Manufacturer: syz [ 1963.459600][ T4970] usb 1-1: SerialNumber: syz [ 1963.476886][T22170] usb 6-1: USB disconnect, device number 50 [ 1963.493866][ T4453] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1963.504766][ T4970] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1963.743626][ T2674] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1963.853619][ T4453] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.863766][ T4453] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1963.872625][ T4453] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1964.044004][ T4453] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1964.053100][ T4453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.061228][ T4453] usb 5-1: Product: syz [ 1964.065513][ T4453] usb 5-1: Manufacturer: syz [ 1964.070225][ T4453] usb 5-1: SerialNumber: syz [ 1964.083711][ T4970] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1964.114065][ T4453] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1964.120872][ T4453] cdc_ncm 5-1:1.0: bind() failure [ 1964.147085][T13302] udc-core: couldn't find an available UDC or it's busy [ 1964.154206][T13302] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1964.321896][ T4453] usb 5-1: USB disconnect, device number 29 [ 1964.367282][ T7361] usb 2-1: USB disconnect, device number 75 [ 1964.494441][ T7347] usb 1-1: USB disconnect, device number 122 12:26:01 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:26:01 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000001c0)=0x1) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x80000001, 0x40400) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000200)=0x3) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000240)={0x3, 0x200, 0x7fffffff}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000340)) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000280)) r2 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x80000001, 0x40400) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000200)=0x3) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000240)={0x3, 0x200, 0x7fffffff}) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000340)) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000200)={0x2, 0x2, 0xffffffff, 0x1, 0x7ff, 0x5}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x8, 0x20, 0x3, 0x1, "a62a698dd616282c798ac5aedf9064472d81d6ef0dd401a83105e820ca4cbc92"}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x50, &(0x7f0000000780)=ANY=[@ANYBLOB="0100004e390000000100004e3e0000000400004ecb98a2f71a00004e9088527fd069e71b1dcb077ae5f19f251a38ad9aefb28fb1d13500000100004efb0000000300004e3e3727000140004e"]) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x54, &(0x7f0000000140)=ANY=[@ANYBLOB="c9b6895a68894dd54f1af3e0259c6a025dc37effb2ce202e37bb7c50f5c811b51bb13804920076b016fb9f2a393c9844ec0bc20294d06c52fac7ebae1f95fda7bf2396648b678116c8a4431df774475285e6841759a0319bdd8bad64d25c2d67ab05d545"]) 12:26:01 executing program 3: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1d0, &(0x7f0000000940)=ANY=[@ANYBLOB="9500004e35d4fdcbf2fb0d0000000000008d02dc1aea8787b593d015b24fd855869ef3c70e3f90bc326f5f821132d54bcd70f78540e357edf13b9eadf2a3882069e71b233177150865aa405318226b504941e6bf2cb57e4e3d711a464990ea6f8c3cd2f21e9c961e412648aa1950e4e1ba9d932e070488dba60ea7975e181ca8806c831c701045f0e8a054d40a6d4fd053b19c9a2a1cfea2f1000000a900004e42433f48d974a588755117409e15e68729124d15fa654fa4ae3a2156d6f2d6c7bfc420b6fcd034de50632fc9633671249bf4f717ecb0a78a51061e3c64829c23328b17f87ec6b62b7d44a374b457b0cdabfca843dc2f7570e5c3c772db0477d50b09e0bdb2628d2762b81fd7199bfc5242c7499ce90a6e488f42e4761928a5d53e10064157f7502749e298f10781859f19d27c46382f657e7ca046952322f7399a02ac4bc4e009339897b4fde0a0084127e723916df7f876a7c06ad5038f3166e47e97618e392fdc430a0000007e00004ec1a216d3c7afc3602a37d9cd7d19a8a7402905cc055191150913243b377ac5b7a77b82398a18f17d0d77aa6d9d9470060865478bdc80fffc922233c7982b65050cca3fce284c20e3e2911ccd8fe0a2b347663d1b00e789cb5dd3030a9a4a257224ba352d8070bae6e5399d774af09f21a968868cb77571be89857029313a036407366746f49581e2e8e16af4364c2f3807fbd64c958bf0947e46c2cdf5dd15ca0e624e58aece9a6dda68a3deaf9bdac34b7e3b38e25cb8461ff0a056bca14964"]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb9751e2032bec608a62330d7b20f024c4444f6744028efa407cf24a5d88cb5ee5770ade7610a4b7c9169614fdd7c703c603d2ec04921ac203fba7b2372acafdc33dbdda972fa7fdc8825c5511e8d52328688097ff3f7d1788995571700db2d76712cf06c8b42e3006b302f686c7f94a958ffa68f90225bacd9a2a7ce6df2b474f77db88b05050ce7d5e5b82dc11dc39c3d0534fd56dfa5b2a20d510195f3e4304de5883a7ba1f80b2487276105a82dc2371edbfad94d518fdf74e05f33ca361ca3b2e75a640ac3412f1b3ed909293f96abe6bf0b192", 0x1c6) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="b47fe3d06d49292030af89d4915acb2196acf84b8562e1183b790b1c2da608973463c7f1f19a75a011f544896a2bf4128ca9e4bbfbc3082bf7b3c3798fb8171ce9439a25420e6ff44c95609cbca3fe93d6a639c5e550eb209b0509c75a8314e2049c402dff92993fad142f115d65721b1b48d461cac30d0c69482413b30000000000d4e6c94791a095bed0740900000000000000d55bd59a807d0af02e485477ec69401045749bd14fbf3bbeb0b8cb65fbd58e311055a5fb1454021aa205c6210e"]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x58, &(0x7f00000001c0)=ANY=[]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) 12:26:01 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x18, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:01 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r1, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000001c0)=""/166) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x108, &(0x7f0000000340)={[{0x1, 0x4e00, ']'}, {0x1c, 0x4e00, "e3f6ea41af35868487127237a30bd10ed3f5ed34bd8bf76e3bf63de1"}, {0xaa, 0x4e00, "06fd9c1feac44f0ce9c89e37441c5900be09f382de4a412df622e840af18595efb54d5b2ab9d82e613309efc76d25bdb264904968776d735f14597f35f4e120696d96172d0bccd9b922a268d996474d94dda6a8f5b723c1381b5e04f11f47ec1c840aed12456f32e2dc088ae27fcbee509bd3017daf231e91bf1b2c51c1512e1e78db8d571f2ae9556c7874a1710c8d0be270aad03550df41fa928474582ab50c4d85568ab197689a99c"}, {0x1, 0x4e00, "bd"}, {0xd, 0x4e00, "3a45d532112200000000000000"}, {}, {0x1, 0x4e00, "e1"}, {0x1, 0x4e00, "b1"}]}) [ 1965.113701][ T4970] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1965.120845][ T4970] ath9k_htc: Failed to initialize the device [ 1965.127681][ T7347] usb 1-1: ath9k_htc: USB layer deinitialized [ 1965.173629][ T2222] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1965.181255][T31041] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1965.193653][ T4453] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1965.201281][T22170] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1965.208887][ T2674] usb 2-1: Service connection timeout for: 257 [ 1965.215196][ T2674] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1965.223316][ T2674] ath9k_htc: Failed to initialize the device [ 1965.229611][ T7361] usb 2-1: ath9k_htc: USB layer deinitialized [ 1965.483610][ T7347] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1965.533664][ T2222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1965.543975][ T4453] usb 4-1: too many configurations: 186, using maximum allowed: 8 [ 1965.544713][T31041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.562538][T31041] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1965.583601][ T7361] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1965.654008][T31041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1965.663224][T31041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1965.671232][T31041] usb 6-1: SerialNumber: syz [ 1965.713802][ T2222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1965.723324][ T2222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.731382][ T2222] usb 5-1: Product: syz [ 1965.735657][ T2222] usb 5-1: Manufacturer: syz [ 1965.740247][ T2222] usb 5-1: SerialNumber: syz [ 1965.745505][T31041] usb 6-1: bad CDC descriptors [ 1965.813880][T22170] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1965.823035][T22170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.831042][T22170] usb 3-1: Product: syz [ 1965.835215][T22170] usb 3-1: Manufacturer: syz [ 1965.839794][T22170] usb 3-1: SerialNumber: syz [ 1965.863831][ T7361] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1965.894183][T22170] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:26:02 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x2, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1965.921690][T31041] usb 6-1: USB disconnect, device number 51 12:26:02 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xf}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1966.023840][ T7347] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1966.033012][ T7347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.041056][ T7347] usb 1-1: Product: syz [ 1966.045297][ T7347] usb 1-1: Manufacturer: syz [ 1966.049900][ T7347] usb 1-1: SerialNumber: syz [ 1966.055021][ T2222] cdc_ncm 5-1:1.0: bind() failure [ 1966.061998][ T2222] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1966.068949][ T2222] cdc_ncm 5-1:1.1: bind() failure [ 1966.084113][ T2222] usb 5-1: USB disconnect, device number 30 [ 1966.134318][ T7347] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1966.353602][T31041] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1966.443587][ T2222] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1966.503652][ T4453] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1966.512745][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.520801][ T4453] usb 4-1: Product: syz [ 1966.525147][ T4453] usb 4-1: Manufacturer: syz [ 1966.529760][ T4453] usb 4-1: SerialNumber: syz [ 1966.593644][T22170] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1966.606267][ T4453] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1966.693656][ T7361] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1966.702855][ T7361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.710978][ T7361] usb 2-1: Product: syz [ 1966.715224][ T7361] usb 2-1: Manufacturer: syz [ 1966.719847][ T7361] usb 2-1: SerialNumber: syz [ 1966.724543][ T7347] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1966.733589][T31041] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1966.742292][T31041] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1966.794070][ T7361] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1966.823887][ T2222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.834080][ T2222] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1966.842990][T31041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1966.852156][T31041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1966.860313][T31041] usb 6-1: SerialNumber: syz [ 1966.865143][ T2222] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1967.033628][ T2222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1967.042689][ T2222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.050792][ T2222] usb 5-1: Product: syz [ 1967.054979][ T2222] usb 5-1: Manufacturer: syz [ 1967.059567][ T2222] usb 5-1: SerialNumber: syz 12:26:03 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x3, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1967.104455][ T2222] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1967.111267][ T2222] cdc_ncm 5-1:1.0: bind() failure [ 1967.130819][ T2222] usb 6-1: USB disconnect, device number 52 [ 1967.144863][T31041] usb 1-1: USB disconnect, device number 123 [ 1967.234396][ T2674] usb 3-1: USB disconnect, device number 61 [ 1967.273635][ T4453] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:26:03 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x9}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1967.311325][ T4970] usb 5-1: USB disconnect, device number 31 [ 1967.383891][ T7361] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1967.543617][ T2222] usb 6-1: new high-speed USB device number 53 using dummy_hcd 12:26:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x582, &(0x7f0000000940)="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"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000f40)={0x3, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000500)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xffffffffffffff9a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xb, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x0, "7f9968e06b7c7418b9b219af19afded48adbaf0f23713c79b0717f0cb76c51ec"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x17, 0x1, &(0x7f0000001000)="f5"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000004c0)={0x0, 0xc1, &(0x7f0000000780)="55a0c2328e4c4c51d48db9fa5f747efd61f7ce91e35237594a5b7c9d0d87d424458f6142cff55205dd62bc9eb358e12b05111e4967cf6c5af95740e0039b02d02a076661a1897615ea8a65c32ea66ec5d1790d1a13f94943c8f55e1fb10c231505c79c5d7403d5243eee78f3c1fcecc575f62bb286683b656ce350c6a2a0c4e5863f8f8a0c82f0c28d0ca7afbdb50d2025a1e43a906ac44262c6217bb2ce225ccd0a7ec269d980c713600f9cc4590b6535869864dae82d9d1acf3d92885f2b4676"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="c22400000000005f2ec8dca4f15c8922c504dfc4feb2911ba4f4d159be03ed893d66dbb4bc8be5939d8d2f237c06fe464459923d3f556eb5068d4851fe162d5a84773af28ea5d13bc982e41bb8b1ca67368ac8440ca5e7dd84cbc9b2f01e8a8920b589ce293a3b1ee67501e6fadde2ba29a6caa941c4755b8794c4e0356ed7367d5e12b17b0d3ca5f12cdc64a034804b1c5f3f8f52805f017e731fba581512d1c9378f03dbca002fc28b57bc8c4edc2c372e3518929a74daa85c502bb97dd699ee", @ANYRESDEC], &(0x7f0000000380)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000fc0)={0x3, 0x0, 0x0, 0x0, "5e102873701cb7760612a30cc1c0021a89885724290000000000000000d82500"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xffffffffffffff74, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x10, 0x7f}, 0x10, &(0x7f0000000640)=ANY=[@ANYRES64]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1967.676835][T13465] udc-core: couldn't find an available UDC or it's busy [ 1967.684162][T13465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1967.684179][T22170] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1967.684346][T22170] ath9k_htc: Failed to initialize the device [ 1967.692255][T13465] udc-core: couldn't find an available UDC or it's busy [ 1967.701216][ T2674] usb 3-1: ath9k_htc: USB layer deinitialized [ 1967.704819][T13465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:26:04 executing program 2: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000001c0)=0x1) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x80000001, 0x40400) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000200)=0x3) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000240)={0x3, 0x200, 0x7fffffff}) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000340)) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000280)) r2 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x80000001, 0x40400) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000200)=0x3) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000240)={0x3, 0x200, 0x7fffffff}) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000340)) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000200)={0x2, 0x2, 0xffffffff, 0x1, 0x7ff, 0x5}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x8, 0x20, 0x3, 0x1, "a62a698dd616282c798ac5aedf9064472d81d6ef0dd401a83105e820ca4cbc92"}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x50, &(0x7f0000000780)=ANY=[@ANYBLOB="0100004e390000000100004e3e0000000400004ecb98a2f71a00004e9088527fd069e71b1dcb077ae5f19f251a38ad9aefb28fb1d13500000100004efb0000000300004e3e3727000140004e"]) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x54, &(0x7f0000000140)=ANY=[@ANYBLOB="c9b6895a68894dd54f1af3e0259c6a025dc37effb2ce202e37bb7c50f5c811b51bb13804920076b016fb9f2a393c9844ec0bc20294d06c52fac7ebae1f95fda7bf2396648b678116c8a4431df774475285e6841759a0319bdd8bad64d25c2d67ab05d545"]) [ 1967.735359][ T4970] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1967.753770][ T7347] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1967.760720][ T7347] ath9k_htc: Failed to initialize the device [ 1967.777286][T31041] usb 1-1: ath9k_htc: USB layer deinitialized [ 1967.787578][T13470] udc-core: couldn't find an available UDC or it's busy [ 1967.794706][T13470] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1967.913608][ T2222] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1967.935659][T13465] udc-core: couldn't find an available UDC or it's busy [ 1967.942612][T13465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1967.951835][ T32] usb 4-1: USB disconnect, device number 75 [ 1967.993629][ T2222] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1968.002674][ T2222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1968.010820][ T2222] usb 6-1: SerialNumber: syz [ 1968.026383][ T2618] usb 2-1: USB disconnect, device number 76 [ 1968.133641][T31041] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1968.133641][ T4970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1968.203598][ T2674] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1968.261068][ T8209] usb 6-1: USB disconnect, device number 53 [ 1968.323764][ T4970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1968.332841][ T4970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.340903][ T4970] usb 5-1: Product: syz [ 1968.345085][ T4970] usb 5-1: Manufacturer: syz [ 1968.349685][ T4970] usb 5-1: SerialNumber: syz [ 1968.414417][ T4970] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1968.421242][ T4970] cdc_ncm 5-1:1.0: bind() failure [ 1968.423785][T31041] usb 1-1: too many configurations: 221, using maximum allowed: 8 [ 1968.433324][ T4970] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1968.440937][ T4970] cdc_ncm 5-1:1.1: bind() failure 12:26:05 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:26:05 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x5, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1968.621812][ T8209] usb 5-1: USB disconnect, device number 32 [ 1968.793537][ T4453] usb 4-1: Service connection timeout for: 257 [ 1968.799761][ T4453] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1968.810627][ T4453] ath9k_htc: Failed to initialize the device [ 1968.816793][ T32] usb 4-1: ath9k_htc: USB layer deinitialized [ 1968.823672][ T2674] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1968.825654][ T2222] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1968.832753][ T2674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.848433][ T2674] usb 3-1: Product: syz [ 1968.852639][ T2674] usb 3-1: Manufacturer: syz [ 1968.857254][ T2674] usb 3-1: SerialNumber: syz [ 1968.883715][ T7361] usb 2-1: Service connection timeout for: 257 [ 1968.889901][ T7361] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1968.900492][ T7361] ath9k_htc: Failed to initialize the device [ 1968.904465][ T2674] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1968.915087][ T2618] usb 2-1: ath9k_htc: USB layer deinitialized 12:26:05 executing program 3: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1d0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1c6) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="b47fe3d06d49292030af89d4915acb2196acf84b8562e1183b790b1c2da608973463c7f1f19a75a011f544896a2bf4128ca9e4bbfbc3082bf7b3c3798fb8171ce9439a25420e6ff44c95609cbca3fe93d6a639c5e550eb209b0509c75a8314e2049c402dff92993fad142f115d65721b1b48d461cac30d0c69482413b30000000000d4e6c94791a095bed0740900000000000000d55bd59a807d0af02e485477ec69401045749bd14fbf3bbeb0b8cb65fbd58e311055a5fb1454021aa205c6210e"]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x58, &(0x7f00000001c0)=ANY=[]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) 12:26:05 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0xa}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1969.253676][ T2222] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1969.264395][ T2618] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1969.313806][T31041] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1969.323020][T31041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.331046][T31041] usb 1-1: Product: syz [ 1969.335274][T31041] usb 1-1: Manufacturer: syz [ 1969.339881][T31041] usb 1-1: SerialNumber: syz [ 1969.344556][ T2222] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1969.353674][ T2222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1969.361680][ T2222] usb 6-1: SerialNumber: syz [ 1969.366345][ T2661] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1969.414190][T31041] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1969.463660][ T32] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1969.483675][ T2674] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1969.553676][ T2618] usb 2-1: too many configurations: 38, using maximum allowed: 8 12:26:06 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x6, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1969.621928][ T7347] usb 6-1: USB disconnect, device number 54 [ 1969.743746][ T2661] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1969.764329][ T32] usb 4-1: too many configurations: 186, using maximum allowed: 8 [ 1969.913883][ T2661] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1969.922989][ T2661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.931070][ T2661] usb 5-1: Product: syz [ 1969.935268][ T2661] usb 5-1: Manufacturer: syz [ 1969.939862][ T2661] usb 5-1: SerialNumber: syz [ 1969.983659][T31041] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1969.993577][ T2661] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1970.000402][ T2661] cdc_ncm 5-1:1.0: bind() failure [ 1970.016757][ T2661] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1970.023672][ T2661] cdc_ncm 5-1:1.1: bind() failure [ 1970.053644][ T7347] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1970.144746][T22170] usb 3-1: USB disconnect, device number 62 12:26:06 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0xf}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1970.193203][ T8209] usb 5-1: USB disconnect, device number 33 [ 1970.388836][T13584] udc-core: couldn't find an available UDC or it's busy [ 1970.395848][T13584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1970.404188][T13584] udc-core: couldn't find an available UDC or it's busy [ 1970.411139][T13584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1970.413624][ T7347] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1970.419918][T13584] udc-core: couldn't find an available UDC or it's busy [ 1970.434611][T13584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1970.442180][ T2618] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1970.445016][T13584] udc-core: couldn't find an available UDC or it's busy [ 1970.451361][ T2618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.458334][T13584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1970.464962][T13584] udc-core: couldn't find an available UDC or it's busy [ 1970.466400][ T2618] usb 2-1: Product: syz [ 1970.473894][T13584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1970.492993][ T2618] usb 2-1: Manufacturer: syz [ 1970.497611][ T2618] usb 2-1: SerialNumber: syz [ 1970.505489][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1970.515016][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1970.523096][ T7347] usb 6-1: SerialNumber: syz [ 1970.553626][ T2674] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1970.560559][ T2674] ath9k_htc: Failed to initialize the device [ 1970.567151][ T2618] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1970.582833][T22170] usb 3-1: ath9k_htc: USB layer deinitialized [ 1970.643786][ T8209] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1970.673803][ T32] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1970.682884][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:26:07 executing program 2: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1970.691208][ T32] usb 4-1: Product: syz [ 1970.695482][ T32] usb 4-1: Manufacturer: syz [ 1970.700170][ T32] usb 4-1: SerialNumber: syz [ 1970.709986][ T7361] usb 1-1: USB disconnect, device number 124 12:26:07 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x7, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1970.773089][ T4970] usb 6-1: USB disconnect, device number 55 [ 1970.779961][ T32] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1971.053733][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1971.133566][T22170] usb 3-1: new high-speed USB device number 63 using dummy_hcd 12:26:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x582, &(0x7f0000000940)="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"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000f40)={0x3, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000500)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xffffffffffffff9a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xb, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000008c0)={0x4, 0x0, 0x0, 0x0, "7f9968e06b7c7418b9b219af19afded48adbaf0f23713c79b0717f0cb76c51ec"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000000c0)={0x17, 0x1, &(0x7f0000001000)="f5"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000004c0)={0x0, 0xc1, &(0x7f0000000780)="55a0c2328e4c4c51d48db9fa5f747efd61f7ce91e35237594a5b7c9d0d87d424458f6142cff55205dd62bc9eb358e12b05111e4967cf6c5af95740e0039b02d02a076661a1897615ea8a65c32ea66ec5d1790d1a13f94943c8f55e1fb10c231505c79c5d7403d5243eee78f3c1fcecc575f62bb286683b656ce350c6a2a0c4e5863f8f8a0c82f0c28d0ca7afbdb50d2025a1e43a906ac44262c6217bb2ce225ccd0a7ec269d980c713600f9cc4590b6535869864dae82d9d1acf3d92885f2b4676"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="c22400000000005f2ec8dca4f15c8922c504dfc4feb2911ba4f4d159be03ed893d66dbb4bc8be5939d8d2f237c06fe464459923d3f556eb5068d4851fe162d5a84773af28ea5d13bc982e41bb8b1ca67368ac8440ca5e7dd84cbc9b2f01e8a8920b589ce293a3b1ee67501e6fadde2ba29a6caa941c4755b8794c4e0356ed7367d5e12b17b0d3ca5f12cdc64a034804b1c5f3f8f52805f017e731fba581512d1c9378f03dbca002fc28b57bc8c4edc2c372e3518929a74daa85c502bb97dd699ee", @ANYRESDEC], &(0x7f0000000380)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000fc0)={0x3, 0x0, 0x0, 0x0, "5e102873701cb7760612a30cc1c0021a89885724290000000000000000d82500"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xffffffffffffff74, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x10, 0x7f}, 0x10, &(0x7f0000000640)=ANY=[@ANYRES64]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1971.223800][ T4970] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1971.234183][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1971.243256][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.251444][ T8209] usb 5-1: Product: syz [ 1971.255858][ T8209] usb 5-1: Manufacturer: syz [ 1971.260460][ T8209] usb 5-1: SerialNumber: syz [ 1971.265243][ T2618] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1971.314487][ T8209] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1971.321651][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1971.334267][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1971.341106][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1971.423683][ T32] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1971.433700][T22170] usb 3-1: too many configurations: 38, using maximum allowed: 8 12:26:08 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1971.513612][T31041] usb 1-1: Service connection timeout for: 257 [ 1971.519931][T31041] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1971.528479][T31041] ath9k_htc: Failed to initialize the device [ 1971.534762][ T7361] usb 1-1: ath9k_htc: USB layer deinitialized [ 1971.540388][ T8209] usb 5-1: USB disconnect, device number 34 [ 1971.593869][ T4970] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1971.660149][T13632] udc-core: couldn't find an available UDC or it's busy [ 1971.667160][T13632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1971.674087][ T4970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1971.683733][ T4970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1971.691894][ T4970] usb 6-1: SerialNumber: syz [ 1971.845040][T13667] udc-core: couldn't find an available UDC or it's busy [ 1971.852026][T13667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1971.862744][T13667] udc-core: couldn't find an available UDC or it's busy [ 1971.869802][T13667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1971.899511][ T4970] usb 2-1: USB disconnect, device number 77 [ 1971.913585][ T7361] usb 1-1: new high-speed USB device number 125 using dummy_hcd 12:26:08 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0xf, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1971.942168][ T7347] usb 6-1: USB disconnect, device number 56 [ 1971.963678][ T8209] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1972.086455][T13667] udc-core: couldn't find an available UDC or it's busy [ 1972.093485][T13667] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1972.105614][ T4453] usb 4-1: USB disconnect, device number 76 [ 1972.233769][T22170] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1972.233811][ T7361] usb 1-1: too many configurations: 221, using maximum allowed: 8 [ 1972.242881][T22170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.259070][T22170] usb 3-1: Product: syz [ 1972.263212][T22170] usb 3-1: Manufacturer: syz [ 1972.267855][T22170] usb 3-1: SerialNumber: syz [ 1972.314084][T22170] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1972.343844][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:26:08 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb03"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1972.403545][ T7347] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1972.513639][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1972.522834][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.531097][ T8209] usb 5-1: Product: syz [ 1972.535284][ T8209] usb 5-1: Manufacturer: syz [ 1972.539889][ T8209] usb 5-1: SerialNumber: syz 12:26:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103495f87b2abf9b7aee930fe42e73c704e46fd7ca06d7ba3889e241606dea4fd5388286fc34803537630a1e5990b7d468dccf2c3742e11c2e3f7109f946f7a82f5002530564ca3d01b8cd1c2a2fa29e290f62ee2919e7dbd605a4b99bdc065f8d6b84001e20352baeffe4739b423397e2ba20f3b0209ec4d754ff913829ea1302ae25cd2776de68890e982ee039782e87a0a236fdc92a413be99c877cc0a73f41e68c93fc7aea11419530a1c9fef71cf123f31fd570c2c"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xe, 0x6900c0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x4a, 0x8, 0xff, 0x10000, "e7832c2a76d8be5f197ee1f90e0b68a1b465d23e25553c9deea7dbf2e5d11f42"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x9, 0x16, 0x5, 0x200, "578911217624908f827e602fd288167580325cf058055113c35b16558b1a1d7c"}) [ 1972.713571][ T2618] usb 2-1: Service connection timeout for: 257 [ 1972.719767][ T2618] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1972.730269][ T2618] ath9k_htc: Failed to initialize the device [ 1972.736742][ T4970] usb 2-1: ath9k_htc: USB layer deinitialized 12:26:09 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x2}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1972.814144][ T7347] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1972.824679][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1972.831403][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1972.838434][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1972.856258][ T8209] usb 5-1: USB disconnect, device number 35 [ 1972.903661][T22170] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1972.913817][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1972.922990][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1972.931115][ T7347] usb 6-1: SerialNumber: syz [ 1972.953595][ T32] usb 4-1: Service connection timeout for: 257 [ 1972.960016][ T32] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1972.970823][ T32] ath9k_htc: Failed to initialize the device [ 1972.976981][ T4453] usb 4-1: ath9k_htc: USB layer deinitialized [ 1973.113546][ T4970] usb 2-1: new high-speed USB device number 78 using dummy_hcd 12:26:09 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x10, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1973.191889][ T7347] usb 6-1: USB disconnect, device number 57 [ 1973.207618][ T7361] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1973.216776][ T7361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.224393][ T8209] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1973.224835][ T7361] usb 1-1: Product: syz [ 1973.236499][ T7361] usb 1-1: Manufacturer: syz [ 1973.241184][ T7361] usb 1-1: SerialNumber: syz [ 1973.284169][ T7361] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1973.329926][T13724] udc-core: couldn't find an available UDC or it's busy [ 1973.337165][T13724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1973.343712][ T4453] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1973.423679][ T4970] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1973.556332][T31041] usb 3-1: USB disconnect, device number 63 [ 1973.593567][ T7347] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1973.603977][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1973.733653][ T4453] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 1973.744952][ T4453] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1865, setting to 1024 [ 1973.756048][ T4453] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1973.769007][ T4453] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1973.778073][ T4453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.789067][ T4453] usb 4-1: config 0 descriptor?? [ 1973.813809][T13800] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1973.823959][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1973.833465][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.841548][ T8209] usb 5-1: Product: syz [ 1973.845884][ T8209] usb 5-1: Manufacturer: syz [ 1973.850663][ T8209] usb 5-1: SerialNumber: syz [ 1973.863626][ T7361] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1973.953644][ T7347] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1974.033773][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1974.042899][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1974.050908][ T7347] usb 6-1: SerialNumber: syz 12:26:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500257693310720c13000db401020301090212000102000000090486abe51646eef2ddb43592c23223229865120000000000000000005279e5d71fd96d2d57119a076d5952bf043dcd3034d3b00a04c742ac069f803d44f9289b9b20efb6a258394c8ece5e69e6564e1fe14bad79ebdcf3961b7eed2f77d97b4471aa3499657550393533b15ee37f6ebe3476534127721ab42823fc865e"], &(0x7f0000000380)={0x0, 0x0, 0x56, &(0x7f0000000040)=ANY=[], 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xdafd}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x843}}, {0x0, 0x0}]}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000200)=""/173) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x3) 12:26:10 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x3}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1974.153675][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1974.162248][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1974.169266][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1974.186343][ T8209] usb 5-1: USB disconnect, device number 36 12:26:10 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x12, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1974.284054][ T4453] keytouch 0003:0926:3333.0057: fixing up Keytouch IEC report descriptor [ 1974.300195][ T4453] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0057/input/input113 [ 1974.309230][ T7347] usb 6-1: USB disconnect, device number 58 [ 1974.314481][T13744] udc-core: couldn't find an available UDC or it's busy [ 1974.324710][T13744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1974.356802][T13744] udc-core: couldn't find an available UDC or it's busy [ 1974.364038][T13744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1974.382936][T13744] udc-core: couldn't find an available UDC or it's busy [ 1974.390017][T13744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1974.400159][T22170] usb 3-1: Service connection timeout for: 257 [ 1974.400510][T13744] udc-core: couldn't find an available UDC or it's busy [ 1974.406367][T22170] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1974.406435][ T4970] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1974.406464][ T4970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.406489][ T4970] usb 2-1: Product: syz [ 1974.406505][ T4970] usb 2-1: Manufacturer: syz [ 1974.413443][T13744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1974.421313][ T4970] usb 2-1: SerialNumber: syz [ 1974.442877][T13744] udc-core: couldn't find an available UDC or it's busy [ 1974.457130][T22170] ath9k_htc: Failed to initialize the device [ 1974.459256][T13744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1974.469623][ T4453] keytouch 0003:0926:3333.0057: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1974.472344][T31041] usb 3-1: ath9k_htc: USB layer deinitialized [ 1974.510951][ T4453] usb 4-1: USB disconnect, device number 77 [ 1974.527467][ T4970] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1974.603788][ T8209] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1974.773609][ T7347] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1974.829422][ T2661] usb 1-1: USB disconnect, device number 125 [ 1974.923584][T31041] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1974.993720][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1975.133895][ T7347] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1975.163565][T31041] usb 3-1: Using ep0 maxpacket: 16 [ 1975.193615][ T4970] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1975.213905][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1975.222947][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1975.223681][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1975.231022][ T7347] usb 6-1: SerialNumber: syz [ 1975.240020][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.252834][ T8209] usb 5-1: Product: syz [ 1975.257047][ T8209] usb 5-1: Manufacturer: syz [ 1975.261650][ T8209] usb 5-1: SerialNumber: syz [ 1975.284780][ T2222] usb 4-1: new high-speed USB device number 78 using dummy_hcd 12:26:11 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000c9000000c90806498d7f0c7f9c4dd3409008d98c6e3cce5b4e93e64ab75598b6d4f4e1fd7e21eedb1b771b763a18fe62e727f29dac5234d3168db093b07c8f35e9739711cb0aaec90c4878ec27fc2d44bca3f5a95339a031bd756df35329f9cc663ea3e90a4467d99189f54470645e3fa3aded603ddc01526b90eb169cca577e1d4be406372da6a919833ac8762ddbd3735e1929f740d25678679c7f231380fc19f5a0d573260f855c793347d77a74a222dda99da036a735c753c1cd7022ec0b"], &(0x7f00000007c0)={0x0, 0x3, 0x86, @string={0x86, 0x3, "f00f609f402496b1b80ed3a2e8d77eb26bff2827a2e51e567d96bc839b2a2a10b4fbbec67387a7a1d5d8da9edf79377cdd21c1d7c315ba21f11e9cfa5fd26faf619ec434a06a2921c9df9226956605032b55fa09fea24c517da3f3322cc1ab0f063938ec8a1f35ea2ffb710eb5bf743f7d81aac57e174cb703a66c95f50ef5efa8c1bbfb"}}, &(0x7f0000000880)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xb2, 0x2, 0x6, 0x11, 0x9, [0xf, 0x3fcf]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x20, 0x0, 0x40, 0x2}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x81, 0x4, "c6b7e40c", "ac67f0ab"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x3, 0xfa, 0x81, 0x0, 0x9, 0x1}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000980)={0x0, 0xf, 0x99, "78133bccab65d8ff58a425b80c9d8163720c1768f57844e220c19a572326474593ef8237a7bbff9735860c4b9cfc334c389509e004148720dda7bb14f65fde7e146d15ed91d81e452d28e912fcde36680b2e86d206c1451c59d5e5c0b6501c01ecef02ec21bc34831a267556dcb0b3b876a2ab0d6998c221853e9d20245e9f71081a7e8351b5f773b85e72050103e4ab7c3362abb2df0ee7f5"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0xc137c43fb8badc28, 0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x8, {0x1c00, 0x4, [0xf00]}}, &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "7d18"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x4b6b}, &(0x7f0000000c40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c80)={0x40, 0x17, 0x6}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "e371"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0x6e}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0x7f}}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902410001010000000904000012020600000b24060000da467439a76905240000000d240f0103f8a00000000000000905820200020000000905030200", @ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0xb2, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0xca, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, "8a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x5d, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x18}, @acm={0x4, 0x24, 0x2, 0xb}, @dmm={0x7, 0x24, 0x14, 0x0, 0x1f}, @mdlm_detail={0x43, 0x24, 0x13, 0x2, "b6ab8b1604fe5ca5b8ddde3a4941cfede36168072eb2bb2e19e95099c73ad3cf7487400ae7ca21627ccc9fb028aeaf3d581765844140c1027ec7d5d75cc3ce"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xce}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x7c, 0xa5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x20, 0x20, 0xff}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x64, 0x7, 0x20, 0x40, 0x3f}, 0xb2, &(0x7f0000000280)={0x5, 0xf, 0xb2, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x6, 0xf0f, 0x15, [0x30, 0x1fe000f]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x9b, 0x56, 0x2, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x5}, @generic={0x84, 0x10, 0xa, "36572a5cadf336245dcf33b4c8de91f234cf5c25abca6f0e322d07d681472dd8ea23a100f0210aa6f13e4b1bbabf782326cd263725760f13ddb8db0a93f200459ee9f06a1731b977a340c63789e999d99d7cb67f2096b289afb59781b56f41c3348895ceaa759bab3d6881a3d589110ed71f03dcd40a5ede7d38bb08ed1992a042"}]}, 0x2, [{0x98, &(0x7f0000000340)=@string={0x98, 0x3, "21eba224e1ea93e0933056cf99473cb564292e421307ad271253e10447de35576c71ae0d534f5d25aef29a3347b94cbcb8b57dd722f47b01a930c4a67f7b99c8e477a955950d47bad873aedb11b7638513b3eb92f781648f07e4e7596dcbb5a235ce3886ee235cf6c56d93b60b7b88635e064980c41d6cb22787f0a06e306fd2a0581ef21444a5a1695af38f6ef6c49b2d648f9b95d8"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x403}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 1975.343623][T31041] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1975.433634][T31041] usb 3-1: config 2 has an invalid interface number: 134 but max is 0 [ 1975.441906][T31041] usb 3-1: config 2 has no interface number 0 [ 1975.448611][T31041] usb 3-1: too many endpoints for config 2 interface 134 altsetting 171: 229, using maximum allowed: 30 [ 1975.460365][T31041] usb 3-1: config 2 interface 134 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 1975.473882][T31041] usb 3-1: config 2 interface 134 has no altsetting 0 12:26:12 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x18, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:12 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x4}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1975.491383][ T7347] usb 6-1: USB disconnect, device number 59 [ 1975.563898][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1975.570801][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1975.577790][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1975.586271][ T8209] usb 5-1: USB disconnect, device number 37 [ 1975.597398][T13792] udc-core: couldn't find an available UDC or it's busy [ 1975.604411][T13792] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1975.643717][ T2222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 1975.654908][ T2222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1865, setting to 1024 [ 1975.666051][ T2222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1975.678981][ T2222] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1975.688179][ T2222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.696654][ T7361] usb 1-1: Service connection timeout for: 257 [ 1975.703340][ T7361] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1975.711396][ T7361] ath9k_htc: Failed to initialize the device [ 1975.717617][ T2661] usb 1-1: ath9k_htc: USB layer deinitialized [ 1975.726434][ T2222] usb 4-1: config 0 descriptor?? [ 1975.743929][T13929] raw-gadget gadget: fail, usb_ep_enable returned -22 12:26:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022400010000000009040000090300000009210000000122290009058103495f87b2abf9b7aee930fe42e73c704e46fd7ca06d7ba3889e241606dea4fd5388286fc34803537630a1e5990b7d468dccf2c3742e11c2e3f7109f946f7a82f5002530564ca3d01b8cd1c2a2fa29e290f62ee2919e7dbd605a4b99bdc065f8d6b84001e20352baeffe4739b423397e2ba20f3b0209ec4d754ff913829ea1302ae25cd2776de68890e982ee039782e87a0a236fdc92a413be99c877cc0a73f41e68c93fc7aea11419530a1c9fef71cf123f31fd570c2c"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xe, 0x6900c0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x4a, 0x8, 0xff, 0x10000, "e7832c2a76d8be5f197ee1f90e0b68a1b465d23e25553c9deea7dbf2e5d11f42"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x9, 0x16, 0x5, 0x200, "578911217624908f827e602fd288167580325cf058055113c35b16558b1a1d7c"}) [ 1975.836216][ T8666] usb 2-1: USB disconnect, device number 78 [ 1975.873775][T31041] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b4.0d [ 1975.882887][T31041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.891423][T31041] usb 3-1: Product: ࡃ [ 1975.913667][ T2222] usbhid 4-1:0.0: can't add hid device: -71 [ 1975.919660][ T2222] usbhid: probe of 4-1:0.0 failed with error -71 [ 1975.928631][ T2222] usb 4-1: USB disconnect, device number 78 [ 1975.963549][ T7347] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1975.974111][ T8209] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1976.093578][ T2661] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1976.193679][T31041] peak_usb 3-1:2.134 can0: unable to request usb[type=0 value=1] err=-71 [ 1976.202221][T31041] peak_usb 3-1:2.134: unable to read PCAN-Chip USB firmware info (err -71) [ 1976.263829][T31041] peak_usb: probe of 3-1:2.134 failed with error -71 [ 1976.272671][T31041] usb 3-1: USB disconnect, device number 64 [ 1976.283597][ T2222] usb 4-1: new high-speed USB device number 79 using dummy_hcd 12:26:12 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb03"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1976.333870][ T7347] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1976.372339][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1976.433767][ T7347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1976.442941][ T7347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1976.450993][ T7347] usb 6-1: SerialNumber: syz [ 1976.473664][ T2661] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1792, setting to 1024 [ 1976.484700][ T2661] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1976.494684][ T2661] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1976.583781][ T2661] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1976.592834][ T2661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1976.600896][ T2661] usb 1-1: SerialNumber: syz [ 1976.603739][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1976.614598][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.622603][ T8209] usb 5-1: Product: syz [ 1976.624021][T13940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1976.626842][ T8209] usb 5-1: Manufacturer: syz [ 1976.638156][ T8209] usb 5-1: SerialNumber: syz [ 1976.683635][ T2222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 1976.694988][ T2222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1865, setting to 1024 [ 1976.706090][ T2222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1976.718925][ T2222] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1976.723532][ T4970] usb 2-1: Service connection timeout for: 257 12:26:13 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1976.727990][ T2222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.734148][ T4970] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1976.749129][ T2222] usb 4-1: config 0 descriptor?? [ 1976.756160][T31041] usb 6-1: USB disconnect, device number 60 [ 1976.775313][T13979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1976.789233][ T4970] ath9k_htc: Failed to initialize the device [ 1976.801217][ T8666] usb 2-1: ath9k_htc: USB layer deinitialized 12:26:13 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1976.848506][T13940] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1976.923597][ T7347] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1976.933763][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1976.942185][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1976.949082][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1976.964173][ T8209] usb 5-1: USB disconnect, device number 38 [ 1977.153600][ T8666] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1977.163688][ T7347] usb 3-1: Using ep0 maxpacket: 16 [ 1977.168885][T31041] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1977.234179][ T2222] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 1977.249141][ T2222] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0058/input/input114 [ 1977.294081][T13940] udc-core: couldn't find an available UDC or it's busy [ 1977.301089][T13940] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1977.315287][ T2661] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1977.327063][ T7347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1977.340606][ T2222] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1977.353565][ T8209] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1977.434223][ T8666] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1977.453934][ T7347] usb 3-1: config 2 has an invalid interface number: 134 but max is 0 [ 1977.462157][ T7347] usb 3-1: config 2 has no interface number 0 [ 1977.484271][T22170] usb 4-1: USB disconnect, device number 79 [ 1977.487268][ T7347] usb 3-1: too many endpoints for config 2 interface 134 altsetting 171: 229, using maximum allowed: 30 [ 1977.516605][ T4453] usb 1-1: USB disconnect, device number 126 [ 1977.540823][ T4453] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1977.544014][T31041] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 12:26:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500257693310720c13000db401020301090212000102000000090486abe51646eef2ddb43592c23223229865120000000000000000005279e5d71fd96d2d57119a076d5952bf043dcd3034d3b00a04c742ac069f803d44f9289b9b20efb6a258394c8ece5e69e6564e1fe14bad79ebdcf3961b7eed2f77d97b4471aa3499657550393533b15ee37f6ebe3476534127721ab42823fc865e"], &(0x7f0000000380)={0x0, 0x0, 0x56, &(0x7f0000000040)=ANY=[], 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xdafd}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x843}}, {0x0, 0x0}]}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000200)=""/173) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x3) [ 1977.579034][ T7347] usb 3-1: config 2 interface 134 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 1977.592673][ T7347] usb 3-1: config 2 interface 134 has no altsetting 0 [ 1977.655118][ T7347] usb 3-1: string descriptor 0 read error: -71 [ 1977.667589][ T7347] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b4.0d [ 1977.676759][ T7347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.693698][T31041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:26:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201500257693310720c13000db401020301090212000102000000090486abe51646eef2ddb43592c23223229865120000000000000000005279e5d71fd96d2d57119a076d5952bf043dcd3034d3b00a04c742ac069f803d44f9289b9b20efb6a258394c8ece5e69e6564e1fe14bad79ebdcf3961b7eed2f77d97b4471aa3499657550393533b15ee37f6ebe3476534127721ab42823fc865e"], &(0x7f0000000380)={0x0, 0x0, 0x56, &(0x7f0000000040)=ANY=[], 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xdafd}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x843}}, {0x0, 0x0}]}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000200)=""/173) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x3) [ 1977.702916][T31041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1977.710961][T31041] usb 6-1: SerialNumber: syz [ 1977.716576][ T7347] usb 3-1: can't set config #2, error -71 [ 1977.727703][ T7347] usb 3-1: USB disconnect, device number 65 [ 1977.773922][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:26:14 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:14 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb03"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1977.973623][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1977.982819][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.990900][ T8209] usb 5-1: Product: syz [ 1977.995112][ T8209] usb 5-1: Manufacturer: syz [ 1977.999710][ T8209] usb 5-1: SerialNumber: syz [ 1978.023846][T31041] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1978.041165][T31041] usb 6-1: USB disconnect, device number 61 [ 1978.047464][T14137] udc-core: couldn't find an available UDC or it's busy [ 1978.054526][T14137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:26:14 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000c9000000c90806498d7f0c7f9c4dd3409008d98c6e3cce5b4e93e64ab75598b6d4f4e1fd7e21eedb1b771b763a18fe62e727f29dac5234d3168db093b07c8f35e9739711cb0aaec90c4878ec27fc2d44bca3f5a95339a031bd756df35329f9cc663ea3e90a4467d99189f54470645e3fa3aded603ddc01526b90eb169cca577e1d4be406372da6a919833ac8762ddbd3735e1929f740d25678679c7f231380fc19f5a0d573260f855c793347d77a74a222dda99da036a735c753c1cd7022ec0b"], &(0x7f00000007c0)={0x0, 0x3, 0x86, @string={0x86, 0x3, "f00f609f402496b1b80ed3a2e8d77eb26bff2827a2e51e567d96bc839b2a2a10b4fbbec67387a7a1d5d8da9edf79377cdd21c1d7c315ba21f11e9cfa5fd26faf619ec434a06a2921c9df9226956605032b55fa09fea24c517da3f3322cc1ab0f063938ec8a1f35ea2ffb710eb5bf743f7d81aac57e174cb703a66c95f50ef5efa8c1bbfb"}}, &(0x7f0000000880)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xb2, 0x2, 0x6, 0x11, 0x9, [0xf, 0x3fcf]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x20, 0x0, 0x40, 0x2}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x81, 0x4, "c6b7e40c", "ac67f0ab"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x3, 0xfa, 0x81, 0x0, 0x9, 0x1}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000980)={0x0, 0xf, 0x99, "78133bccab65d8ff58a425b80c9d8163720c1768f57844e220c19a572326474593ef8237a7bbff9735860c4b9cfc334c389509e004148720dda7bb14f65fde7e146d15ed91d81e452d28e912fcde36680b2e86d206c1451c59d5e5c0b6501c01ecef02ec21bc34831a267556dcb0b3b876a2ab0d6998c221853e9d20245e9f71081a7e8351b5f773b85e72050103e4ab7c3362abb2df0ee7f5"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0xc137c43fb8badc28, 0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x8, {0x1c00, 0x4, [0xf00]}}, &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "7d18"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x4b6b}, &(0x7f0000000c40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c80)={0x40, 0x17, 0x6}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "e371"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0x6e}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0x7f}}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902410001010000000904000012020600000b24060000da467439a76905240000000d240f0103f8a00000000000000905820200020000000905030200", @ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0xb2, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0xca, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, "8a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x5d, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x18}, @acm={0x4, 0x24, 0x2, 0xb}, @dmm={0x7, 0x24, 0x14, 0x0, 0x1f}, @mdlm_detail={0x43, 0x24, 0x13, 0x2, "b6ab8b1604fe5ca5b8ddde3a4941cfede36168072eb2bb2e19e95099c73ad3cf7487400ae7ca21627ccc9fb028aeaf3d581765844140c1027ec7d5d75cc3ce"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0xce}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x7c, 0xa5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x20, 0x20, 0xff}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x64, 0x7, 0x20, 0x40, 0x3f}, 0xb2, &(0x7f0000000280)={0x5, 0xf, 0xb2, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x6, 0xf0f, 0x15, [0x30, 0x1fe000f]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x60, 0x9b, 0x56, 0x2, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0x5}, @generic={0x84, 0x10, 0xa, "36572a5cadf336245dcf33b4c8de91f234cf5c25abca6f0e322d07d681472dd8ea23a100f0210aa6f13e4b1bbabf782326cd263725760f13ddb8db0a93f200459ee9f06a1731b977a340c63789e999d99d7cb67f2096b289afb59781b56f41c3348895ceaa759bab3d6881a3d589110ed71f03dcd40a5ede7d38bb08ed1992a042"}]}, 0x2, [{0x98, &(0x7f0000000340)=@string={0x98, 0x3, "21eba224e1ea93e0933056cf99473cb564292e421307ad271253e10447de35576c71ae0d534f5d25aef29a3347b94cbcb8b57dd722f47b01a930c4a67f7b99c8e477a955950d47bad873aedb11b7638513b3eb92f781648f07e4e7596dcbb5a235ce3886ee235cf6c56d93b60b7b88635e064980c41d6cb22787f0a06e306fd2a0581ef21444a5a1695af38f6ef6c49b2d648f9b95d8"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x403}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 1978.103677][ T7347] usb 3-1: new high-speed USB device number 66 using dummy_hcd 12:26:14 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x6}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1978.263687][ T8666] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1978.272821][ T8666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.280888][ T8666] usb 2-1: Product: syz [ 1978.285107][ T8666] usb 2-1: Manufacturer: syz [ 1978.289720][ T8666] usb 2-1: SerialNumber: syz [ 1978.314441][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1978.321887][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1978.328763][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1978.334400][ T8666] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1978.353529][ T7347] usb 3-1: Using ep0 maxpacket: 16 [ 1978.361902][ T8209] usb 5-1: USB disconnect, device number 39 [ 1978.383984][ T2222] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1978.503601][T31041] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1978.514234][ T7347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1978.533821][ T4453] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1978.593929][ T7347] usb 3-1: config 2 has an invalid interface number: 134 but max is 0 [ 1978.602262][ T7347] usb 3-1: config 2 has no interface number 0 [ 1978.609318][ T7347] usb 3-1: too many endpoints for config 2 interface 134 altsetting 171: 229, using maximum allowed: 30 [ 1978.621029][ T7347] usb 3-1: config 2 interface 134 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 1978.634661][ T7347] usb 3-1: config 2 interface 134 has no altsetting 0 [ 1978.673703][ T2222] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 1978.753585][ T8209] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1978.873676][T31041] usb 6-1: config 1 has an invalid interface number: 2 but max is 0 [ 1978.881798][T31041] usb 6-1: config 1 has no interface number 0 [ 1978.889073][T31041] usb 6-1: config 1 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1978.933641][ T8666] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1978.963872][ T4453] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1792, setting to 1024 [ 1978.974933][ T4453] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1978.983966][T31041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1978.984968][ T4453] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1978.994029][T31041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1979.015010][T31041] usb 6-1: SerialNumber: syz [ 1979.023753][ T7347] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b4.0d [ 1979.032847][ T7347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.041007][ T7347] usb 3-1: Product: ࡃ [ 1979.054784][T31041] usb 6-1: bad CDC descriptors [ 1979.103760][ T4453] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1979.112817][ T4453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1979.120820][ T4453] usb 1-1: SerialNumber: syz [ 1979.153982][T14156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1979.213641][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:26:15 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1979.261440][T31041] usb 6-1: USB disconnect, device number 62 [ 1979.339211][T14013] udc-core: couldn't find an available UDC or it's busy [ 1979.346350][T14013] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1979.353959][ T7347] peak_usb 3-1:2.134 can0: unable to request usb[type=0 value=1] err=-71 [ 1979.362393][ T7347] peak_usb 3-1:2.134: unable to read PCAN-Chip USB firmware info (err -71) [ 1979.378724][T14156] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1979.423725][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1979.424140][ T7347] peak_usb: probe of 3-1:2.134 failed with error -71 [ 1979.432828][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.442101][ T7347] usb 3-1: USB disconnect, device number 66 [ 1979.447548][ T8209] usb 5-1: Product: syz [ 1979.447568][ T8209] usb 5-1: Manufacturer: syz [ 1979.447584][ T8209] usb 5-1: SerialNumber: syz [ 1979.503846][ T2222] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1979.512922][ T2222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.520978][ T2222] usb 4-1: Product: syz [ 1979.525179][ T2222] usb 4-1: Manufacturer: syz [ 1979.529784][ T2222] usb 4-1: SerialNumber: syz [ 1979.588488][ T2661] usb 2-1: USB disconnect, device number 79 [ 1979.597854][ T2222] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:26:16 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x7}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1979.693639][T31041] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1979.753825][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1979.760499][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1979.767460][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1979.775373][ T8209] usb 5-1: USB disconnect, device number 40 12:26:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_connect(0x3, 0x19c, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x49, 0xa5, 0x4f, 0x8, 0x19d2, 0xff75, 0x4c47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x18a, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xf, 0xc, 0x8, 0x3f, 0x0, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x0, 0x7f}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x40, 0x2, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x1b, 0x400, 0x4, 0x0, 0xff, [@generic={0x98, 0x0, "34aee242c5dd7f1ad0dbf0843430a18db504fe10333a9208cb11e252577e16c4b5a2f4122d5a9f2dfaae6162969ea2955e1b68f705434227ff05564ef4fd870db6c6f44e888ac8047ab034dac5a64eb732fe20d8326be67fdaaf394f764de969a5de23418ac7139ddef5447525b1fb7914f2dd9ecc7e72e002bb358e9c2b8436a1d3a14f864b5a5f2e8fcec6d0d3d52711dd7a448b9d"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x0, 0x7f, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xb8c832e957591308, 0x0, 0x8be}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x5, 0x0, 0x1, [@generic={0x30, 0x21, "6d784edbc595febf0ef1a41d6cf9ac030a3ad7f2dad744756271feeb32d76f920052a690193ff2f4f9b73170905f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3f7, 0x40, 0xde, 0x84}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xff, [@generic={0x3c, 0x0, "d5993e0dcddc356a648e7c9843786aabd80aa43a5c1edf92b5be0cf4d7580a707374cfa7a0e3c70bd41084ac8ea62cd21bf89a177b7ca9985ad1"}]}}, {}]}}]}}]}}, 0x0) [ 1979.844431][T14156] udc-core: couldn't find an available UDC or it's busy [ 1979.851419][T14156] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1979.885956][ T4453] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1980.063702][T31041] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 1980.071726][T31041] usb 6-1: config 1 has no interface number 0 [ 1980.078377][T31041] usb 6-1: config 1 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1980.098951][ T4453] usb 1-1: USB disconnect, device number 127 12:26:16 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb03"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1980.105977][ T4453] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1980.143777][ T7347] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1980.163618][ T8209] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1980.183698][T31041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1980.192762][T31041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1980.200777][T31041] usb 6-1: SerialNumber: syz [ 1980.206624][ T2222] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1980.254209][T31041] usb 6-1: bad CDC descriptors [ 1980.393605][ T8666] usb 2-1: Service connection timeout for: 257 [ 1980.399858][ T8666] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1980.412737][ T8666] ath9k_htc: Failed to initialize the device [ 1980.418887][ T7347] usb 3-1: Using ep0 maxpacket: 8 [ 1980.424206][ T2661] usb 2-1: ath9k_htc: USB layer deinitialized 12:26:17 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1980.469634][T31041] usb 6-1: USB disconnect, device number 63 [ 1980.553731][ T7347] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1980.564207][ T7347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1980.574077][ T7347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1980.583617][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1980.584816][ T7347] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1980.606113][ T7347] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1980.616816][ T7347] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1980.627306][ T7347] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1980.637872][ T7347] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice=4c.47 12:26:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000000b40461de4000010203010902240001010000000904000000030100033130e4935d4b28092100000001"], &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa}, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x0, 0x14}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x0, 0x0, 0x81}, 0x34, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x5, [{0x23, &(0x7f0000000600)=ANY=[@ANYBLOB="238315341c4c13f3022c23891362033d25a1cf6e0a80b76f2431f632f8d5a25e064f4c"]}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x81, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000480)={0xff, 0x0, 0x200, 0x80000000, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r2, 0x4, 0xde, &(0x7f0000001180)="5bb1a6186dcd4a06a62b6e3e23b577e74cb622041845fdf61f5e80d497ca688808725ec77ddbe4faf4b7f70cb53a0f2fda1d13b1869c2949cfcc442abb04de9af612d99a24f41da740b9d74d19fc752905fbbeef73f5fe5b3035fc6a735320bc8787840d2ad83e2c234662b6c25322068daa54205e91d936887b421c0331657366f2c85b115d2c64d135b5d0b366b047b9692cf5ced0370af38bc19283be3acba2953fa06bc2735e92058ead940990ae5dbd1744d494b43b4a284cd74618795d2dafe67673747255a159bf031ce280dcf04d6a4e01bbc49fbcd6b42e950e") syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xc1, &(0x7f0000000780)=ANY=[@ANYBLOB="010200b9060000045bf8e715fccfb2942fb3334634ebfa4c86c415da97e0d7eb88cfc9a50a55db93696725bf5781d9738d89f32aaba1b8c4df08e6b0efd4a104623a182afecf91fb7d143301ff3d38d549fa235220fe61dd4ae6b895a9a19426307073aef530852e7b8962912275bd9e7cd644c0d12930e8140004f9c42b6309851df0b233d8b89ae1720a60ef3dbaade95dd5754e6d43b851f87beab28bf15a5ef2c4e4d7aaf5c129bf03699a3d54c489923d1499f0be0573932ead5f3ff9b3bb"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001280)=ANY=[@ANYBLOB="12010000000000008f0e120040000102030f09022d0001e26764bc55d101000000090474c500038f040905810300000000000905020310000700"/71], &(0x7f00000010c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x6, 0x0, 0x1}, 0x81, &(0x7f0000000880)={0x5, 0xf, 0x81, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @generic={0x8, 0x10, 0x2, "c75983d672"}, @generic={0x53, 0x10, 0x0, "639b10e87213718373c9d4eaec7cf822aca1d040230ec6245d71280d3887f5039c01b037041fa9a7c6b1fbc5b5ab82d71f44e260abe908067f3f174c8c30efbce9473465331092393091a2565ca6ace3"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdab}]}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1980.646956][ T7347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.656703][T14151] udc-core: couldn't find an available UDC or it's busy [ 1980.663761][T14151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1980.671964][ T7347] usb 3-1: config 0 descriptor?? [ 1980.714834][ T7347] option 3-1:0.0: GSM modem (1-port) converter detected [ 1980.783805][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1980.792853][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.800898][ T8209] usb 5-1: Product: syz [ 1980.805138][ T8209] usb 5-1: Manufacturer: syz [ 1980.809715][ T8209] usb 5-1: SerialNumber: syz [ 1980.853641][ T2661] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1980.897472][ T4453] usb 4-1: USB disconnect, device number 80 [ 1980.918790][ T4970] usb 3-1: USB disconnect, device number 67 [ 1980.926486][ T4970] option 3-1:0.0: device disconnected [ 1980.953582][T31041] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1981.013607][ T7347] usb 1-1: new high-speed USB device number 2 using dummy_hcd 12:26:17 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x9}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1981.113771][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1981.120555][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1981.127639][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1981.133932][ T2661] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1981.136312][ T8209] usb 5-1: USB disconnect, device number 41 [ 1981.294042][ T7347] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 1981.313785][T31041] usb 6-1: config 1 has an invalid interface number: 4 but max is 0 [ 1981.321869][T31041] usb 6-1: config 1 has no interface number 0 [ 1981.328336][T31041] usb 6-1: config 1 interface 4 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 12:26:17 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x42001) write$hidraw(0xffffffffffffffff, &(0x7f00000002c0)="31f43e409a84739584d7a2033b51a00fa22ab91de51add5f3cd893f6971a25b6b6829f379707250346657e2188f0fe4c0f6e0e535abc8271a653fe85cd395c37c20190893a1ec5d0d50d8da087e78e20a843b38467d6d1794c008947cd09b60ff2aafb48cd8a42c3ef812e6eed7980480e75c8f37f17f382aeb1a96efc8f2abedf2b47c4bc48e528544eafa2658eb42b2ed5eecb6dd01c42d85f857caca55a32b5aac00d31769f0c4e9dd6653e16d34645b1047c4d72cf02fd52610b267e6d311342628850bb8657112f993c0b1b2b0955f4145253a50bf512c22b6d58cb508829ee4e45943ea2a36188af41f82ba837ea82cb000fa22ac9b07c6a5ad8c7191f3b6931cab08babeeec53250c783b1a3485e6dd9ad00a88440887f561e092777b12ea7910fd734d9deb80711e5a4c31cd6afc6101f10b76c6d79603e25a15d18563cf5bad34ad12", 0x147) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x8040) syz_open_dev$evdev(&(0x7f00000001c0), 0x10001, 0x900) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x5452, 0xfffffffffffffffe) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x7fff, 0x4c40) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x4, 0x800]) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000036c0)={0x9, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x18, 0x0, 0x101, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xffffffffffffffdd, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x3c) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) [ 1981.413890][T31041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1981.422993][T31041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1981.431050][T31041] usb 6-1: SerialNumber: syz [ 1981.474391][T31041] usb 6-1: bad CDC descriptors [ 1981.523579][ T8209] usb 5-1: new high-speed USB device number 42 using dummy_hcd 12:26:18 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1981.681035][ T4970] usb 6-1: USB disconnect, device number 64 [ 1981.713829][ T7361] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1981.753748][ T2222] usb 4-1: Service connection timeout for: 257 [ 1981.759937][ T2222] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1981.770759][ T2222] ath9k_htc: Failed to initialize the device [ 1981.777418][ T4453] usb 4-1: ath9k_htc: USB layer deinitialized [ 1981.903605][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1981.943724][ T2661] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1981.952826][ T2661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.960925][ T2661] usb 2-1: Product: syz [ 1981.965153][ T2661] usb 2-1: Manufacturer: syz [ 1981.969759][ T2661] usb 2-1: SerialNumber: syz [ 1981.974410][ T7361] usb 3-1: Using ep0 maxpacket: 8 [ 1982.014544][ T2661] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1982.073620][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1982.082696][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.090752][ T8209] usb 5-1: Product: syz [ 1982.094976][ T8209] usb 5-1: Manufacturer: syz [ 1982.099575][ T8209] usb 5-1: SerialNumber: syz [ 1982.103633][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1982.104221][ T4970] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1982.114630][ T7361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1982.131907][ T7361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1982.133904][ T4453] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1982.142679][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1982.160722][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1982.171187][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1982.181647][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1982.192142][ T7361] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice=4c.47 [ 1982.201248][ T7361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.209371][ T7347] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1982.218457][ T7347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.226513][ T7347] usb 1-1: Product: syz [ 1982.230660][ T7347] usb 1-1: Manufacturer: syz [ 1982.235271][ T7347] usb 1-1: SerialNumber: syz [ 1982.241894][ T7361] usb 3-1: config 0 descriptor?? [ 1982.295019][ T7361] option 3-1:0.0: GSM modem (1-port) converter detected [ 1982.307509][ T7347] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:26:18 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0xa}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1982.423947][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1982.432144][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1982.439014][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1982.453647][ T4453] usb 4-1: too many configurations: 210, using maximum allowed: 8 [ 1982.463984][ T8209] usb 5-1: USB disconnect, device number 42 12:26:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_connect(0x3, 0x19c, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x49, 0xa5, 0x4f, 0x8, 0x19d2, 0xff75, 0x4c47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x18a, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xf, 0xc, 0x8, 0x3f, 0x0, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x0, 0x7f}]}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x40, 0x2, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x1b, 0x400, 0x4, 0x0, 0xff, [@generic={0x98, 0x0, "34aee242c5dd7f1ad0dbf0843430a18db504fe10333a9208cb11e252577e16c4b5a2f4122d5a9f2dfaae6162969ea2955e1b68f705434227ff05564ef4fd870db6c6f44e888ac8047ab034dac5a64eb732fe20d8326be67fdaaf394f764de969a5de23418ac7139ddef5447525b1fb7914f2dd9ecc7e72e002bb358e9c2b8436a1d3a14f864b5a5f2e8fcec6d0d3d52711dd7a448b9d"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x0, 0x7f, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xb8c832e957591308, 0x0, 0x8be}]}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x5, 0x0, 0x1, [@generic={0x30, 0x21, "6d784edbc595febf0ef1a41d6cf9ac030a3ad7f2dad744756271feeb32d76f920052a690193ff2f4f9b73170905f"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3f7, 0x40, 0xde, 0x84}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xff, [@generic={0x3c, 0x0, "d5993e0dcddc356a648e7c9843786aabd80aa43a5c1edf92b5be0cf4d7580a707374cfa7a0e3c70bd41084ac8ea62cd21bf89a177b7ca9985ad1"}]}}, {}]}}]}}]}}, 0x0) [ 1982.493810][ T4970] usb 6-1: config 1 has an invalid interface number: 5 but max is 0 [ 1982.501858][ T4970] usb 6-1: config 1 has no interface number 0 [ 1982.517370][ T7361] usb 3-1: USB disconnect, device number 68 [ 1982.527398][ T4970] usb 6-1: config 1 interface 5 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1982.529414][ T7361] option 3-1:0.0: device disconnected [ 1982.623664][ T4970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1982.632723][ T4970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1982.640746][ T4970] usb 6-1: SerialNumber: syz [ 1982.684332][ T4970] usb 6-1: bad CDC descriptors [ 1982.753655][T31041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1982.843607][ T8209] usb 5-1: new high-speed USB device number 43 using dummy_hcd 12:26:19 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1982.892140][ T4970] usb 6-1: USB disconnect, device number 65 [ 1982.963808][ T7347] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1982.983670][ T7361] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1983.157479][T14269] udc-core: couldn't find an available UDC or it's busy [ 1983.164557][T14269] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1983.167687][T14304] udc-core: couldn't find an available UDC or it's busy [ 1983.178974][T14304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1983.188501][T14304] udc-core: couldn't find an available UDC or it's busy [ 1983.196954][T14304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1983.203700][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.253635][ T7361] usb 3-1: Using ep0 maxpacket: 8 [ 1983.283614][ T4453] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1983.292701][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.300773][ T4453] usb 4-1: Product: syz [ 1983.305077][ T4453] usb 4-1: Manufacturer: syz [ 1983.309755][ T4453] usb 4-1: SerialNumber: syz [ 1983.314392][ T4970] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1983.354307][ T4453] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1983.393629][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1983.402671][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.408349][T14304] udc-core: couldn't find an available UDC or it's busy [ 1983.410863][ T8209] usb 5-1: Product: syz [ 1983.417805][T14304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1983.421794][ T8209] usb 5-1: Manufacturer: syz [ 1983.429363][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1983.433851][ T8209] usb 5-1: SerialNumber: syz [ 1983.441164][T14304] udc-core: couldn't find an available UDC or it's busy [ 1983.444479][ T7361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1983.449114][T14304] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1983.456061][ T7361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1983.484141][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1983.494635][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1983.505178][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1983.515640][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1983.526204][ T7361] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice=4c.47 [ 1983.535270][ T7361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.545644][ T2222] usb 2-1: USB disconnect, device number 80 [ 1983.558870][ T7361] usb 3-1: config 0 descriptor?? [ 1983.614969][ T7361] option 3-1:0.0: GSM modem (1-port) converter detected 12:26:20 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0xf}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1983.703710][ T4970] usb 6-1: config 1 has an invalid interface number: 6 but max is 0 [ 1983.711812][ T4970] usb 6-1: config 1 has no interface number 0 [ 1983.718678][ T4970] usb 6-1: config 1 interface 6 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1983.732161][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1983.741724][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1983.748773][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1983.755661][ T7361] usb 1-1: USB disconnect, device number 2 [ 1983.767401][ T8209] usb 5-1: USB disconnect, device number 43 [ 1983.813979][ T4970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1983.823254][ T4970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1983.831515][ T4970] usb 6-1: SerialNumber: syz [ 1983.856249][T22170] usb 3-1: USB disconnect, device number 69 [ 1983.867620][T22170] option 3-1:0.0: device disconnected [ 1983.875099][ T4970] usb 6-1: bad CDC descriptors [ 1983.973647][ T4453] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:26:20 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:26:20 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1984.094626][T22170] usb 6-1: USB disconnect, device number 66 [ 1984.133740][ T8209] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1984.176875][T14336] udc-core: couldn't find an available UDC or it's busy [ 1984.183883][T14336] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:26:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000000b40461de4000010203010902240001010000000904000000030100033130e4935d4b28092100000001"], &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa}, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x0, 0x14}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x0, 0x0, 0x81}, 0x34, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x5, [{0x23, &(0x7f0000000600)=ANY=[@ANYBLOB="238315341c4c13f3022c23891362033d25a1cf6e0a80b76f2431f632f8d5a25e064f4c"]}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x81, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000480)={0xff, 0x0, 0x200, 0x80000000, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r2, 0x4, 0xde, &(0x7f0000001180)="5bb1a6186dcd4a06a62b6e3e23b577e74cb622041845fdf61f5e80d497ca688808725ec77ddbe4faf4b7f70cb53a0f2fda1d13b1869c2949cfcc442abb04de9af612d99a24f41da740b9d74d19fc752905fbbeef73f5fe5b3035fc6a735320bc8787840d2ad83e2c234662b6c25322068daa54205e91d936887b421c0331657366f2c85b115d2c64d135b5d0b366b047b9692cf5ced0370af38bc19283be3acba2953fa06bc2735e92058ead940990ae5dbd1744d494b43b4a284cd74618795d2dafe67673747255a159bf031ce280dcf04d6a4e01bbc49fbcd6b42e950e") syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xc1, &(0x7f0000000780)=ANY=[@ANYBLOB="010200b9060000045bf8e715fccfb2942fb3334634ebfa4c86c415da97e0d7eb88cfc9a50a55db93696725bf5781d9738d89f32aaba1b8c4df08e6b0efd4a104623a182afecf91fb7d143301ff3d38d549fa235220fe61dd4ae6b895a9a19426307073aef530852e7b8962912275bd9e7cd644c0d12930e8140004f9c42b6309851df0b233d8b89ae1720a60ef3dbaade95dd5754e6d43b851f87beab28bf15a5ef2c4e4d7aaf5c129bf03699a3d54c489923d1499f0be0573932ead5f3ff9b3bb"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001280)=ANY=[@ANYBLOB="12010000000000008f0e120040000102030f09022d0001e26764bc55d101000000090474c500038f040905810300000000000905020310000700"/71], &(0x7f00000010c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x6, 0x0, 0x1}, 0x81, &(0x7f0000000880)={0x5, 0xf, 0x81, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @generic={0x8, 0x10, 0x2, "c75983d672"}, @generic={0x53, 0x10, 0x0, "639b10e87213718373c9d4eaec7cf822aca1d040230ec6245d71280d3887f5039c01b037041fa9a7c6b1fbc5b5ab82d71f44e260abe908067f3f174c8c30efbce9473465331092393091a2565ca6ace3"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdab}]}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1984.233563][T31041] usb 2-1: Service connection timeout for: 257 [ 1984.239753][T31041] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1984.250424][T31041] ath9k_htc: Failed to initialize the device [ 1984.256936][ T2222] usb 2-1: ath9k_htc: USB layer deinitialized 12:26:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x8, 0x0, 0x0, 0xf9e, "08ec4c2651ce404723a235d036a85d121b917100"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x0, 0x781, &(0x7f00000007c0)="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"}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000480)=""/72) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e20000000000000000000000000faffffff00"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES64]) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1c00a619dbb7a4001a1c0c03c3f1cd7e3c440d8da9fb366cc06042bc45777156fed0892c5b00bd648aebf599d7eaded07c980fc19a76bb95dfdf389cf47a7f958c1786247ae7adce1cfc78ebc83e0d5668aaa003bee2c46fc5c615e63094ab2ca08f52cff32f17ac2907a25b1a95529867720aa2d044357e0ea5a983a889fcdff0bb41a77f69eab3044269e05cacd34760a084baeb991dc6b6d1c5e1"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc1, &(0x7f0000000580)=ANY=[@ANYBLOB="020200b93bbf8b3d0f3a0f4d10ffa3e66ce1c7d5d7d0bbbbfc9bb797a5abbefd0ef767469210497afc952e4402f99a460f197a2373cc4fb5339287a0493adb1ac4f8"]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e398b, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x31, &(0x7f0000000340)=ANY=[@ANYBLOB="050065c1960bdd9fc21eaa3cfef070a337ce2d06777e6045e30023d52978cf2a81e72d8178ed0ef9464c39b519641b6f1701719238fbefb4e8ad81e274e9221b9143990992fba908d403994e2f784644c9b2a3b55663256772d59aa2236601e09306781baaf4945fb67b16c5d193"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000280)=@ready={0x0, 0x0, 0x8, "98c841fa", {0x1, 0x0, 0x1, 0x64, 0x8}}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000600)=@conn_svc_rsp={0x0, 0x0, 0xa, "7085c8d7", {0x3, 0x0, 0x0, 0x0, 0x0, 0x67}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e26b, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1984.395679][T14336] udc-core: couldn't find an available UDC or it's busy [ 1984.402819][T14336] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1984.415875][ T2618] usb 4-1: USB disconnect, device number 81 [ 1984.503731][T22170] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1984.511522][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1984.553634][ T7347] usb 1-1: Service connection timeout for: 257 [ 1984.560261][ T7347] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1984.570321][ T7347] ath9k_htc: Failed to initialize the device [ 1984.576708][ T7361] usb 1-1: ath9k_htc: USB layer deinitialized [ 1984.633629][ T2222] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1984.663551][ T4970] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1984.673918][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1984.682980][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.691034][ T8209] usb 5-1: Product: syz [ 1984.695249][ T8209] usb 5-1: Manufacturer: syz [ 1984.699834][ T8209] usb 5-1: SerialNumber: syz [ 1984.873631][T22170] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1984.881670][T22170] usb 6-1: config 1 has no interface number 0 [ 1984.888773][T22170] usb 6-1: config 1 interface 7 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1984.923753][ T2222] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1984.925720][T14514] udc-core: couldn't find an available UDC or it's busy [ 1984.938771][T14514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1984.947338][T14514] udc-core: couldn't find an available UDC or it's busy [ 1984.954510][T14514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1984.963026][ T4970] usb 3-1: too many configurations: 186, using maximum allowed: 8 12:26:21 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x18}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:21 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x42001) write$hidraw(0xffffffffffffffff, &(0x7f00000002c0)="31f43e409a84739584d7a2033b51a00fa22ab91de51add5f3cd893f6971a25b6b6829f379707250346657e2188f0fe4c0f6e0e535abc8271a653fe85cd395c37c20190893a1ec5d0d50d8da087e78e20a843b38467d6d1794c008947cd09b60ff2aafb48cd8a42c3ef812e6eed7980480e75c8f37f17f382aeb1a96efc8f2abedf2b47c4bc48e528544eafa2658eb42b2ed5eecb6dd01c42d85f857caca55a32b5aac00d31769f0c4e9dd6653e16d34645b1047c4d72cf02fd52610b267e6d311342628850bb8657112f993c0b1b2b0955f4145253a50bf512c22b6d58cb508829ee4e45943ea2a36188af41f82ba837ea82cb000fa22ac9b07c6a5ad8c7191f3b6931cab08babeeec53250c783b1a3485e6dd9ad00a88440887f561e092777b12ea7910fd734d9deb80711e5a4c31cd6afc6101f10b76c6d79603e25a15d18563cf5bad34ad12", 0x147) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x8040) syz_open_dev$evdev(&(0x7f00000001c0), 0x10001, 0x900) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x5452, 0xfffffffffffffffe) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x7fff, 0x4c40) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000003c0)=[0x4, 0x800]) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000036c0)={0x9, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x18, 0x0, 0x101, "ed105400000000003ec13e2000"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xffffffffffffffdd, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x3c) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) [ 1984.963559][ T7361] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1984.983879][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1984.992960][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1985.001116][T22170] usb 6-1: SerialNumber: syz [ 1985.005947][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1985.022244][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1985.029125][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1985.034406][ T4453] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1985.049967][ T4453] ath9k_htc: Failed to initialize the device [ 1985.067407][ T2618] usb 4-1: ath9k_htc: USB layer deinitialized [ 1985.077183][ T8209] usb 5-1: USB disconnect, device number 44 [ 1985.124238][T22170] usb 6-1: bad CDC descriptors 12:26:21 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1985.332133][T22170] usb 6-1: USB disconnect, device number 67 [ 1985.332853][ T7361] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 1985.433619][ T2618] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1985.444256][ T8209] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1985.713839][ T2618] usb 4-1: too many configurations: 210, using maximum allowed: 8 [ 1985.753599][T22170] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1985.773791][ T4970] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1985.782856][ T4970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.791082][ T4970] usb 3-1: Product: syz [ 1985.795338][ T4970] usb 3-1: Manufacturer: syz [ 1985.799939][ T4970] usb 3-1: SerialNumber: syz [ 1985.804853][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1985.854342][ T4970] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1985.913736][ T2222] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1985.922966][ T2222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.931163][ T2222] usb 2-1: Product: syz [ 1985.935385][ T2222] usb 2-1: Manufacturer: syz [ 1985.939976][ T2222] usb 2-1: SerialNumber: syz [ 1985.973601][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1985.982958][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.991240][ T8209] usb 5-1: Product: syz [ 1985.994215][ T2222] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1985.995530][ T8209] usb 5-1: Manufacturer: syz [ 1986.008080][ T8209] usb 5-1: SerialNumber: syz [ 1986.153592][T22170] usb 6-1: config 1 has an invalid interface number: 8 but max is 0 [ 1986.161613][T22170] usb 6-1: config 1 has no interface number 0 [ 1986.168266][T22170] usb 6-1: config 1 interface 8 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 12:26:22 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x1d}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1986.253872][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1986.263262][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1986.271370][T22170] usb 6-1: SerialNumber: syz [ 1986.294052][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1986.314741][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1986.321562][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1986.333820][ T7361] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1986.334292][T22170] usb 6-1: bad CDC descriptors [ 1986.342913][ T7361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.355727][ T7361] usb 1-1: Product: syz [ 1986.359894][ T7361] usb 1-1: Manufacturer: syz [ 1986.364526][ T7361] usb 1-1: SerialNumber: syz [ 1986.375315][ T8209] usb 5-1: USB disconnect, device number 45 [ 1986.414335][ T7361] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1986.453645][ T4970] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:26:23 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1986.537787][T22170] usb 6-1: USB disconnect, device number 68 [ 1986.543998][ T2618] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1986.553041][ T2618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.561174][ T2618] usb 4-1: Product: syz [ 1986.565370][ T2618] usb 4-1: Manufacturer: syz [ 1986.569971][ T2618] usb 4-1: SerialNumber: syz [ 1986.624306][ T2618] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1986.713640][ T2222] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1986.733680][ T8209] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1986.857349][T14499] udc-core: couldn't find an available UDC or it's busy [ 1986.864317][T14499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1986.872470][T14499] udc-core: couldn't find an available UDC or it's busy [ 1986.879498][T14499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1986.887700][T14499] udc-core: couldn't find an available UDC or it's busy [ 1986.894741][T14499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1986.902739][T14499] udc-core: couldn't find an available UDC or it's busy [ 1986.909754][T14499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1986.918037][T14499] udc-core: couldn't find an available UDC or it's busy [ 1986.925063][T14499] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1986.932606][T22170] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1987.063650][ T7361] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1987.103860][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.121851][T14475] udc-core: couldn't find an available UDC or it's busy [ 1987.129003][T14475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.146299][ T7347] usb 3-1: USB disconnect, device number 70 [ 1987.203797][ T2618] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1987.273615][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1987.282743][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.288634][T14495] udc-core: couldn't find an available UDC or it's busy [ 1987.290875][ T8209] usb 5-1: Product: syz [ 1987.297689][T14495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.301835][ T8209] usb 5-1: Manufacturer: syz [ 1987.313993][ T8209] usb 5-1: SerialNumber: syz [ 1987.323790][T22170] usb 6-1: config 1 has an invalid interface number: 9 but max is 0 [ 1987.331825][T22170] usb 6-1: config 1 has no interface number 0 [ 1987.339439][T14495] udc-core: couldn't find an available UDC or it's busy [ 1987.346477][T14495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.354934][T22170] usb 6-1: config 1 interface 9 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1987.371164][T31041] usb 2-1: USB disconnect, device number 81 [ 1987.425123][T14523] udc-core: couldn't find an available UDC or it's busy [ 1987.432065][T14523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.445202][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1987.454291][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1987.462264][T22170] usb 6-1: SerialNumber: syz [ 1987.504256][T22170] usb 6-1: bad CDC descriptors 12:26:24 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x0}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1987.559453][T14495] udc-core: couldn't find an available UDC or it's busy [ 1987.566470][T14495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.584758][T14495] udc-core: couldn't find an available UDC or it's busy [ 1987.591745][T14495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.593842][ T8209] cdc_ncm 5-1:1.0: bind() failure 12:26:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x8, 0x0, 0x0, 0xf9e, "08ec4c2651ce404723a235d036a85d121b917100"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x0, 0x781, &(0x7f00000007c0)="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"}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000480)=""/72) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e20000000000000000000000000faffffff00"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES64]) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1c00a619dbb7a4001a1c0c03c3f1cd7e3c440d8da9fb366cc06042bc45777156fed0892c5b00bd648aebf599d7eaded07c980fc19a76bb95dfdf389cf47a7f958c1786247ae7adce1cfc78ebc83e0d5668aaa003bee2c46fc5c615e63094ab2ca08f52cff32f17ac2907a25b1a95529867720aa2d044357e0ea5a983a889fcdff0bb41a77f69eab3044269e05cacd34760a084baeb991dc6b6d1c5e1"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc1, &(0x7f0000000580)=ANY=[@ANYBLOB="020200b93bbf8b3d0f3a0f4d10ffa3e66ce1c7d5d7d0bbbbfc9bb797a5abbefd0ef767469210497afc952e4402f99a460f197a2373cc4fb5339287a0493adb1ac4f8"]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e398b, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x31, &(0x7f0000000340)=ANY=[@ANYBLOB="050065c1960bdd9fc21eaa3cfef070a337ce2d06777e6045e30023d52978cf2a81e72d8178ed0ef9464c39b519641b6f1701719238fbefb4e8ad81e274e9221b9143990992fba908d403994e2f784644c9b2a3b55663256772d59aa2236601e09306781baaf4945fb67b16c5d193"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000280)=@ready={0x0, 0x0, 0x8, "98c841fa", {0x1, 0x0, 0x1, 0x64, 0x8}}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000600)=@conn_svc_rsp={0x0, 0x0, 0xa, "7085c8d7", {0x3, 0x0, 0x0, 0x0, 0x0, 0x67}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e26b, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1987.612083][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1987.619089][ T8209] cdc_ncm 5-1:1.1: bind() failure [ 1987.627775][ T8209] usb 5-1: USB disconnect, device number 46 [ 1987.647504][T14523] udc-core: couldn't find an available UDC or it's busy [ 1987.654565][T14523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.673642][ T2661] usb 4-1: USB disconnect, device number 82 12:26:24 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1987.716352][T22170] usb 6-1: USB disconnect, device number 69 [ 1987.827649][ T8666] usb 1-1: USB disconnect, device number 3 12:26:24 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1987.983597][ T8209] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1987.993666][ T4970] usb 3-1: Service connection timeout for: 258 [ 1987.999842][ T4970] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1988.008253][ T4970] ath9k_htc: Failed to initialize the device [ 1988.014480][ T7347] usb 3-1: ath9k_htc: USB layer deinitialized [ 1988.123568][T22170] usb 6-1: new high-speed USB device number 70 using dummy_hcd 12:26:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000008c0)={0x5153}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "d30f1192"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xc1, &(0x7f00000007c0)=@generic={0x1, 0x0, 0xb9, "e0163782", "a3fb776e1ed63e770d8c346a453169d888694a3eb8389dc53d5fcf930e052e7ddf1df453eae1c0b8a927a93d8ab598a4be89ad52154201bbe44babbc216737f3e201576a2050fe1ece3ebfffabfe745bd608e287627d80a5496dd033acd83797c7ae2e36c57f390c7078cd6c6f575d3f35474d03c3a55c84041862ef1421fa820f0aecac342009bf2f00fda21df280733a92a1442e07e42366184e1f9a2c8735e963b01a2e1d0625a1a4abe9a301ace3d1900094c37036f0f0"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa}, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], &(0x7f0000000900)={0xa, &(0x7f00000003c0)={0xa}, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000001180)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x1}, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0xfe95, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000001300)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x201}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe94, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1988.233598][ T2618] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1988.233677][ T2222] usb 2-1: Service connection timeout for: 257 [ 1988.240540][ T2618] ath9k_htc: Failed to initialize the device [ 1988.246644][ T2222] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1988.251098][ T2222] ath9k_htc: Failed to initialize the device [ 1988.266571][ T2661] usb 4-1: ath9k_htc: USB layer deinitialized [ 1988.273108][T31041] usb 2-1: ath9k_htc: USB layer deinitialized 12:26:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000008c0)={0x5153}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "d30f1192"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x81, &(0x7f00000007c0)=@generic={0x1, 0x0, 0x79, "e0163782", "a3fb776e1ed63e770d8c346a453169d888694a3eb8389dc53d5fcf930e052e7ddf1df453eae1c0b8a927a93d8ab598a4be89ad52154201bbe44babbc216737f3e201576a2050fe1ece3ebfffabfe745bd608e287627d80a5496dd033acd83797c7ae2e36c57f390c7078cd6c6f575d3f35474d03c3a55c8404"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa}, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd29, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], &(0x7f0000000900)={0xa, &(0x7f00000003c0)={0xa}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="21e1d56f5d0d59db9c44ab9de6c104d188d7f8c80bbd628b38"], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="000027fcd3f0a1d755a5a89281000000eea2ac00cbd0a7ff4c0164a713805c72e81d6ec9f7ffeabb6ed535083bb3cb004cc226ad009dc574f75ba9abd7126c6dc5"], &(0x7f0000001180)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x1}, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1988.353581][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.393648][ T7347] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1988.503611][T22170] usb 6-1: config 1 has an invalid interface number: 10 but max is 0 [ 1988.511734][T22170] usb 6-1: config 1 has no interface number 0 [ 1988.518999][T22170] usb 6-1: config 1 interface 10 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1988.553668][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1988.562713][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.570786][ T8209] usb 5-1: Product: syz [ 1988.575030][ T8209] usb 5-1: Manufacturer: syz [ 1988.579645][ T8209] usb 5-1: SerialNumber: syz [ 1988.623728][T31041] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1988.623726][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1988.623759][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1988.631370][ T2661] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1988.640462][T22170] usb 6-1: SerialNumber: syz [ 1988.648889][ T7361] usb 1-1: Service connection timeout for: 257 [ 1988.660183][ T8209] usb 5-1: selecting invalid altsetting 1 [ 1988.660902][ T7361] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1988.681106][ T7361] ath9k_htc: Failed to initialize the device [ 1988.687595][ T8666] usb 1-1: ath9k_htc: USB layer deinitialized [ 1988.704576][T22170] usb 6-1: bad CDC descriptors [ 1988.714035][ T7347] usb 3-1: too many configurations: 186, using maximum allowed: 8 12:26:25 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x2}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1988.883722][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1988.891031][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1988.897976][ T8209] cdc_ncm 5-1:1.1: bind() failure 12:26:25 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1988.924847][ T8209] usb 5-1: USB disconnect, device number 47 [ 1988.950789][T22170] usb 6-1: USB disconnect, device number 70 [ 1988.953850][T31041] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1988.965241][ T2661] usb 4-1: too many configurations: 210, using maximum allowed: 8 [ 1989.083646][ T8666] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1989.303629][ T8209] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1989.373557][T22170] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1989.384226][ T8666] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 1989.603770][ T7347] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1989.613070][ T7347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.621122][ T7347] usb 3-1: Product: syz [ 1989.625401][ T7347] usb 3-1: Manufacturer: syz [ 1989.630055][ T7347] usb 3-1: SerialNumber: syz [ 1989.674372][ T7347] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1989.693861][ T8209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1989.763642][T22170] usb 6-1: config 1 has an invalid interface number: 11 but max is 0 [ 1989.772008][T22170] usb 6-1: config 1 has no interface number 0 [ 1989.779062][T22170] usb 6-1: config 1 interface 11 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1989.803712][T31041] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1989.812818][T31041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.820903][T31041] usb 2-1: Product: syz [ 1989.825129][T31041] usb 2-1: Manufacturer: syz [ 1989.829763][T31041] usb 2-1: SerialNumber: syz [ 1989.834725][ T2661] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1989.844029][ T2661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.852133][ T2661] usb 4-1: Product: syz [ 1989.856336][ T2661] usb 4-1: Manufacturer: syz [ 1989.860928][ T2661] usb 4-1: SerialNumber: syz [ 1989.874175][ T8209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1989.883375][ T8209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.891510][ T8209] usb 5-1: Product: syz [ 1989.895715][ T8209] usb 5-1: Manufacturer: syz [ 1989.900407][ T8209] usb 5-1: SerialNumber: syz [ 1989.905089][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1989.914155][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1989.922134][T22170] usb 6-1: SerialNumber: syz [ 1989.924088][T31041] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1989.935413][ T2661] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1989.994598][T22170] usb 6-1: bad CDC descriptors [ 1990.001982][ T8209] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1990.008963][ T8209] cdc_ncm 5-1:1.0: bind() failure [ 1990.032930][ T8209] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1990.039869][ T8209] cdc_ncm 5-1:1.1: bind() failure 12:26:26 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:26 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x3}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1990.201082][ T2661] usb 6-1: USB disconnect, device number 71 [ 1990.222988][T30954] usb 5-1: USB disconnect, device number 48 [ 1990.264118][ T8666] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1990.273280][ T8666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.281322][ T8666] usb 1-1: Product: syz [ 1990.285524][ T8666] usb 1-1: Manufacturer: syz [ 1990.290128][ T8666] usb 1-1: SerialNumber: syz [ 1990.333806][ T7347] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1990.346092][ T8666] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1990.553767][T31041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1990.562810][ T2222] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1990.653629][T30954] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1990.713653][ T2661] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1990.758933][T14639] udc-core: couldn't find an available UDC or it's busy [ 1990.766051][T14639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1990.776045][T14639] udc-core: couldn't find an available UDC or it's busy [ 1990.782993][T14639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1990.793149][T14639] udc-core: couldn't find an available UDC or it's busy [ 1990.801091][T14639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1990.811481][T14639] udc-core: couldn't find an available UDC or it's busy [ 1990.818458][T14639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1990.828681][T14639] udc-core: couldn't find an available UDC or it's busy [ 1990.835795][T14639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1990.923699][ T8666] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1990.960430][T14655] udc-core: couldn't find an available UDC or it's busy [ 1990.967509][T14655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.013744][T30954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1991.056753][ T7361] usb 3-1: USB disconnect, device number 71 [ 1991.075337][ T2661] usb 6-1: config 1 has an invalid interface number: 15 but max is 0 [ 1991.083833][ T2661] usb 6-1: config 1 has no interface number 0 [ 1991.089948][ T2661] usb 6-1: config 1 interface 15 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1991.175796][T14664] udc-core: couldn't find an available UDC or it's busy [ 1991.182788][T14664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.183965][T30954] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1991.193891][T14664] udc-core: couldn't find an available UDC or it's busy [ 1991.199471][T30954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.206359][T14664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.210676][T14664] udc-core: couldn't find an available UDC or it's busy [ 1991.214538][T30954] usb 5-1: Product: syz [ 1991.222045][T14664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.229194][T30954] usb 5-1: Manufacturer: syz [ 1991.238537][T14664] udc-core: couldn't find an available UDC or it's busy [ 1991.240859][T30954] usb 5-1: SerialNumber: syz [ 1991.245380][T14664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.248803][T14664] udc-core: couldn't find an available UDC or it's busy [ 1991.252957][ T2661] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1991.257062][T14664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.290332][ T2661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1991.298473][ T2661] usb 6-1: SerialNumber: syz [ 1991.305642][ T2746] usb 2-1: USB disconnect, device number 82 [ 1991.328282][T14678] udc-core: couldn't find an available UDC or it's busy [ 1991.335307][T14678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.344223][T14678] udc-core: couldn't find an available UDC or it's busy [ 1991.346626][ T2661] usb 6-1: bad CDC descriptors [ 1991.351285][T14678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.356838][T30954] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1991.370424][T30954] cdc_ncm 5-1:1.0: bind() failure [ 1991.376271][T14678] udc-core: couldn't find an available UDC or it's busy [ 1991.383455][T14678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.399780][T30954] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1991.406801][T30954] cdc_ncm 5-1:1.1: bind() failure [ 1991.424868][T14678] udc-core: couldn't find an available UDC or it's busy [ 1991.431825][T14678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.440577][T14678] udc-core: couldn't find an available UDC or it's busy [ 1991.447679][T14678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1991.483670][ T8209] usb 4-1: USB disconnect, device number 83 12:26:28 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x18, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x200000) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2477, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902410001010000080904000012020600000b24060000da467439a76905240000000d240f0103f8a00000000000fe080582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 1991.551133][T22170] usb 6-1: USB disconnect, device number 72 12:26:28 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x4}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1991.598867][T30954] usb 5-1: USB disconnect, device number 49 [ 1991.665962][ T2618] usb 1-1: USB disconnect, device number 4 12:26:28 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1991.913551][ T7347] usb 3-1: Service connection timeout for: 258 [ 1991.919760][ T7347] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1991.928051][ T7347] ath9k_htc: Failed to initialize the device [ 1991.934129][ T7361] usb 3-1: ath9k_htc: USB layer deinitialized 12:26:28 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1991.996517][T31041] usb 2-1: Service connection timeout for: 257 [ 1992.002855][T31041] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1992.011628][T31041] ath9k_htc: Failed to initialize the device [ 1992.018179][ T2746] usb 2-1: ath9k_htc: USB layer deinitialized [ 1992.024345][T30954] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1992.043564][T22170] usb 6-1: new high-speed USB device number 73 using dummy_hcd 12:26:28 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000008c0)={0x5153}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "d30f1192"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x81, &(0x7f00000007c0)=@generic={0x1, 0x0, 0x79, "e0163782", "a3fb776e1ed63e770d8c346a453169d888694a3eb8389dc53d5fcf930e052e7ddf1df453eae1c0b8a927a93d8ab598a4be89ad52154201bbe44babbc216737f3e201576a2050fe1ece3ebfffabfe745bd608e287627d80a5496dd033acd83797c7ae2e36c57f390c7078cd6c6f575d3f35474d03c3a55c8404"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa}, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffd29, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], &(0x7f0000000900)={0xa, &(0x7f00000003c0)={0xa}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="21e1d56f5d0d59db9c44ab9de6c104d188d7f8c80bbd628b38"], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="000027fcd3f0a1d755a5a89281000000eea2ac00cbd0a7ff4c0164a713805c72e81d6ec9f7ffeabb6ed535083bb3cb004cc226ad009dc574f75ba9abd7126c6dc5"], &(0x7f0000001180)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x1}, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1992.303629][ T7361] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1992.313683][ T2222] usb 4-1: Service connection timeout for: 257 [ 1992.320040][ T2222] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1992.328660][ T2222] ath9k_htc: Failed to initialize the device [ 1992.334852][ T8209] usb 4-1: ath9k_htc: USB layer deinitialized [ 1992.383688][T30954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1992.394960][ T2746] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1992.463580][T22170] usb 6-1: config 1 has an invalid interface number: 24 but max is 0 [ 1992.472037][T22170] usb 6-1: config 1 has no interface number 0 [ 1992.473571][ T8666] usb 1-1: Service connection timeout for: 257 [ 1992.478181][T22170] usb 6-1: config 1 interface 24 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1992.484382][ T8666] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1992.505685][ T8666] ath9k_htc: Failed to initialize the device [ 1992.512010][ T2618] usb 1-1: ath9k_htc: USB layer deinitialized [ 1992.573617][T22170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1992.582681][T22170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1992.583666][T30954] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1992.590850][T22170] usb 6-1: SerialNumber: syz [ 1992.599951][T30954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.612502][T30954] usb 5-1: Product: syz [ 1992.616707][T30954] usb 5-1: Manufacturer: syz [ 1992.621307][T30954] usb 5-1: SerialNumber: syz [ 1992.664285][T22170] usb 6-1: bad CDC descriptors [ 1992.677788][T30954] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1992.684729][T30954] cdc_ncm 5-1:1.0: bind() failure [ 1992.692935][T30954] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1992.700035][T30954] cdc_ncm 5-1:1.1: bind() failure [ 1992.705162][ T2746] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1992.713372][ T7361] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.723698][ T8209] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1992.724086][ T7361] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1992.823872][ T7361] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1992.833108][ T7361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1992.841231][ T7361] usb 3-1: SerialNumber: syz 12:26:29 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1992.871597][T30954] usb 6-1: USB disconnect, device number 73 [ 1992.885013][ T7361] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1992.887081][ T2618] usb 1-1: new high-speed USB device number 5 using dummy_hcd 12:26:29 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1992.920392][T22170] usb 5-1: USB disconnect, device number 50 [ 1993.033709][ T8209] usb 4-1: too many configurations: 38, using maximum allowed: 8 12:26:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac0530418200000000000110efb4624a311328fc77e30902240001000000000904000009030000000921"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1993.092418][ T7361] usb 3-1: USB disconnect, device number 72 [ 1993.213726][ T2618] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 1993.303614][T30954] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1993.353686][T22170] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1993.503607][ T2746] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1993.512823][ T2746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.520892][ T2746] usb 2-1: Product: syz [ 1993.525081][ T2746] usb 2-1: Manufacturer: syz [ 1993.529659][ T2746] usb 2-1: SerialNumber: syz [ 1993.534444][ T7361] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1993.584427][ T2746] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1993.683608][T30954] usb 6-1: config 1 has an invalid interface number: 29 but max is 0 [ 1993.691801][T30954] usb 6-1: config 1 has no interface number 0 [ 1993.698219][T30954] usb 6-1: config 1 interface 29 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1993.783728][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1993.792865][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1993.800949][T30954] usb 6-1: SerialNumber: syz [ 1993.803629][T22170] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1993.814041][ T7361] usb 3-1: no configurations [ 1993.821061][ T7361] usb 3-1: can't read configurations, error -22 [ 1993.844587][T30954] usb 6-1: bad CDC descriptors [ 1993.973581][ T7361] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1994.003741][ T8209] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1994.012857][ T8209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:26:30 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1994.020937][ T8209] usb 4-1: Product: syz [ 1994.025178][ T8209] usb 4-1: Manufacturer: syz [ 1994.029901][ T8209] usb 4-1: SerialNumber: syz [ 1994.034599][T22170] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1994.043791][T22170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.051786][T22170] usb 5-1: Product: syz [ 1994.055990][T22170] usb 5-1: Manufacturer: syz [ 1994.059016][T30954] usb 6-1: USB disconnect, device number 74 [ 1994.060701][T22170] usb 5-1: SerialNumber: syz [ 1994.124439][T22170] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1994.131248][T22170] cdc_ncm 5-1:1.0: bind() failure [ 1994.145517][ T8209] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1994.156092][T22170] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1994.163153][T22170] cdc_ncm 5-1:1.1: bind() failure [ 1994.163747][ T2746] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1994.183975][ T2618] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1994.193043][ T2618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.201086][ T2618] usb 1-1: Product: syz [ 1994.205291][ T2618] usb 1-1: Manufacturer: syz [ 1994.209994][ T2618] usb 1-1: SerialNumber: syz [ 1994.263687][ T7361] usb 3-1: no configurations [ 1994.264120][ T2618] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1994.268371][ T7361] usb 3-1: can't read configurations, error -22 [ 1994.283698][ T7361] usb usb3-port1: attempt power cycle 12:26:30 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x7}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1994.330724][ T8666] usb 5-1: USB disconnect, device number 51 [ 1994.483559][T30954] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1994.568566][T14813] udc-core: couldn't find an available UDC or it's busy [ 1994.575607][T14813] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1994.693645][ T7361] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1994.743713][ T8666] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1994.798080][ T8209] usb 2-1: USB disconnect, device number 83 [ 1994.823806][ T7361] usb 3-1: no configurations [ 1994.828527][ T7361] usb 3-1: can't read configurations, error -22 [ 1994.843784][T30954] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1994.873626][T22170] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1994.923668][ T2618] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1994.935838][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1994.945092][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1994.953073][T30954] usb 6-1: SerialNumber: syz [ 1994.983629][ T7361] usb 3-1: new high-speed USB device number 76 using dummy_hcd 12:26:31 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1995.025433][ T4970] usb 4-1: USB disconnect, device number 84 [ 1995.103639][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1995.124231][ T7361] usb 3-1: no configurations [ 1995.128852][ T7361] usb 3-1: can't read configurations, error -22 [ 1995.136536][ T7361] usb usb3-port1: unable to enumerate USB device 12:26:31 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1995.213884][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1995.223328][T30954] usb 6-1: USB disconnect, device number 75 12:26:31 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c02"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1995.273717][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1995.283164][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.291182][ T8666] usb 5-1: Product: syz [ 1995.295401][ T8666] usb 5-1: Manufacturer: syz [ 1995.300175][ T8666] usb 5-1: SerialNumber: syz [ 1995.344485][ T8666] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1995.352226][T14834] udc-core: couldn't find an available UDC or it's busy [ 1995.358306][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 1995.365254][T14834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1995.374982][T14834] udc-core: couldn't find an available UDC or it's busy [ 1995.384882][T14834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1995.399638][T14834] udc-core: couldn't find an available UDC or it's busy [ 1995.407695][T14834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1995.410078][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1995.417854][T14834] udc-core: couldn't find an available UDC or it's busy [ 1995.422191][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 1995.434395][T14834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1995.450932][T14834] udc-core: couldn't find an available UDC or it's busy [ 1995.457996][T14834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:26:32 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0x9}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1995.552454][ T8666] usb 5-1: USB disconnect, device number 52 [ 1995.633669][T30954] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1995.673653][ T2746] usb 2-1: Service connection timeout for: 257 [ 1995.679966][ T2746] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1995.689384][ T2746] ath9k_htc: Failed to initialize the device [ 1995.695477][ T8209] usb 2-1: ath9k_htc: USB layer deinitialized [ 1995.708035][ T7361] usb 1-1: USB disconnect, device number 5 [ 1995.923555][T22170] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1995.930781][T22170] ath9k_htc: Failed to initialize the device [ 1995.936991][ T4970] usb 4-1: ath9k_htc: USB layer deinitialized [ 1995.983680][ T8666] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1996.003853][T30954] usb 6-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1996.016916][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1996.063627][ T8209] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1996.103795][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:26:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e77e3040b11342009854010203010902120001000000000904000044"], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x8, 0x1, 0x4, 0x1ff, "4355531c0721815a7de4f6c45fa235dc6ceb6670ba76da99160a88cc388f8925"}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000001c0)=""/4096) ioctl$EVIOCGSND(r4, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000080)=""/44) [ 1996.112963][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1996.121141][T30954] usb 6-1: SerialNumber: syz 12:26:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa}, 0x0, 0x0, 0x4, [{0x81, &(0x7f0000000f80)=@string={0x81, 0x3, "ed911577a2c2e844ff8eeb65f5dd5222189dabdb446caecd94f267f73726e13fb37859cf91d2b286d0ca694cd19ace6a7478790462b61857732865908c400fe17c1fe14f407ae109d608d9d5f9cee60d6b547392b889bd8e1619ad36dc0e98214062edf4a22d64f6d48dda0282f1d247f009881386a7792f2ba3aac6885f22"}}, {0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="0203d13f33e9"]}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x101, 0x0}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000dc0)={0xa, &(0x7f0000000900)={0xa}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000c80)=@lang_id={0x4}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4}}, {0x2, &(0x7f0000000d80)=@string={0x2}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], &(0x7f0000001240)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000680)={0x6, 0x3, 0x0, 0xef9b, "e3aae684ae195b372677eb4e783fc0af22ed5ca5e5e3ac66f421cc44923f3636"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b80000000799d5ceeab479a3ffa6a6f2239a3e458c024a41bf0630000000100"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[@ANYBLOB="120100000000000079004318400001020301090224000101000000090400000003010000092100000001220000090581030000000000f86c13a8b3919dd88fefda451cbdf95f584d610d101c65324ef5d9ccff4d2a4128080f9a49ad"], &(0x7f0000000f00)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x0, 0x4}, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="014f5e77551bdf93457af7d3c85f3c69000f16d00076ca63d0dff2c0d4c610dec0561615e36f1052f9231456228c75c74e4559f4384dc83e62a77fe612c7e609e69a6b8d4304524d9399d2f151caddd67c7d01feaa766b7dbce6d83f1851c16ea394aa2014cc0cd9e8c23659b8b2133ea9980d80611ea36d6d74221be8e93d8294db40706dcacf8fb72e2bf4a0d5b1048ba1461852b118033937474f81a2e33b9895205c16ade65a6c9b46caf8e75555795736a9401b68c87d38cb614767d7b1add22d783783554a56f976a2fb04a0f86d03803f36a6ef0db5286c00"/232], 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000006d0418c240000101ed01090224000101000000"], &(0x7f0000001100)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000b00)=@lang_id={0x4}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000a80)=ANY=[@ANYBLOB="12d54c880b30251391bc26f1a9409fbf1ec915436242c8489fac15962f4cdbb1ddb67565da7317c9f5ed4fb9d4bc20f6c478406648b891cb7e416ac9a3459e6ccfcb51c3f49bc9802ba957df9f8a7b11341682d9ffe5a853396344c5c20dbc3e39ae5aec88ce"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa}, 0x0, 0x0, 0x2, [{0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="15032b86db22e4b376461b50890000000000000000b2988499045996b0d5461f5c7b0747245423109d3884ef417c18b29adb5c6f777700000000a10a5c9b3662aac1ff7c680a01f3ef5636191188e7ed47533943ce087c039d31368de75181db6312529eb9b0390cc72c"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:26:32 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1996.313613][ T4970] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1996.343761][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1996.353705][ T8209] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 1996.383976][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1996.394612][T30954] usb 6-1: USB disconnect, device number 76 [ 1996.513615][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1996.522819][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.530861][ T8666] usb 5-1: Product: syz [ 1996.535069][ T8666] usb 5-1: Manufacturer: syz [ 1996.539742][ T8666] usb 5-1: SerialNumber: syz [ 1996.563601][ T2618] usb 1-1: Service connection timeout for: 257 [ 1996.569979][ T2618] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1996.578624][ T2618] ath9k_htc: Failed to initialize the device [ 1996.584321][ T8666] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1996.591385][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 1996.596498][ T7361] usb 1-1: ath9k_htc: USB layer deinitialized [ 1996.607045][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1996.613992][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 1996.619047][ T2222] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1996.633839][ T4970] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 1996.753651][T30954] usb 6-1: new high-speed USB device number 77 using dummy_hcd 12:26:33 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0xa}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1996.809643][ T4453] usb 5-1: USB disconnect, device number 53 [ 1996.953579][ T7361] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1997.013769][ T2222] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 68, using maximum allowed: 30 [ 1997.024593][ T2222] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 1997.183653][T30954] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1997.197365][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1997.213732][ T4453] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1997.233813][ T8209] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1997.242872][ T8209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.250888][ T8209] usb 2-1: Product: syz [ 1997.253609][ T2222] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=54.98 [ 1997.255121][ T8209] usb 2-1: Manufacturer: syz [ 1997.264133][ T2222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.268668][ T8209] usb 2-1: SerialNumber: syz [ 1997.276655][ T2222] usb 3-1: Product: syz [ 1997.285450][ T2222] usb 3-1: Manufacturer: syz [ 1997.290061][ T2222] usb 3-1: SerialNumber: syz [ 1997.294977][ T7361] usb 1-1: too many configurations: 210, using maximum allowed: 8 [ 1997.305976][ T2222] usb 3-1: config 0 descriptor?? [ 1997.314453][ T8209] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1997.343754][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1997.353891][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1997.362084][T30954] usb 6-1: SerialNumber: syz [ 1997.373873][ T2222] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1997.473646][ T4970] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1997.482703][ T4970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.490831][ T4970] usb 4-1: Product: syz [ 1997.495025][ T4970] usb 4-1: Manufacturer: syz [ 1997.499624][ T4970] usb 4-1: SerialNumber: syz [ 1997.546276][ T4970] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1997.558489][ T32] usb 3-1: USB disconnect, device number 77 [ 1997.570738][T10123] usb 3-1: Failed to submit usb control message: -71 [ 1997.577644][T10123] usb 3-1: unable to send the bmi data to the device: -71 [ 1997.584963][T10123] usb 3-1: unable to get target info from device 12:26:34 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1997.591393][T10123] usb 3-1: could not get target info (-71) [ 1997.597483][T10123] usb 3-1: could not probe fw (-71) [ 1997.634061][ T4453] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1997.640049][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1997.660511][T30954] usb 6-1: USB disconnect, device number 77 [ 1997.813639][ T4453] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1997.822728][ T4453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.831018][ T4453] usb 5-1: Product: syz [ 1997.835259][ T4453] usb 5-1: Manufacturer: syz [ 1997.839860][ T4453] usb 5-1: SerialNumber: syz [ 1997.884923][ T4453] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1997.891748][ T4453] cdc_ncm 5-1:1.0: bind() failure [ 1997.899489][ T4453] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1997.906589][ T4453] cdc_ncm 5-1:1.1: bind() failure [ 1997.923629][ T8209] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:26:34 executing program 3: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1998.052611][ T4453] usb 4-1: USB disconnect, device number 85 [ 1998.053711][T30954] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1998.058768][ T4970] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1998.077208][ T4453] usb 4-1: ath9k_htc: USB layer deinitialized 12:26:34 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5, 0x24, 0x6, 0x0, 0xf}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1998.110393][ T8666] usb 5-1: USB disconnect, device number 54 [ 1998.283628][ T7361] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1998.292732][ T7361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.300757][ T7361] usb 1-1: Product: syz [ 1998.304966][ T7361] usb 1-1: Manufacturer: syz [ 1998.309549][ T7361] usb 1-1: SerialNumber: syz [ 1998.332100][T14968] udc-core: couldn't find an available UDC or it's busy [ 1998.339241][T14968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1998.355979][ T7361] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1998.383832][ T2222] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1998.483690][T30954] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1998.496705][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1998.503597][ T4453] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1998.563557][ T8666] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1998.574129][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1998.583630][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1998.591782][T30954] usb 6-1: SerialNumber: syz [ 1998.599883][ T2618] usb 2-1: USB disconnect, device number 84 [ 1998.743582][ T2222] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 68, using maximum allowed: 30 [ 1998.754549][ T2222] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 68 12:26:35 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1998.813776][ T4453] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 1998.853705][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1998.864682][T30954] usb 6-1: USB disconnect, device number 78 [ 1998.923652][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.934985][ T2222] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=54.98 [ 1998.944062][ T2222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.952147][ T2222] usb 3-1: Product: syz [ 1998.956363][ T2222] usb 3-1: Manufacturer: syz [ 1998.960957][ T2222] usb 3-1: SerialNumber: syz [ 1998.965654][ T7361] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1998.976655][ T2222] usb 3-1: config 0 descriptor?? [ 1999.015890][ T2222] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! 12:26:35 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c02"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 1999.133793][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1999.142875][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.150999][ T8666] usb 5-1: Product: syz [ 1999.154231][T15008] udc-core: couldn't find an available UDC or it's busy [ 1999.155241][ T8666] usb 5-1: Manufacturer: syz [ 1999.162124][T15008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1999.166751][ T8666] usb 5-1: SerialNumber: syz 12:26:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e77e3040b11342009854010203010902120001000000000904000044"], 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x8, 0x1, 0x4, 0x1ff, "4355531c0721815a7de4f6c45fa235dc6ceb6670ba76da99160a88cc388f8925"}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000001c0)=""/4096) ioctl$EVIOCGSND(r4, 0x5452, 0xfffffffffffffffe) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000080)=""/44) [ 1999.188047][ T32] usb 3-1: USB disconnect, device number 78 [ 1999.203704][T25498] usb 3-1: Failed to submit usb control message: -71 [ 1999.210434][T25498] usb 3-1: unable to send the bmi data to the device: -71 [ 1999.218394][T25498] usb 3-1: unable to get target info from device [ 1999.225032][T25498] usb 3-1: could not get target info (-71) [ 1999.230933][T25498] usb 3-1: could not probe fw (-71) [ 1999.237334][ T8666] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1999.245132][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 1999.265330][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1999.272191][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 1999.323716][T30954] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1999.425367][T15008] udc-core: couldn't find an available UDC or it's busy [ 1999.432437][T15008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1999.440038][ T8209] usb 2-1: Service connection timeout for: 257 [ 1999.447021][ T8209] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1999.447980][T15008] udc-core: couldn't find an available UDC or it's busy [ 1999.462173][T15008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1999.465664][ T8209] ath9k_htc: Failed to initialize the device 12:26:36 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x4}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 1999.476497][ T2618] usb 2-1: ath9k_htc: USB layer deinitialized [ 1999.494315][ T4604] usb 5-1: USB disconnect, device number 55 [ 1999.515240][T15008] udc-core: couldn't find an available UDC or it's busy [ 1999.522222][T15008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1999.530914][T15008] udc-core: couldn't find an available UDC or it's busy [ 1999.538227][T15008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1999.613567][ T32] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1999.703630][ T4453] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1999.712691][ T4453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.720735][ T4453] usb 4-1: Product: syz [ 1999.724937][ T4453] usb 4-1: Manufacturer: syz [ 1999.729717][ T4453] usb 4-1: SerialNumber: syz [ 1999.755931][ T2674] usb 1-1: USB disconnect, device number 6 [ 1999.774114][ T4453] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1999.776084][T30954] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1999.795302][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1999.843626][ T2618] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1999.883792][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1999.893071][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1999.893709][ T4604] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1999.901215][T30954] usb 6-1: SerialNumber: syz [ 1999.973652][ T32] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 68, using maximum allowed: 30 [ 1999.984956][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 2000.123642][ T2618] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 2000.153750][ T32] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=54.98 [ 2000.162901][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:26:36 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2000.171049][ T32] usb 3-1: Product: syz [ 2000.175358][ T32] usb 3-1: Manufacturer: syz [ 2000.179963][ T32] usb 3-1: SerialNumber: syz [ 2000.186108][ T32] usb 3-1: config 0 descriptor?? [ 2000.203814][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2000.213685][T30954] usb 6-1: USB disconnect, device number 79 [ 2000.237367][ T32] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2000.263961][ T4604] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.274247][ T4604] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 12:26:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa}, 0x0, 0x0, 0x4, [{0x81, &(0x7f0000000f80)=@string={0x81, 0x3, "ed911577a2c2e844ff8eeb65f5dd5222189dabdb446caecd94f267f73726e13fb37859cf91d2b286d0ca694cd19ace6a7478790462b61857732865908c400fe17c1fe14f407ae109d608d9d5f9cee60d6b547392b889bd8e1619ad36dc0e98214062edf4a22d64f6d48dda0282f1d247f009881386a7792f2ba3aac6885f22"}}, {0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="0203d13f33e9"]}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x101, 0x0}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000dc0)={0xa, &(0x7f0000000900)={0xa}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000c80)=@lang_id={0x4}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4}}, {0x2, &(0x7f0000000d80)=@string={0x2}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], &(0x7f0000001240)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000680)={0x6, 0x3, 0x0, 0xef9b, "e3aae684ae195b372677eb4e783fc0af22ed5ca5e5e3ac66f421cc44923f3636"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b80000000799d5ceeab479a3ffa6a6f2239a3e458c024a41bf0630000000100"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[@ANYBLOB="120100000000000079004318400001020301090224000101000000090400000003010000092100000001220000090581030000000000f86c13a8b3919dd88fefda451cbdf95f584d610d101c65324ef5d9ccff4d2a4128080f9a49ad"], &(0x7f0000000f00)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x0, 0x4}, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="014f5e77551bdf93457af7d3c85f3c69000f16d00076ca63d0dff2c0d4c610dec0561615e36f1052f9231456228c75c74e4559f4384dc83e62a77fe612c7e609e69a6b8d4304524d9399d2f151caddd67c7d01feaa766b7dbce6d83f1851c16ea394aa2014cc0cd9e8c23659b8b2133ea9980d80611ea36d6d74221be8e93d8294db40706dcacf8fb72e2bf4a0d5b1048ba1461852b118033937474f81a2e33b9895205c16ade65a6c9b46caf8e75555795736a9401b68c87d38cb614767d7b1add22d783783554a56f976a2fb04a0f86d03803f36a6ef0db5286c00"/232], 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000000000006d0418c240000101ed01090224000101000000"], &(0x7f0000001100)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000b00)=@lang_id={0x4}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000a80)=ANY=[@ANYBLOB="12d54c880b30251391bc26f1a9409fbf1ec915436242c8489fac15962f4cdbb1ddb67565da7317c9f5ed4fb9d4bc20f6c478406648b891cb7e416ac9a3459e6ccfcb51c3f49bc9802ba957df9f8a7b11341682d9ffe5a853396344c5c20dbc3e39ae5aec88ce"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa}, 0x0, 0x0, 0x2, [{0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="15032b86db22e4b376461b50890000000000000000b2988499045996b0d5461f5c7b0747245423109d3884ef417c18b29adb5c6f777700000000a10a5c9b3662aac1ff7c680a01f3ef5636191188e7ed47533943ce087c039d31368de75181db6312529eb9b0390cc72c"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 2000.283241][ T4604] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2000.353643][ T4453] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2000.440289][ T8666] usb 3-1: USB disconnect, device number 79 [ 2000.453800][T25498] usb 3-1: Failed to submit usb control message: -71 [ 2000.459635][ T4604] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2000.460550][T25498] usb 3-1: could not get target info (-71) [ 2000.469542][ T4604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.469566][ T4604] usb 5-1: Product: syz [ 2000.475378][T25498] usb 3-1: could not probe fw (-71) [ 2000.493035][ T4604] usb 5-1: Manufacturer: syz [ 2000.497745][ T4604] usb 5-1: SerialNumber: syz [ 2000.544537][ T4604] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2000.551386][ T4604] cdc_ncm 5-1:1.0: bind() failure [ 2000.583645][T30954] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2000.633628][ T7361] usb 1-1: Service connection timeout for: 257 [ 2000.639809][ T7361] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2000.648540][ T7361] ath9k_htc: Failed to initialize the device [ 2000.654869][ T2674] usb 1-1: ath9k_htc: USB layer deinitialized 12:26:37 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x9}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2000.771528][ T4604] usb 5-1: USB disconnect, device number 56 [ 2000.786064][T15107] udc-core: couldn't find an available UDC or it's busy [ 2000.793071][T15107] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:26:37 executing program 2: syz_open_dev$hidraw(0xfffffffffffffffc, 0x9, 0x101b62) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) write$hidraw(r0, &(0x7f0000000000)="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", 0x800000) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x4332, 0x22542) write$hidraw(r1, &(0x7f0000000000)="b8", 0x43) ioctl$HIDIOCGRAWINFO(r1, 0x6628, 0x0) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x22542) read$hidraw(r0, &(0x7f0000000840)=""/233, 0xe9) write$hidraw(r2, &(0x7f0000000000)="b8", 0x1) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000800)) ioctl$HIDIOCGRAWINFO(r2, 0x6628, 0x0) read$hidraw(r1, &(0x7f0000003240)=""/4096, 0x1000) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x22542) write$hidraw(r3, &(0x7f0000000000)="b8", 0x1) ioctl$HIDIOCGRAWINFO(r3, 0x6628, 0x0) read$hidraw(r3, &(0x7f0000001200)=""/4096, 0x1000) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000200)={0x5be, "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"}) [ 2000.983821][ T2618] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2000.993993][ T2618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.002215][ T2618] usb 2-1: Product: syz [ 2001.006584][ T2618] usb 2-1: Manufacturer: syz [ 2001.011180][ T2618] usb 2-1: SerialNumber: syz [ 2001.012960][ T33] audit: type=1804 audit(1626783997.554:3344): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313232332F48C7C060 dev="sda1" ino=13991 res=1 errno=0 [ 2001.015959][ T2674] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2001.046665][ T33] audit: type=1804 audit(1626783997.564:3345): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313232332F48C7C060 dev="sda1" ino=13991 res=1 errno=0 [ 2001.084680][T30954] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2001.087155][ T32] usb 4-1: USB disconnect, device number 86 [ 2001.097808][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2001.116441][ T33] audit: type=1804 audit(1626783997.564:3346): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313232332F48C7C060 dev="sda1" ino=13991 res=1 errno=0 [ 2001.118345][ T2618] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2001.158165][ T33] audit: type=1804 audit(1626783997.704:3347): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313232332F48C7C060 dev="sda1" ino=13991 res=1 errno=0 [ 2001.214612][ T33] audit: type=1804 audit(1626783997.774:3348): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313232332F48C7C060 dev="sda1" ino=13991 res=1 errno=0 [ 2001.223597][ T4604] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2001.245814][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2001.262137][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2001.270203][T30954] usb 6-1: SerialNumber: syz [ 2001.278700][ T33] audit: type=1804 audit(1626783997.834:3349): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313232332F48C7C060 dev="sda1" ino=13991 res=1 errno=0 12:26:37 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0x20}, {}, @rumble={0x2}}) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5c99f0c7, 0x10000) write$hidraw(r1, &(0x7f0000000180)="b2e413c0896377bba499527e4bb049396e1d791bfdc1d0537c93c1c4ee19f31bf1d07d18a2597291f1ad53365553bc3289da11285e0b5e7fb163a57931b58c7e37170bcd8dcc43a275a4323f723dd986f7f2a11d20dbea766528b518af55c1f4f418c0a45b4d0c36366892fc9bd84c1dcb82452ed111525cd891d3ba2e48fe0943cfd9eb0a8fb70f2208ab1cc70000", 0x8f) [ 2001.309626][ T33] audit: type=1804 audit(1626783997.834:3350): pid=15259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313232332F48C7C060 dev="sda1" ino=13991 res=1 errno=0 12:26:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r1, 0x40, 0xc, &(0x7f00000000c0)="d681e3cdf5dbdcaa144fc8bb") syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_open_dev$evdev(&(0x7f0000000100), 0x3f4c, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000380)=@conn_svc_rsp={0x0, 0x0, 0xa, "0fad8069", {0x3, 0x103, 0x0, 0x3, 0xfffd, 0x81, 0x74}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="e8044892d0c5"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="0002"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x40000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, "2706574469be027fb4ca0eb1ad1c741572188014f9433bcb0200000003588050"}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x400, "fe105400"}) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2001.341347][ T33] audit: type=1804 audit(1626783997.844:3351): pid=15260 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D746573746469723733313933383831322F73797A6B616C6C65722E6B6E795737722F313232332F48C7C060 dev="sda1" ino=13991 res=1 errno=0 [ 2001.372893][ T33] audit: type=1800 audit(1626783997.844:3352): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name=48C7C060 dev="sda1" ino=13991 res=0 errno=0 [ 2001.395078][ T33] audit: type=1800 audit(1626783997.854:3353): pid=15253 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=48C7C060 dev="sda1" ino=13991 res=0 errno=0 [ 2001.403864][ T2674] usb 1-1: too many configurations: 210, using maximum allowed: 8 12:26:38 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:38 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0xd, 0x7d, {0x7d, 0xc, "d885905f80f4a20f41bdc5e15f16fd36029a41ab19a29281d6bf22aea7f6490f3a4bedd7d2e9d2f666e563af7e3292a72c493fdad4860facec604cdb3727501e8b3e1cc31fc077df662fc6b19a9dd217ee36ad8114e09e63f807f80eed264fb5e0dc99e8fbedd43f7a69fee6b6117d72dd06774e563a20ac25d96c"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x60, 0xd, 0xfb, "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"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x1, 0x1, 0x8001, 0x80, 0x7, 0x800, 0x6, 0x9, 0x81, 0x6e8}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x89, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902410001010000000904000012020600000b24060000da467439a76905240000000d240f0103f8a0000000000000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2001.606190][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2001.621840][T30954] usb 6-1: USB disconnect, device number 80 [ 2001.623943][ T4604] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.637893][ T4604] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2001.668883][ T4604] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2001.713665][ T8209] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2001.723615][ T2618] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2001.833579][ T4453] usb 4-1: Service connection timeout for: 257 [ 2001.839863][ T4453] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2001.847801][ T4604] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2001.856910][ T4604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.865115][ T4604] usb 5-1: Product: syz [ 2001.869272][ T4604] usb 5-1: Manufacturer: syz [ 2001.873887][ T4604] usb 5-1: SerialNumber: syz [ 2001.878773][ T4453] ath9k_htc: Failed to initialize the device [ 2001.884866][ T32] usb 4-1: ath9k_htc: USB layer deinitialized [ 2001.934383][ T4604] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2001.941203][ T4604] cdc_ncm 5-1:1.0: bind() failure [ 2002.033559][T30954] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2002.033721][ T8209] usb 3-1: too many configurations: 186, using maximum allowed: 8 12:26:38 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0xa}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2002.130800][T15151] udc-core: couldn't find an available UDC or it's busy [ 2002.137947][T15151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2002.151908][ T8666] usb 5-1: USB disconnect, device number 57 [ 2002.243723][ T32] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2002.273602][ T2674] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2002.282688][ T2674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.290947][ T2674] usb 1-1: Product: syz [ 2002.295283][ T2674] usb 1-1: Manufacturer: syz [ 2002.299882][ T2674] usb 1-1: SerialNumber: syz [ 2002.344268][ T2674] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2002.370356][ T4604] usb 2-1: USB disconnect, device number 85 [ 2002.443625][T30954] usb 6-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2002.456754][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2002.543860][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2002.553064][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2002.561142][T30954] usb 6-1: SerialNumber: syz [ 2002.584088][ T8666] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2002.623727][ T32] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2002.713688][ T32] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2002.722772][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2002.731185][ T32] usb 4-1: SerialNumber: syz [ 2002.830164][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2002.839139][T30954] usb 6-1: USB disconnect, device number 81 [ 2002.863805][ T8209] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 12:26:39 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:39 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c02"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) [ 2002.872893][ T8209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.881006][ T8209] usb 3-1: Product: syz [ 2002.885294][ T8209] usb 3-1: Manufacturer: syz [ 2002.889892][ T8209] usb 3-1: SerialNumber: syz [ 2002.933729][ T2674] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2002.943254][ T8209] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2003.003617][ T8666] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.013861][ T8666] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2003.022795][ T8666] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2003.153759][T15216] udc-core: couldn't find an available UDC or it's busy [ 2003.160728][T15216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2003.193654][ T2618] usb 2-1: Service connection timeout for: 257 [ 2003.199874][ T2618] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2003.208176][ T2618] ath9k_htc: Failed to initialize the device [ 2003.214509][ T4604] usb 2-1: ath9k_htc: USB layer deinitialized [ 2003.243767][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2003.253230][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.261286][ T8666] usb 5-1: Product: syz [ 2003.265665][ T8666] usb 5-1: Manufacturer: syz [ 2003.270252][ T8666] usb 5-1: SerialNumber: syz [ 2003.314491][ T8666] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2003.321324][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 2003.353547][T30954] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2003.371664][T15216] udc-core: couldn't find an available UDC or it's busy [ 2003.378927][T15216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2003.389292][T15216] udc-core: couldn't find an available UDC or it's busy [ 2003.396431][T15216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2003.406711][T15216] udc-core: couldn't find an available UDC or it's busy [ 2003.413862][T15216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2003.414829][T15282] udc-core: couldn't find an available UDC or it's busy [ 2003.424423][T15216] udc-core: couldn't find an available UDC or it's busy [ 2003.428434][T15282] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2003.435408][T15216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2003.455697][ T32] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 12:26:40 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0xf}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2003.524433][ T8209] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2003.528676][ T8666] usb 5-1: USB disconnect, device number 58 [ 2003.603581][ T4604] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2003.669170][ T7361] usb 4-1: USB disconnect, device number 87 [ 2003.675730][ T7361] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 2003.688889][ T32] usb 1-1: USB disconnect, device number 7 12:26:40 executing program 2: syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x2342) r0 = syz_open_dev$hidraw(&(0x7f0000000e00), 0x1, 0x480001) write$hidraw(r0, &(0x7f0000000040)="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", 0xd8a) [ 2003.758577][T31041] usb 3-1: USB disconnect, device number 80 [ 2003.764724][T30954] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2003.777999][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2003.863633][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2003.872694][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2003.880744][T30954] usb 6-1: SerialNumber: syz [ 2003.883644][ T4604] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 2004.003565][ T8666] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2004.149865][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2004.159549][T30954] usb 6-1: USB disconnect, device number 82 [ 2004.188026][T15407] udc-core: couldn't find an available UDC or it's busy 12:26:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x8, 0x1c, 0x0, 0xf9e, "08ec4c2651ce404723a235d036a85d121b917100"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x0, 0x791, &(0x7f00000007c0)="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"}) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e20000000000000000000000000faffffff00"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESHEX=r1, @ANYRES64]) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1c00a619dbb7a4001a1c0c03c3f1cd7e3c440d8da9fb366cc06042bc45777156fed0892c5b00bd648aebf599d7eaded07c980fc19a76bb95dfdf389cf47a7f958c1786247ae7adce1cfc78ebc83e0d5668aaa003bee2c46fc5c615e63094ab2ca08f52cff32f17ac2907a25b1a95529867720aa2d044357e0ea5a983a889fcdff0bb41a77f69eab3044269e05cacd34760a084baeb991dc6b6d1c5e18d08e252d4716be13aa8052b6e8da822e9610ca16c95b9d7d40175266c4e2684b4f6"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc1, &(0x7f0000000580)=ANY=[@ANYBLOB="020200b93bbf8b3d0f3a0f4d10ffa3e66ce1c7d5d7d0bbbbfc9bb797a5abbefd0ef767469210497afc952e4402f99a460f197a2373cc4fb5339287a0493adb1ac4f8"]) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e398b, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x31, &(0x7f0000000340)=ANY=[@ANYBLOB="050065c1960bdd9fc21eaa3cfef070a337ce2d06777e6045e30023d52978cf2a81e72d8178ed0ef9464c39b519641b6f1701719238fbefb4e8ad81e274e9221b9143990992fba908d403994e2f784644c9b2a3b55663256772d59aa2236601e09306781baaf4945fb67b16c5d19396"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000280)=@ready={0x0, 0x0, 0x8, "98c841fa", {0x1, 0x1, 0x1, 0x64, 0x8}}) syz_usb_control_io(r2, &(0x7f0000001000)={0x2c, &(0x7f0000000600)={0x20, 0x10, 0xd5, {0xd5, 0x55, "a33c761d498014a4db292d7f23545493f3fb9df73b31a6359af37b4899001b74bc47af8a217cc3cc72b897355b78355cdf53acf042f616ed326b78237bac23d39720cd05ca54f62e26b704d93ee4fdf84c7458fdf4922347e2a58d992e8618a9ed44934799cf1455b233abeb3928448a23643d7bbf9a52d757a33043f562d1cd82a0a6b85f19f653a3178b5d470e984e8ce14ad9d6da36be08ef05be6a1b942aa760972e492a568c73b03a49f191c67a9152e0a84cecad1869ca54ac0f8eeec3d9dae497b34a2287184a0cd220acd03a77ad3a"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f0000000300)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x10, 0x8, 0x40, "bf3db16b", "128c6d29"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0x81, 0x1, 0xff7c, 0x400}}}, &(0x7f0000001440)={0x84, &(0x7f0000001040)={0x0, 0xf, 0x2, 'X{'}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0xf8}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f0000001140)={0x20, 0x0, 0x8, {0x80, 0x2, [0xf000]}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000001200)={0x40, 0xb, 0x2, "d5c3"}, &(0x7f0000001240)={0x40, 0xf, 0x2}, &(0x7f0000001280)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000012c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001300)={0x40, 0x19, 0x2, "e64c"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0xb2a3}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:26:40 executing program 2: syz_open_dev$evdev(&(0x7f0000000600), 0x5, 0x0) syz_open_dev$hiddev(&(0x7f0000001200), 0x0, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3e8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000380)=0x3) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xff95, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "7a3f00bd"}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x20000000000, 0x10d901) write$hidraw(r2, &(0x7f0000001180)='=', 0x3b000) 12:26:40 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:40 executing program 3: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0xd, 0x7d, {0x7d, 0xc, "d885905f80f4a20f41bdc5e15f16fd36029a41ab19a29281d6bf22aea7f6490f3a4bedd7d2e9d2f666e563af7e3292a72c493fdad4860facec604cdb3727501e8b3e1cc31fc077df662fc6b19a9dd217ee36ad8114e09e63f807f80eed264fb5e0dc99e8fbedd43f7a69fee6b6117d72dd06774e563a20ac25d96c"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x60, 0xd, 0xfb, "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"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x1, 0x1, 0x8001, 0x80, 0x7, 0x800, 0x6, 0x9, 0x81, 0x6e8}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000004c0)={0x20, 0x83, 0x2}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x89, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) r1 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902410001010000000904000012020600000b24060000da467439a76905240000000d240f0103f8a0000000000000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 2004.195046][T15407] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2004.403591][ T8666] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.413740][ T8666] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2004.422720][ T8666] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2004.553542][ T8209] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2004.560481][ T2674] usb 1-1: Service connection timeout for: 257 [ 2004.566740][ T2674] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2004.574665][ T8209] ath9k_htc: Failed to initialize the device [ 2004.580777][T31041] usb 3-1: ath9k_htc: USB layer deinitialized [ 2004.580926][ T2674] ath9k_htc: Failed to initialize the device [ 2004.596284][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 2004.605356][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2004.614562][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.622568][ T8666] usb 5-1: Product: syz [ 2004.626786][ T8666] usb 5-1: Manufacturer: syz [ 2004.631385][ T8666] usb 5-1: SerialNumber: syz [ 2004.636156][T30954] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2004.694345][ T8666] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2004.701160][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 2004.723547][ T7361] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2004.743704][ T4604] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2004.752781][ T4604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.760839][ T4604] usb 2-1: Product: syz [ 2004.765039][ T4604] usb 2-1: Manufacturer: syz [ 2004.769627][ T4604] usb 2-1: SerialNumber: syz [ 2004.816175][ T4604] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:26:41 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2004.901891][ T8666] usb 5-1: USB disconnect, device number 59 [ 2004.963848][T31041] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2004.973744][ T32] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2005.073620][T30954] usb 6-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2005.086750][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2005.133688][ T7361] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2005.183681][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2005.192739][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2005.200829][T30954] usb 6-1: SerialNumber: syz [ 2005.243724][ T7361] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2005.252784][ T7361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2005.260885][ T7361] usb 4-1: SerialNumber: syz [ 2005.273913][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 2005.353583][ T8666] usb 5-1: new high-speed USB device number 60 using dummy_hcd 12:26:42 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2005.453781][ T4604] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2005.466699][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2005.477250][T30954] usb 6-1: USB disconnect, device number 83 [ 2005.553634][T31041] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2005.562689][T31041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.570805][T31041] usb 3-1: Product: syz [ 2005.575066][T31041] usb 3-1: Manufacturer: syz [ 2005.579692][T31041] usb 3-1: SerialNumber: syz [ 2005.626039][T31041] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2005.733655][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2005.833634][T30954] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2005.857238][T15338] udc-core: couldn't find an available UDC or it's busy [ 2005.864211][T15338] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2005.903773][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2005.912866][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.920940][ T8666] usb 5-1: Product: syz [ 2005.925195][ T8666] usb 5-1: Manufacturer: syz [ 2005.929776][ T8666] usb 5-1: SerialNumber: syz [ 2005.954451][T15422] udc-core: couldn't find an available UDC or it's busy [ 2005.961396][T15422] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2005.974993][ T7361] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 2006.080623][ T8209] usb 2-1: USB disconnect, device number 86 12:26:42 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x2}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2006.194674][T30954] usb 6-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2006.207877][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2006.219964][ T2618] usb 4-1: USB disconnect, device number 88 [ 2006.226439][T31041] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2006.228604][ T2618] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 2006.235609][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 2006.253866][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2006.263032][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.263420][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2006.271054][ T32] usb 1-1: Product: syz [ 2006.271072][ T32] usb 1-1: Manufacturer: syz [ 2006.271088][ T32] usb 1-1: SerialNumber: syz [ 2006.291497][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 2006.299968][ T8666] usb 5-1: USB disconnect, device number 60 [ 2006.334301][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2006.373831][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2006.383290][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2006.391518][T30954] usb 6-1: SerialNumber: syz 12:26:43 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:26:43 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2006.639957][ T2618] usb 3-1: USB disconnect, device number 81 [ 2006.659867][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2006.666585][ T8666] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2006.683579][T30954] usb 6-1: USB disconnect, device number 84 12:26:43 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2006.963568][ T4604] usb 2-1: Service connection timeout for: 257 [ 2006.969755][ T4604] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2006.980584][ T4604] ath9k_htc: Failed to initialize the device [ 2006.987128][ T8209] usb 2-1: ath9k_htc: USB layer deinitialized [ 2007.023558][ T7361] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2007.033921][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.034579][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2007.093570][T30954] usb 6-1: new high-speed USB device number 85 using dummy_hcd 12:26:43 executing program 0: syz_usb_connect(0x0, 0x59, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000078836f4000215f9e2c30010203010902470001000000000904000002f6d0a000052406000105240000000d240f01000009000000fcff0006241a000000042402000905000080000000000200090500000000000000"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x6, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ec00230f38"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x1000, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0xa}, [@country_functional={0x6, 0x24, 0x7, 0x80, 0xc8}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x4, 0x7efb}, @acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x7, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x7, 0x20}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x1, 0x3, 0xf8, 0x20, 0x6}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x9, 0x8001}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x6, 0xff}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x7fffffa, 0xf00, 0x70, [0x30, 0x0, 0x0, 0xc0cf]}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43d}}]}) [ 2007.203671][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2007.212763][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.220871][ T8666] usb 5-1: Product: syz [ 2007.225095][ T8666] usb 5-1: Manufacturer: syz [ 2007.229698][ T8666] usb 5-1: SerialNumber: syz [ 2007.236142][ T7347] usb 1-1: USB disconnect, device number 8 [ 2007.383551][ T8209] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2007.403649][ T7361] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 12:26:44 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x3}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2007.473901][T30954] usb 6-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2007.487045][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2007.513596][T31041] usb 3-1: Service connection timeout for: 256 [ 2007.519787][T31041] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2007.531275][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 2007.544221][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2007.551071][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 2007.564085][T31041] ath9k_htc: Failed to initialize the device [ 2007.570131][ T2618] usb 3-1: ath9k_htc: USB layer deinitialized [ 2007.572515][ T8666] usb 5-1: USB disconnect, device number 61 [ 2007.582255][ T7361] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2007.591371][ T7361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.599504][ T7361] usb 4-1: Product: syz [ 2007.603709][ T7361] usb 4-1: Manufacturer: syz [ 2007.608311][ T7361] usb 4-1: SerialNumber: syz [ 2007.612943][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2007.622037][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2007.630174][T30954] usb 6-1: SerialNumber: syz [ 2007.694075][ T8209] usb 2-1: too many configurations: 38, using maximum allowed: 8 12:26:44 executing program 2: syz_open_dev$evdev(&(0x7f0000000600), 0x5, 0x0) syz_open_dev$hiddev(&(0x7f0000001200), 0x0, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000040)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3e8, &(0x7f0000000840)=ANY=[@ANYBLOB="7600004eae392180a6d27a4d1ed65aae570fd56f651296ad9395860b281151e3186b3f709d3e666807d22ae0ddc1d380d98ba84aaf7cbac4e4d3f70000000000000005a004f8049596dda2ac557e4fe11cf34840936991dd57f0a6c20b4fcf9376d7a1f0bd46b481cf0ef226ac81cdc8c411ca87e455a8c96ca44747978d046d634db16300003800004ecddbadd8989153fa6bb9bc99c2971cdbe7e37da00f3dff7d7197776b19079040bbf91dd12ac6325d8e9b847ce47e4e9ee57fa0cb8b4b4876a9f6eec08584b1ac2ebb245fad52707d3e87974a8c951cab8cc71f1c63dd79d488a76434ce3f729bbc3071926f9925385f1b5f1c832fb7d8f13a27a8516d52121199f90ee63dee57070efbddc1b668875589f364b9ed52c74184e334dc739caf0b765b5c307e6bf6b55f69916ddc5a2daf3ade68fcc9b790a2b79b2a5014a039b839ef11b6fdb4b4f23470ea9a6c45ac9c0eb2be97fa63b10761f7418610a5464c015519b40c77f9edf55b4e8502e4a77fd204a886e1008600004e4ef522696a826787571e2b7b23217201929167e56ef561b3946e70e77779360b4a0a8f34e613ac6c4c77070199809e55c7d9c8fb3cb46cb453fd2d6fb9ccd05166030e5614b1800a1240393f57535bf0907dc229f70a4c8e5f81e09a99eff1464e1a4a7f615cbf9ec5881adf0cf0ab0f63c793b2e7271bd97e09772eea739f0000a300004e3f388d727c7add152a601025bd015368296724b2772eae37d0c99a711e8dece64cda57178e130946e3122b908693ccd805acb6be80d273276c3dd805eff601025c7b83be70c0518df2f3bcfde24beef94a1ecf0e6bc360c95c28ce6c1c2f3ed26be535ae5f5c6a539e5cd6c47ec6a2258c5e929ab5e3099d20a4eb95e7c6c6cd0bb6329560e9048b3f5540c3003600004e599529548b9df9c5c4019d130f8257d02df675f7b7970eafbd837aa779a9ae3c8291e21ceee864fede1e255259d7c744c4b6a9a1f3710000f600004ed2b85a3aedacf429675f095bd3e73eaed26ee65d5749fdd3f43624de8faa1fc7e9c9e18d8dc60f76c2a05663885b9ec59a32adba8e14efb73c18c295ca2b9b710578ec5f1827a93728dbdcf3f42848c38f0b2a6ee425e3acaabe960d02a2f6aa52d9345e22b4a1b29907fa087681659a2f95da9e1d8d438044cbe5f6248b9cf582c66ba63198989db8b330dc68f9f1f43af33bbea27feb15bf975d683b11b9b8fc0b75cafab80743eabc5884f6efff760f11"]) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000380)=0x3) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xff95, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "7a3f00bd"}) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x20000000000, 0x10d901) write$hidraw(r2, &(0x7f0000001180)='=', 0x3b000) 12:26:44 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:44 executing program 3: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2007.894028][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2007.924349][T30954] usb 6-1: USB disconnect, device number 85 [ 2007.936763][ T7361] cdc_ncm 4-1:1.0: bind() failure [ 2007.954886][ T7361] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2007.961905][ T7361] cdc_ncm 4-1:1.1: bind() failure [ 2007.983523][ T8666] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2007.991986][ T7361] usb 4-1: USB disconnect, device number 89 [ 2008.089460][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2008.096462][ T32] ath9k_htc: Failed to initialize the device [ 2008.102754][ T7347] usb 1-1: ath9k_htc: USB layer deinitialized [ 2008.183561][ T2618] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2008.323574][T30954] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2008.343769][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.354716][ T7361] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2008.463572][ T7347] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2008.523735][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2008.532814][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.540869][ T8666] usb 5-1: Product: syz [ 2008.545073][ T8666] usb 5-1: Manufacturer: syz [ 2008.549659][ T8666] usb 5-1: SerialNumber: syz [ 2008.563753][ T8209] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2008.572858][ T8209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.581055][ T8209] usb 2-1: Product: syz [ 2008.585295][ T8209] usb 2-1: Manufacturer: syz [ 2008.589890][ T8209] usb 2-1: SerialNumber: syz [ 2008.634336][ T8209] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2008.723626][T30954] usb 6-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2008.736740][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2008.753639][ T7361] usb 4-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 18 12:26:45 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x4}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2008.753747][ T2618] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2008.766816][ T7361] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2008.782600][ T2618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.790615][ T2618] usb 3-1: Product: syz [ 2008.794808][ T2618] usb 3-1: Manufacturer: syz [ 2008.799413][ T2618] usb 3-1: SerialNumber: syz [ 2008.834449][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2008.843622][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2008.844139][ T2618] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2008.851609][T30954] usb 6-1: SerialNumber: syz [ 2008.864422][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 2008.869584][ T7347] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2008.880198][ T7347] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2008.890724][ T7361] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2008.899808][ T7361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2008.907837][ T7361] usb 4-1: SerialNumber: syz [ 2008.914335][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2008.921137][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 2008.938663][ T8666] usb 5-1: USB disconnect, device number 62 [ 2009.123640][ T7347] usb 1-1: New USB device found, idVendor=2100, idProduct=9e5f, bcdDevice=30.2c [ 2009.132829][ T7347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.140878][ T7347] usb 1-1: Product: syz [ 2009.145094][ T7347] usb 1-1: Manufacturer: syz [ 2009.149677][ T7347] usb 1-1: SerialNumber: syz [ 2009.157810][ T7347] usb 1-1: config 0 descriptor?? 12:26:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x104, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_usb_connect(0x3, 0x44e, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x14, 0x70, 0x39, 0x10, 0x2013, 0x461, 0xc5d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43c, 0x3, 0x20, 0x8, 0xc0, 0x7f, [{{0x9, 0x4, 0x89, 0xbe, 0xa, 0x10, 0xb4, 0xf2, 0x7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x8, 0x1f, 0x1001}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x2, 0x20, 0x3, '?'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x8, 0x6, 'g', '9l'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x4, 0x9, 0x7, "5ad9e4c62781918914"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x20, 0x1, 0x7, 0x0, "c9feab"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x0, 0x3f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0xdf9df6c67714f1ab, 0xff, 0x6d, 0x69, [@generic={0x1b, 0x4, "a4d61a41010618d52d81bd2cd3fada3b9e0d3493c803934e39"}, @generic={0xc, 0x30, "1c005be2ddc791159b9d"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x7, 0xd4, 0x9c}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x8, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x13}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xaa, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb2, 0x863c}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x1, 0x9, 0xd7}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x11, 0xff, 0x3, [@generic={0x4c, 0xb, "c66b5d15066e16fabdb359707e111093020cbb11bd16625e026499e016ef78a220b9b6ec29b9f0cba09b15b018e09f8793078ded50bdf6405a7dc9f277c33f5978ba76e8d3a95808fc6d"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x3, 0x9, 0x9}}, {{0x9, 0x5, 0x87, 0x8, 0x10, 0xff, 0x81, 0x1, [@generic={0xf1, 0xc, "fec67710177a795068b5fceeaea35d61853449d8cbb4b4cf1bf5dbf46281b508bf25af691d4d8243b4554b8201189fb14ce3f29b8c8f5d3b24ce9fa75fa56eb0fd14c3ef509ad1dafaef8fb228af44203548baaf4d07d618165d5cb11c5ed25a36a03dda0eaa2cfe783d1dadfcbbabda7d4e824e975ef8cc48582fcf42bab1f0dc81685d6c241faf211007e9663d138f1b45eeab50da672b7f04184671e5bc4078450f4e5c5ab7fbcc99bb7613674878e03782d318e530980bf47ddc1487fa77a2bbce8493a709a1bcc4ee18b0f46359c6331113afb3b332a99baf142116ff3170a17fe89ea3f29337444fa064fd4c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0x9d, 0x4, 0x4, 0xc5, 0x72, 0x19, 0xce, [], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x8, 0x1, 0x1}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x84, 0xa9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x200}, @generic={0xc6, 0x6, "f1c175de0586db9294e0eac9f7d7772660d9e4b84e1a2ddf0f16e46053bc6fb5d3dd6a5c91794514b103c1385d486226074539e415a27fe40f7d11d2c94246007a20cdd4811abcb07417dc956f15144d944899135235dacdec5b2a914a883ab8a2ab18e3d6336b8b3aa3326bb7fdc311f7021e290082ff77b80c73ef53d49ac31cf0fe80e2a90009c919f1aedc545a7dd6b65763fc0acf8fb874e9288a9e107c0950fde89b5a8db8ef2955d79a010365b847d4f28d76cce8c962384e5c9d0b3b11c55e2a"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x1, 0x3f, 0x3f}}, {{0x9, 0x5, 0xc, 0x1, 0x3af, 0x5, 0x7, 0xfc, [@generic={0xb4, 0x31, "502706b5cafbc8dc9b9a17ffad8f3cbe3595d4aded8816b053be6efde96d2e10fa17594c25209200850fcfbb402f6f60740827d05470c091e66e3eed61f5218a28b73abf2d4ccbba0688e54a7d3fcd9961df8537f11a45316a78eea43f35853c678ef73e7ce36b712505839d2e5c1cec80fb3e877d771a74dbf782fade3c80e0de1630d70c5ad0fc2a045e90088c2772656b841209000059f3d1c72e91a3b34da09e4d98a7e02d64a0f91de1068fc0a2eedd"}]}}]}}, {{0x9, 0x4, 0x96, 0x1, 0x0, 0xf2, 0x53, 0xb6, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x964}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x7, 0x2, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x8, 0x9d, [0x9, 0x7, 0x0, 0x9, 0xb619, 0x5]}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x81, [0xff, 0x9f20]}, @dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x5}]}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x51, 0x3, 0x3, 0xff, 0x20, 0x2}, 0x73, &(0x7f0000000300)={0x5, 0xf, 0x73, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x8, 0xf, 0x1, [0xffc000, 0x0, 0x0, 0xff00c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x40, 0xff, 0xfff, 0x10}, @ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x3, 0x0, 0x7, [0xc00f, 0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0xe8, "ddc6ae8c711228908558be651486808e"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "011a49a6492a03306e218ad0eaafe533"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x6, 0x28, 0x6, 0xc7}]}, 0x6, [{0xad, &(0x7f0000000480)=@string={0xad, 0x3, "be70e307121b9fc8509bfd0decad9c4f47265de73a2db184e800bc1ecc88230d07f2442d5ce52e6c3c793e8e163496165ef867f22e2d1edb9a84929bbe1be38505ef205e39523b783678e497b1aa3636a00bf093792527c6a2d9e299376c71b65a29b64e9d8f53a96553f5263d0fea12da0a76ddaf2072ec1cd3fac3533bbadecae1a6c87fc4a507af89482a61f34c0813525b1bea842239cde91a90ea8442cc9756d76d15818bb7a0e5a2"}}, {0x52, &(0x7f0000000c40)=@string={0x52, 0x3, "c10b96fcf19f32e4ca14598a93c0f82ba102b18d502b90045f00a6c15164f0cd96eb6d25b80fe95eac386f3581454aa69c16bcc1be3ba00c788c1b8a90c649454fc6cdb0a69b4d76281084a13bbd863b"}}, {0xad, &(0x7f0000000cc0)=@string={0xad, 0x3, "bdebdf5dc5c5c0ef1be38b681741f4d11194b5611664846bde085aee9f81ab3dc0d030f8e57115cee5b28f52add3468670ad43dd7589f381a00899a2a0542c6548ca3ae9c9af85ee75b24cb4420573206609bf7696d55575cb5b88e69abe0794aa50b884d7373cab4a5b0aae6266097d84bcfd2cb33aba5bde65bca878c8e26aa44cb990569cf51cb0896f3ffcce2e49f17237a1c9fc25c737b4d2c1b4b13b1146af0d7727ea00c5395074"}}, {0xa2, &(0x7f0000000d80)=@string={0xa2, 0x3, "98e05b0f97c6954b17b3cef522429cfb02c383e4b02a15659375a8fa5d27a5352dd6bcbd82d5719bf40bbe16a8d5f2eeff0a0b4aab7f412aad3e53e4624b10e8d6e268cdbe822feaa9ab1c4c05b3bb82de55e5d8f5938f687a4b640237edc7c5974e71371c2ad94670a9b4047dfd3fe5ce5c95cfaabcaeae6f0e767c796f6b5a23f46a9cdaa4287f99f55957fa7fec49f66945f8c83716c6f523e89fec8b93e4"}}, {0xbe, &(0x7f0000000e40)=@string={0xbe, 0x3, "8a9f77237d70bd984a188ec02f595a74a4c103111aa3ae4381f835462e38b840f603c5cf5863fdf390c3efabf1f8776b4250eef2f4c3b5106af60f887fe63e23f15b11ff368f5e5f5a08818469a8b08660aed0fe6d54ddb1482a61390d51e759c0226d36f0aa9ef9b7ad8aa24246af05bd03a536298dd86bfff2bd6defe056df747e502072408aa126a66adb34854605ad3765e8fd1e1071c4c0771138d7f4653b6ac56d79d5aabbd06191748e824e700b0703ecaf6d27e201a45ab5"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x419}}]}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000380)=@ready={0x0, 0x0, 0x8, "c43ef355", {0x1, 0x40, 0xca, 0x1, 0x1}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "548623bb", {0x3, 0x0, 0x0, 0x1f, 0x0, 0x81}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00004e99023213e2b4c922525456fa711148000b00004e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2623936c0f4ad0d6cdc66f992d710c356124c896ab4285afaea5b4fb5659d6c881317d2ee864fb38a0f5b2b998c075a028521d2e5f3f422bd63b4b52a1576f1fb7ea8ffb22233868459f3c33551130f034b8ebad1ba86ab27f74b96e4b6111ebc4bb2dd94b3cb658a487f581b5bdad611555bab0fc66d744d2f5413f35835a06a365"]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000005c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "2f27cc7e", {0x3, 0x0, 0x0, 0x8}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x51, &(0x7f0000000280)=ANY=[@ANYBLOB="08120049a959cb33679bc940afc70e85d2f97655dd46127c6ce710ae4b0818f5149dac4d75fad4c0dea8b0a0043707b0e294273ba2334781dd941003cf5801bffc"]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:26:45 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x18, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2009.198927][ T7347] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 2009.206647][ T7361] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 2009.240238][ T7361] usb 4-1: USB disconnect, device number 90 [ 2009.244028][ T8209] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2009.246416][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2009.274803][ T7347] usb 1-1: Detected FT-X [ 2009.282063][T30954] usb 6-1: USB disconnect, device number 86 [ 2009.323649][ T8666] usb 5-1: new high-speed USB device number 63 using dummy_hcd 12:26:45 executing program 0: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000000c0)=""/159) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x93, &(0x7f00000001c0)="cf64ea85fb9d3eea654be8dc5d07e4e12115a4b21de20d5dc734bafc064afb980aed55bd41ca3a5d85283e5146db51c2495dde6a0c2c14ebe11f8290117366237ee60a3a158e64d30fe0ac1db277159ac88753e4ff34f388e841c1eb08f7b4598ea6f67b65dc0f47c08df450b996e2a9f148d80a4ac5c10a192cd63ae760118bd501c9254d0ff7c237f640ff94c876e3b413b7"}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e77e3040b113420098540102030109021200010000000009040000447b4a7900"], 0x0) syz_open_dev$evdev(0x0, 0x80, 0x0) [ 2009.413659][ T7347] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2009.423679][ T2618] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2009.443690][ T7347] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2009.473675][ T7347] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 2009.480965][ T7347] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2009.491692][ T7347] usb 1-1: USB disconnect, device number 9 [ 2009.500560][ T7347] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2009.512069][ T7347] ftdi_sio 1-1:0.0: device disconnected [ 2009.655483][T15530] udc-core: couldn't find an available UDC or it's busy [ 2009.662458][T15530] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2009.670196][ T7361] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2009.693776][T30954] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2009.713923][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2009.858570][ T4604] usb 3-1: USB disconnect, device number 82 [ 2009.886018][ T2674] usb 2-1: USB disconnect, device number 87 [ 2009.893610][ T7347] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2009.953777][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2009.962951][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.971107][ T8666] usb 5-1: Product: syz [ 2009.975309][ T8666] usb 5-1: Manufacturer: syz [ 2009.979905][ T8666] usb 5-1: SerialNumber: syz [ 2010.033839][ T7361] usb 4-1: too many configurations: 38, using maximum allowed: 8 [ 2010.123646][T30954] usb 6-1: config 1 interface 0 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2010.136761][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2010.254099][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2010.263195][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2010.271221][T30954] usb 6-1: SerialNumber: syz [ 2010.276233][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 2010.285400][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2010.292227][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 2010.306776][ T8666] usb 5-1: USB disconnect, device number 63 [ 2010.334182][ T7347] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 68, using maximum allowed: 30 [ 2010.344927][ T7347] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 68 12:26:46 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000600)={0x16, 0x0, 0x0}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x26, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00Z\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00003213e2b4c922525456fa711148000b0000ca4e0e4950e5c4c4661ba33e66000100004e7c0000000000004e900fb90d268ff3bfbc245549b078667aab6b2600000037c68fd5356c8f02e12005f08e7b8a04165e8995d294f19d7104000000ee7574efa5fb596df3eb3274ba3b65ea3ad20a3793207b4f134cf44c9d67d068d00c5c20e57b21607e0440dcd32abbab4a8475621ec091a6eca52980da1906fe393217d100d2e6f3a1b231456b96ac2506f017bb0373914b7dc5e2866c026b0b"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "71e338df", {0x3, 0x2}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, "ded73aef2a161d3db6e08cb7c003d1570348159544a668c6afdd9953c1bbc174"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 12:26:46 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 12:26:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa}, 0x0, 0x0, 0x4, [{0x81, &(0x7f0000000f80)=@string={0x81, 0x3, "ed911577a2c2e844ff8eeb65f5dd5222189dabdb446caecd94f267f73726e13fb37859cf91d2b286d0ca694cd19ace6a7478790462b61857732865908c400fe17c1fe14f407ae109d608d9d5f9cee60d6b547392b889bd8e1619ad36dc0e98214062edf4a22d64f6d48dda0282f1d247f009881386a7792f2ba3aac6885f22"}}, {0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="0303d13f92d41777ea62b17b33e9"]}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x101, 0x0}]}) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000dc0)={0xa, &(0x7f0000000900)={0xa}, 0x5, &(0x7f0000000940)={0x5, 0xf, 0x5}, 0x3, [{0x6f, &(0x7f0000000680)=@string={0x6f, 0x3, "07930e17863d20e7d801957fcbda139c7c1642f1b0953f5ed7b0b303e26e9f76320649e3669dfbc5888c33aaff8322efa79f43373a4df338d59c5c6a167401d94f7d6ea0dd633031f038f59989a7dda20cfbc6455d17edce2d067133005106bea246ca077057c2bc63ffea494d"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4}}, {0x2, &(0x7f0000000d80)=@string={0x2}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], &(0x7f0000001240)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b80000000799d5ceeab479a3ffa6a6f2239a3e458c024a41bf0630000000100"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x0, 0x4}, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="01"], 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f00000007c0)={0xa}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000b00)=@lang_id={0x4}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa}, 0x0, 0x0, 0x2, [{0x15, &(0x7f00000003c0)=@string={0x15, 0x3, "2b86b1c1ea1e703aecd2db22e4b376461b3689"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 12:26:47 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1d, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2010.533647][ T7347] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=54.98 [ 2010.542763][ T7347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.550798][ T7347] usb 1-1: Product: syz [ 2010.555114][ T7347] usb 1-1: Manufacturer: syz [ 2010.559725][ T7347] usb 1-1: SerialNumber: syz [ 2010.568462][ T7347] usb 1-1: config 0 descriptor?? [ 2010.575825][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2010.585734][T30954] usb 6-1: USB disconnect, device number 87 [ 2010.636650][ T7347] ath10k_warn: 2 callbacks suppressed [ 2010.636673][ T7347] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2010.713569][ T8209] usb 2-1: Service connection timeout for: 257 [ 2010.719770][ T8209] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2010.728023][ T2618] usb 3-1: Service connection timeout for: 256 [ 2010.734239][ T2618] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2010.742197][ T2618] ath9k_htc: Failed to initialize the device [ 2010.748245][ T4604] usb 3-1: ath9k_htc: USB layer deinitialized [ 2010.754507][ T8209] ath9k_htc: Failed to initialize the device [ 2010.760559][ T2674] usb 2-1: ath9k_htc: USB layer deinitialized [ 2010.836524][ T7347] usb 1-1: USB disconnect, device number 10 [ 2010.853657][T10123] usb 1-1: Failed to submit usb control message: -71 [ 2010.860485][T10123] usb 1-1: unable to send the bmi data to the device: -71 [ 2010.867738][T10123] usb 1-1: unable to get target info from device [ 2010.874126][T10123] usb 1-1: could not get target info (-71) [ 2010.879998][T10123] usb 1-1: could not probe fw (-71) [ 2010.883583][ T8666] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2010.983747][ T7361] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2010.992820][ T7361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.001070][ T7361] usb 4-1: Product: syz [ 2011.005276][ T7361] usb 4-1: Manufacturer: syz [ 2011.009871][ T7361] usb 4-1: SerialNumber: syz [ 2011.054099][ T7361] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2011.093760][T30954] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2011.133584][ T2674] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2011.141673][ T4604] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2011.313620][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.423869][ T2674] usb 2-1: too many configurations: 38, using maximum allowed: 8 [ 2011.431737][ T4604] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 2011.523641][T30954] usb 6-1: config 1 interface 0 altsetting 29 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2011.536735][T30954] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2011.543395][ T8666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2011.552553][ T8666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.560880][ T8666] usb 5-1: Product: syz [ 2011.565083][ T8666] usb 5-1: Manufacturer: syz [ 2011.569692][ T8666] usb 5-1: SerialNumber: syz [ 2011.603580][ T32] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2011.663785][T30954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2011.672894][T30954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2011.680918][T30954] usb 6-1: SerialNumber: syz [ 2011.743694][ T7361] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 12:26:48 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x6}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2011.883978][ T8666] cdc_ncm 5-1:1.0: bind() failure [ 2011.890882][ T8666] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2011.897810][ T8666] cdc_ncm 5-1:1.1: bind() failure [ 2011.906236][ T8666] usb 5-1: USB disconnect, device number 64 12:26:48 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x3, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') [ 2011.944053][T30954] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 2011.963327][T30954] usb 6-1: USB disconnect, device number 88 [ 2011.963808][ T32] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 68, using maximum allowed: 30 [ 2011.981720][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 2012.149220][T15677] udc-core: couldn't find an available UDC or it's busy [ 2012.156419][T15677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2012.163948][ T32] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=54.98 [ 2012.168310][T15677] udc-core: couldn't find an available UDC or it's busy [ 2012.173004][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.173035][ T32] usb 1-1: Product: syz [ 2012.180075][T15677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2012.188188][ T32] usb 1-1: Manufacturer: syz [ 2012.197390][T15677] udc-core: couldn't find an available UDC or it's busy [ 2012.199782][ T32] usb 1-1: SerialNumber: syz [ 2012.204505][T15677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2012.216890][ T32] usb 1-1: config 0 descriptor?? [ 2012.233547][ C0] usb 4-1: ath: unknown panic pattern! [ 2012.265844][ T32] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2012.283866][ T8666] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2012.286004][ T4604] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2012.300647][ T4604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.308811][ T4604] usb 3-1: Product: syz [ 2012.312971][ T4604] usb 3-1: Manufacturer: syz [ 2012.317699][ T4604] usb 3-1: SerialNumber: syz [ 2012.322358][ T2674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2012.331676][ T2674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.339857][ T2674] usb 2-1: Product: syz [ 2012.344035][ T2674] usb 2-1: Manufacturer: syz [ 2012.348638][ T2674] usb 2-1: SerialNumber: syz [ 2012.383655][T30954] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2012.394507][ T4604] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2012.407343][ T2674] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 12:26:49 executing program 0: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000000c0)=""/159) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x16, 0x93, &(0x7f00000001c0)="cf64ea85fb9d3eea654be8dc5d07e4e12115a4b21de20d5dc734bafc064afb980aed55bd41ca3a5d85283e5146db51c2495dde6a0c2c14ebe11f8290117366237ee60a3a158e64d30fe0ac1db277159ac88753e4ff34f388e841c1eb08f7b4598ea6f67b65dc0f47c08df450b996e2a9f148d80a4ac5c10a192cd63ae760118bd501c9254d0ff7c237f640ff94c876e3b413b7"}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e77e3040b113420098540102030109021200010000000009040000447b4a7900"], 0x0) syz_open_dev$evdev(0x0, 0x80, 0x0) [ 2012.432181][ T8209] usb 1-1: USB disconnect, device number 11 [ 2012.438325][ T4350] usb 1-1: Failed to submit usb control message: -71 [ 2012.445190][ T4350] usb 1-1: unable to send the bmi data to the device: -71 [ 2012.452313][ T4350] usb 1-1: unable to get target info from device [ 2012.458786][ T4350] usb 1-1: could not get target info (-71) [ 2012.464691][ T4350] usb 1-1: could not probe fw (-71) [ 2012.653620][ T8666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2012.664963][T15677] udc-core: couldn't find an available UDC or it's busy [ 2012.671922][T15677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2012.693966][ C0] BUG: unable to handle page fault for address: ffffffffffffffc8 [ 2012.701708][ C0] #PF: supervisor read access in kernel mode [ 2012.707669][ C0] #PF: error_code(0x0000) - not-present page [ 2012.713634][ C0] PGD 7426067 P4D 7426067 PUD 7428067 PMD 0 [ 2012.719679][ C0] Oops: 0000 [#1] SMP KASAN [ 2012.724162][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W 5.14.0-rc1-syzkaller #0 [ 2012.733510][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2012.743558][ C0] RIP: 0010:ath9k_htc_rxep+0xb5/0x210 [ 2012.748922][ C0] Code: 8b 43 38 48 8d 58 c8 49 39 c4 0f 84 ee 00 00 00 e8 f0 64 37 fe 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 74 06 0f 8e 0a 01 00 00 <44> 0f b6 3b 31 ff 44 89 fe e8 fd 6b 37 fe 45 84 ff 75 a8 e8 c3 64 [ 2012.768605][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 2012.774663][ C0] RAX: 0000000000000000 RBX: ffffffffffffffc8 RCX: ffffc90005c59000 [ 2012.782642][ C0] RDX: 0000000000040000 RSI: ffffffff830a0050 RDI: ffffc90000007928 [ 2012.790621][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000003 [ 2012.798590][ C0] R10: fffff52000000f25 R11: 0000000000000000 R12: ffff88810cc0b678 [ 2012.806546][ C0] R13: ffff88810cc0b240 R14: ffff88810cc0b688 R15: ffff888143acc9a8 [ 2012.814499][ C0] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 2012.823415][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2012.829984][ C0] CR2: ffffffffffffffc8 CR3: 00000001333de000 CR4: 00000000001506f0 [ 2012.837938][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2012.845895][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2012.853850][ C0] Call Trace: [ 2012.857126][ C0] [ 2012.859951][ C0] ? ath9k_rx_tasklet+0x680/0x680 [ 2012.864961][ C0] ath9k_htc_rx_msg+0x2e4/0xb70 [ 2012.869808][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2012.875649][ C0] ath9k_hif_usb_reg_in_cb+0x1ac/0x630 [ 2012.881163][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 2012.886532][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 2012.891729][ C0] dummy_timer+0x11f9/0x32b0 [ 2012.896325][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 2012.901246][ C0] ? scheduler_tick+0x1b9/0x3e0 [ 2012.906081][ C0] ? dummy_dequeue+0x500/0x500 [ 2012.910833][ C0] ? dummy_dequeue+0x500/0x500 [ 2012.915577][ C0] call_timer_fn+0x1a5/0x630 [ 2012.920151][ C0] ? timer_fixup_init+0x60/0x60 [ 2012.924988][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2012.929822][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 2012.934749][ C0] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2012.940488][ C0] ? __next_timer_interrupt+0x1c6/0x220 [ 2012.946024][ C0] ? dummy_dequeue+0x500/0x500 [ 2012.950793][ C0] ? dummy_dequeue+0x500/0x500 [ 2012.955629][ C0] __run_timers.part.0+0x675/0xa10 [ 2012.960731][ C0] ? call_timer_fn+0x630/0x630 [ 2012.965479][ C0] ? lapic_next_event+0x4d/0x80 [ 2012.970313][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2012.976539][ C0] ? clockevents_program_event+0x12b/0x370 [ 2012.982345][ C0] ? tick_program_event+0xa8/0x130 [ 2012.987440][ C0] run_timer_softirq+0x80/0x120 [ 2012.992276][ C0] __do_softirq+0x1b0/0x910 [ 2012.996773][ C0] __irq_exit_rcu+0x117/0x160 [ 2013.001436][ C0] irq_exit_rcu+0x5/0x10 [ 2013.005757][ C0] sysvec_apic_timer_interrupt+0x6a/0x90 [ 2013.011393][ C0] [ 2013.014317][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2013.020552][ C0] RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 [ 2013.026377][ C0] Code: 89 de e8 cd ed 80 fb 84 db 75 ac e8 94 e6 80 fb e8 5f f2 86 fb eb 0c e8 88 e6 80 fb 0f 00 2d 81 b0 88 00 e8 7c e6 80 fb fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 07 ef 80 fb 48 85 db [ 2013.046135][ C0] RSP: 0018:ffffffff87407d60 EFLAGS: 00000293 [ 2013.052194][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2013.060154][ C0] RDX: ffffffff874523c0 RSI: ffffffff85c07ec4 RDI: ffffffff85c07eb1 [ 2013.068114][ C0] RBP: ffff888109bad064 R08: 0000000000000000 R09: 0000000000000000 [ 2013.076086][ C0] R10: ffffffff81477148 R11: 0000000000000000 R12: 0000000000000001 [ 2013.084737][ C0] R13: ffff888109bad000 R14: ffff888109bad064 R15: ffff88810c4cd004 [ 2013.092788][ C0] ? trace_hardirqs_on+0x38/0x1a0 [ 2013.097827][ C0] ? acpi_idle_do_entry+0x1c4/0x250 [ 2013.103017][ C0] ? acpi_idle_do_entry+0x1b1/0x250 [ 2013.108203][ C0] acpi_idle_enter+0x355/0x4f0 [ 2013.112964][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 2013.118100][ C0] cpuidle_enter+0x4a/0xa0 [ 2013.122510][ C0] do_idle+0x3dd/0x580 [ 2013.126567][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 2013.131606][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 2013.137834][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 2013.144060][ C0] cpu_startup_entry+0x14/0x20 [ 2013.148929][ C0] start_kernel+0x47a/0x49b [ 2013.153479][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 2013.159414][ C0] Modules linked in: [ 2013.163292][ C0] CR2: ffffffffffffffc8 [ 2013.167439][ C0] ---[ end trace 9ee3b57bfcd22f1b ]--- [ 2013.172892][ C0] RIP: 0010:ath9k_htc_rxep+0xb5/0x210 [ 2013.178257][ C0] Code: 8b 43 38 48 8d 58 c8 49 39 c4 0f 84 ee 00 00 00 e8 f0 64 37 fe 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 74 06 0f 8e 0a 01 00 00 <44> 0f b6 3b 31 ff 44 89 fe e8 fd 6b 37 fe 45 84 ff 75 a8 e8 c3 64 [ 2013.197859][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 2013.204002][ C0] RAX: 0000000000000000 RBX: ffffffffffffffc8 RCX: ffffc90005c59000 [ 2013.212069][ C0] RDX: 0000000000040000 RSI: ffffffff830a0050 RDI: ffffc90000007928 [ 2013.220035][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000003 [ 2013.228023][ C0] R10: fffff52000000f25 R11: 0000000000000000 R12: ffff88810cc0b678 [ 2013.236007][ C0] R13: ffff88810cc0b240 R14: ffff88810cc0b688 R15: ffff888143acc9a8 [ 2013.243961][ C0] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 2013.252888][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2013.259462][ C0] CR2: ffffffffffffffc8 CR3: 00000001333de000 CR4: 00000000001506f0 [ 2013.267427][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2013.275388][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2013.283357][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 2013.292125][ C0] Kernel Offset: disabled [ 2013.296453][ C0] Rebooting in 86400 seconds..