get: driver registration failed: -16 [ 2955.739665][T26538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2955.845291][ T3767] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2955.845323][ T3767] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2956.035293][ T3767] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2956.035330][ T3767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2956.035355][ T3767] usb 3-1: Product: syz [ 2956.035370][ T3767] usb 3-1: Manufacturer: syz [ 2956.035386][ T3767] usb 3-1: SerialNumber: syz [ 2956.085939][ T3767] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2956.675311][T30552] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2956.675748][T30552] usb 3-1: ath9k_htc: Unable to allocate URBs [ 2956.676345][T30552] usb 3-1: ath9k_htc: USB layer deinitialized [ 2956.895741][T24041] usb 3-1: USB disconnect, device number 52 11:08:58 executing program 2: 11:08:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x80000001, 0x240200) (rerun: 32) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x8, 0x80000001, 0xd65, 0x9, 0x4, 0x3}) 11:08:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001340)=""/4096) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x1, 0x21, 0xdc2, 0x0, "bc93176490de7ed5530c28067d40de33d77596b630ffe500000000000007ff9b"}) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001340)=""/4096) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x1, 0x21, 0xdc2, 0x0, "bc93176490de7ed5530c28067d40de33d77596b630ffe500000000000007ff9b"}) (async) 11:08:58 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:08:58 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:08:58 executing program 4: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:08:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001340)=""/4096) (async, rerun: 32) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x1, 0x21, 0xdc2, 0x0, "bc93176490de7ed5530c28067d40de33d77596b630ffe500000000000007ff9b"}) (rerun: 32) 11:08:58 executing program 2: 11:08:58 executing program 0: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x30000) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x4, 0xfc, 0xfffd, 0x0, "bc017ed55b0c28000008af259b000000000000000800000000000000002000"}) 11:08:58 executing program 2: 11:08:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2004, 0x90100) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0xe5) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x1, 0x37, {0x7, 0x4}, {0x1, 0x81}, @const={0x11, {0x7, 0xc98, 0x3ff, 0x4}}}) 11:08:58 executing program 0: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x30000) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x4, 0xfc, 0xfffd, 0x0, "bc017ed55b0c28000008af259b000000000000000800000000000000002000"}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x3) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x30000) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x4, 0xfc, 0xfffd, 0x0, "bc017ed55b0c28000008af259b000000000000000800000000000000002000"}) (async) 11:08:58 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 2957.425742][T26546] Error: Driver 'raw-gadget' is already registered, aborting... [ 2957.425757][T26546] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2957.425778][T26546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:08:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2004, 0x90100) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0xe5) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x1, 0x37, {0x7, 0x4}, {0x1, 0x81}, @const={0x11, {0x7, 0xc98, 0x3ff, 0x4}}}) 11:08:58 executing program 0: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x3) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x30000) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x4, 0xfc, 0xfffd, 0x0, "bc017ed55b0c28000008af259b000000000000000800000000000000002000"}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x3) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x30000) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x4, 0xfc, 0xfffd, 0x0, "bc017ed55b0c28000008af259b000000000000000800000000000000002000"}) (async) [ 2957.675220][T30552] usb 4-1: new high-speed USB device number 2 using dummy_hcd 11:08:58 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2957.939738][T26574] Error: Driver 'raw-gadget' is already registered, aborting... [ 2957.939748][T26574] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2957.939760][T26574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2958.105257][T30552] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2958.265269][T30552] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2958.265291][T30552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2958.265306][T30552] usb 4-1: Product: syz [ 2958.265318][T30552] usb 4-1: Manufacturer: syz [ 2958.265327][T30552] usb 4-1: SerialNumber: syz [ 2958.305989][T30552] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2958.875289][T30552] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2959.081728][ T3767] usb 4-1: USB disconnect, device number 2 11:09:00 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2004, 0x90100) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0xe5) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x1, 0x37, {0x7, 0x4}, {0x1, 0x81}, @const={0x11, {0x7, 0xc98, 0x3ff, 0x4}}}) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x2004, 0x90100) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0xe5) (async) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x1, 0x37, {0x7, 0x4}, {0x1, 0x81}, @const={0x11, {0x7, 0xc98, 0x3ff, 0x4}}}) (async) 11:09:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/254) 11:09:00 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:00 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 11:09:00 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/254) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/254) (async) 11:09:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x6, 0xc0441) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x180040) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000000c0)=""/72) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7fff) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/19) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 2959.617202][T26588] Error: Driver 'raw-gadget' is already registered, aborting... [ 2959.617220][T26588] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2959.617240][T26588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2959.643080][T26590] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/254) 11:09:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x6, 0xc0441) (async) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x180040) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000000c0)=""/72) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7fff) (async) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/19) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x4, 0x28344e5ecf9dad6d) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0x28, &(0x7f0000000000)="7a6f44cfdff557100d6bd740be60badeac152ad78ce2813aa5a69b5e7c8948437ef4f38ea42f642e"}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x200000) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000000c0)=""/147) 11:09:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x6, 0xc0441) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x180040) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000000c0)=""/72) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7fff) (async) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/19) (async, rerun: 64) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (rerun: 64) [ 2959.643095][T26590] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2959.643122][T26590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2959.885210][T15920] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2959.965232][T30552] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2959.965330][T30552] ath9k_htc: Failed to initialize the device [ 2959.965737][ T3767] usb 4-1: ath9k_htc: USB layer deinitialized 11:09:00 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x4, 0x28344e5ecf9dad6d) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0x28, &(0x7f0000000000)="7a6f44cfdff557100d6bd740be60badeac152ad78ce2813aa5a69b5e7c8948437ef4f38ea42f642e"}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x200000) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000000c0)=""/147) syz_open_dev$evdev(&(0x7f0000001300), 0x4, 0x28344e5ecf9dad6d) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0x28, &(0x7f0000000000)="7a6f44cfdff557100d6bd740be60badeac152ad78ce2813aa5a69b5e7c8948437ef4f38ea42f642e"}) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x200000) (async) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000000c0)=""/147) (async) 11:09:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x22002) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x10000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000080)="996aeb52a2dfa6"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 2960.164444][T26616] Error: Driver 'raw-gadget' is already registered, aborting... [ 2960.164461][T26616] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2960.164481][T26616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2960.245616][T15920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2960.245646][T15920] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2960.405318][T15920] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2960.405341][T15920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2960.405355][T15920] usb 5-1: Product: syz [ 2960.405365][T15920] usb 5-1: Manufacturer: syz [ 2960.405375][T15920] usb 5-1: SerialNumber: syz [ 2960.456156][T15920] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2961.065301][T15920] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2961.065670][T15920] usb 5-1: ath9k_htc: Unable to allocate URBs [ 2961.066262][T15920] usb 5-1: ath9k_htc: USB layer deinitialized [ 2961.285713][T24041] usb 5-1: USB disconnect, device number 52 11:09:02 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:02 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 11:09:02 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x4, 0x28344e5ecf9dad6d) (async) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0x28, &(0x7f0000000000)="7a6f44cfdff557100d6bd740be60badeac152ad78ce2813aa5a69b5e7c8948437ef4f38ea42f642e"}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x200000) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000000c0)=""/147) 11:09:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x22002) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x10000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000080)="996aeb52a2dfa6"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x22002) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x10000) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000080)="996aeb52a2dfa6"}) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) 11:09:02 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x22002) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x10000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000080)="996aeb52a2dfa6"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x22002) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x10000) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000080)="996aeb52a2dfa6"}) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) 11:09:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/232) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000140)=""/192) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x100, "bc931775004bca1b3429b412f400a146ffff00000100010000002000"}) 11:09:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/232) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000140)=""/192) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x100, "bc931775004bca1b3429b412f400a146ffff00000100010000002000"}) 11:09:02 executing program 5: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000009c0)={0x1, 0x1, 0x100, 0x2, 0x6, 0x7d}) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x0, 0x200, 0xced, 0xfff}) r1 = syz_open_dev$evdev(&(0x7f0000000a00), 0x6, 0x4801) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x9, 0x0, 0x0, 0x1, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008cf259b"}) r2 = syz_usb_connect$cdc_ncm(0x4, 0x77, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x10, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5c3fd295"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7, 0x7b, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x1d}, [@obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xe4, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0xf8, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x3, 0x81, 0x2, 0x40, 0x6}, 0xd6, &(0x7f0000000180)={0x5, 0xf, 0xd6, 0x4, [@ptm_cap={0x3}, @generic={0xb0, 0x10, 0x1, "039cee0639c8de1ca001a240bc4c6cd7a31e3d3ff265a5f02655486a47efa430062db5df42933e967b1aae1f4b42edf3253fbc4ec272f83d330ed45350fc682a0cab8be6d735a28bc18801f7793ba5cd0be034bcfb3627918bc115230123dc20a354a7e9d1651f30d0e0d30a2ddbff0cc6c181e9e9a2a642d73bac86ce766eec04e06287a8053935346b958f299e3fa9a2e3495c583af1f0356a9b346ae3ff4a13523c2c349b23a6ef262169bd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x3, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x7f, 0xf00, 0x7f, [0xf, 0xff000f]}]}, 0x5, [{0xa, &(0x7f0000000280)=@string={0xa, 0x3, "be684f4f4095fc25"}}, {0xc4, &(0x7f00000002c0)=@string={0xc4, 0x3, "9806f06db7fe00073fc8566aa74418d9b34274eee44a796e0150c60459d5e97c3cd32486d12e0707c11900b3eca0794a07c463419b843bacfede2b2b74dd837b0d05cdfca3f24ead1e7dd179ca1fe96b16007b11e8d35cb32b72d3cfc85dcc965cd834d75a429f9377ec54a4bb4959f40a77eb5d800245c3f0a852868b8c42be3bf5de98afbea6237fa3a6d270bd4404104637839b279a270f9ddbb0b9d87e79a86a3499e22b491906c9df6a5b1b6206635db76175d656022ef8b64db3ca16ff2ca1"}}, {0x55, &(0x7f00000003c0)=@string={0x55, 0x3, "8ee21f3aa8b518619130ed08d8098220bb4b5c0200131c50f7b32b3a8acc509309ee18041c4bec421ffd54b9ebacb3ffff46e133f57d0c3a7b4e1cde2fd899d4eaff4733f086d76a56cac88fa0713360aa1ce8"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x287b}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x20, 0x0, 0xbc, {0xbc, 0x21, "bc583cde5ea6d0d7e461c8ee9ebb688c23855a1c3a43ef05745e556b2e203ca000ead49bcb9a7c4a69f5dce2334448eb4f87a9eaba7f9c167e60720ff495737fb1817b89b75190ecf1b4f8d2f3a33a9ac9f08ff61d6d2627e823280716175587e45eae65666ac074b70a2f2acb03467cbfb7ae4c2f1d81a6a737d63926924dbf90d880158a691dc421c98fa5091e230565729375b0dd42b85426e1ec2c9e52c5f3dbfc8792c4be41c973894d6fff4a3655713a81ee87d059ef26"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xf, 0x41, "9f89dd31902cabf00d937eed1b6bbc371d7f5c205885045495f45a0665873fbf63feb1c1933f3e748fe24e3ce65de7a5ea6b237c65d40638938666e922b37572e2"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x4, 0x60, 0x0, 0x3, 0x1, 0x9, 0x1, 0x7, 0x9, 0x8, 0xc0, 0x1f}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) [ 2961.809578][T26638] Error: Driver 'raw-gadget' is already registered, aborting... [ 2961.809593][T26638] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2961.809613][T26638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2961.826123][T26642] Error: Driver 'raw-gadget' is already registered, aborting... [ 2961.826138][T26642] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/232) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000140)=""/192) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x100, "bc931775004bca1b3429b412f400a146ffff00000100010000002000"}) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/232) (async) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000140)=""/192) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x100, "bc931775004bca1b3429b412f400a146ffff00000100010000002000"}) (async) 11:09:02 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2961.826157][T26642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2961.921682][T26660] Error: Driver 'raw-gadget' is already registered, aborting... [ 2961.921692][T26660] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2961.921704][T26660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2962.065268][T24041] usb 4-1: new high-speed USB device number 3 using dummy_hcd 11:09:03 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:03 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:03 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:03 executing program 5: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000009c0)={0x1, 0x1, 0x100, 0x2, 0x6, 0x7d}) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) (async) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x0, 0x200, 0xced, 0xfff}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000a00), 0x6, 0x4801) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x9, 0x0, 0x0, 0x1, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008cf259b"}) r2 = syz_usb_connect$cdc_ncm(0x4, 0x77, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x10, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5c3fd295"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7, 0x7b, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x1d}, [@obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xe4, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0xf8, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x3, 0x81, 0x2, 0x40, 0x6}, 0xd6, &(0x7f0000000180)={0x5, 0xf, 0xd6, 0x4, [@ptm_cap={0x3}, @generic={0xb0, 0x10, 0x1, "039cee0639c8de1ca001a240bc4c6cd7a31e3d3ff265a5f02655486a47efa430062db5df42933e967b1aae1f4b42edf3253fbc4ec272f83d330ed45350fc682a0cab8be6d735a28bc18801f7793ba5cd0be034bcfb3627918bc115230123dc20a354a7e9d1651f30d0e0d30a2ddbff0cc6c181e9e9a2a642d73bac86ce766eec04e06287a8053935346b958f299e3fa9a2e3495c583af1f0356a9b346ae3ff4a13523c2c349b23a6ef262169bd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x3, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x7f, 0xf00, 0x7f, [0xf, 0xff000f]}]}, 0x5, [{0xa, &(0x7f0000000280)=@string={0xa, 0x3, "be684f4f4095fc25"}}, {0xc4, &(0x7f00000002c0)=@string={0xc4, 0x3, "9806f06db7fe00073fc8566aa74418d9b34274eee44a796e0150c60459d5e97c3cd32486d12e0707c11900b3eca0794a07c463419b843bacfede2b2b74dd837b0d05cdfca3f24ead1e7dd179ca1fe96b16007b11e8d35cb32b72d3cfc85dcc965cd834d75a429f9377ec54a4bb4959f40a77eb5d800245c3f0a852868b8c42be3bf5de98afbea6237fa3a6d270bd4404104637839b279a270f9ddbb0b9d87e79a86a3499e22b491906c9df6a5b1b6206635db76175d656022ef8b64db3ca16ff2ca1"}}, {0x55, &(0x7f00000003c0)=@string={0x55, 0x3, "8ee21f3aa8b518619130ed08d8098220bb4b5c0200131c50f7b32b3a8acc509309ee18041c4bec421ffd54b9ebacb3ffff46e133f57d0c3a7b4e1cde2fd899d4eaff4733f086d76a56cac88fa0713360aa1ce8"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x287b}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x20, 0x0, 0xbc, {0xbc, 0x21, "bc583cde5ea6d0d7e461c8ee9ebb688c23855a1c3a43ef05745e556b2e203ca000ead49bcb9a7c4a69f5dce2334448eb4f87a9eaba7f9c167e60720ff495737fb1817b89b75190ecf1b4f8d2f3a33a9ac9f08ff61d6d2627e823280716175587e45eae65666ac074b70a2f2acb03467cbfb7ae4c2f1d81a6a737d63926924dbf90d880158a691dc421c98fa5091e230565729375b0dd42b85426e1ec2c9e52c5f3dbfc8792c4be41c973894d6fff4a3655713a81ee87d059ef26"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xf, 0x41, "9f89dd31902cabf00d937eed1b6bbc371d7f5c205885045495f45a0665873fbf63feb1c1933f3e748fe24e3ce65de7a5ea6b237c65d40638938666e922b37572e2"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x4, 0x60, 0x0, 0x3, 0x1, 0x9, 0x1, 0x7, 0x9, 0x8, 0xc0, 0x1f}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) [ 2962.345175][T26663] Error: Driver 'raw-gadget' is already registered, aborting... [ 2962.345191][T26663] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2962.345210][T26663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2962.350014][T26665] Error: Driver 'raw-gadget' is already registered, aborting... [ 2962.350029][T26665] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2962.350048][T26665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:03 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2962.350914][T26666] Error: Driver 'raw-gadget' is already registered, aborting... [ 2962.350926][T26666] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2962.350943][T26666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2962.438919][T26672] Error: Driver 'raw-gadget' is already registered, aborting... [ 2962.438929][T26672] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2962.438941][T26672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2962.475331][T24041] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2962.675293][T24041] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2962.675315][T24041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2962.675330][T24041] usb 4-1: Product: syz [ 2962.675346][T24041] usb 4-1: Manufacturer: syz [ 2962.675356][T24041] usb 4-1: SerialNumber: syz [ 2962.717695][T24041] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2963.285236][T24041] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2963.489613][T15920] usb 4-1: USB disconnect, device number 3 11:09:04 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:04 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:04 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:04 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:04 executing program 5: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000009c0)={0x1, 0x1, 0x100, 0x2, 0x6, 0x7d}) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) (async) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0x0, 0x200, 0xced, 0xfff}) r1 = syz_open_dev$evdev(&(0x7f0000000a00), 0x6, 0x4801) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x9, 0x0, 0x0, 0x1, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008cf259b"}) (async, rerun: 64) r2 = syz_usb_connect$cdc_ncm(0x4, 0x77, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x10, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "5c3fd295"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x800, 0x7, 0x7b, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x1d}, [@obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xe4, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x8, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0xf8, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x3, 0x81, 0x2, 0x40, 0x6}, 0xd6, &(0x7f0000000180)={0x5, 0xf, 0xd6, 0x4, [@ptm_cap={0x3}, @generic={0xb0, 0x10, 0x1, "039cee0639c8de1ca001a240bc4c6cd7a31e3d3ff265a5f02655486a47efa430062db5df42933e967b1aae1f4b42edf3253fbc4ec272f83d330ed45350fc682a0cab8be6d735a28bc18801f7793ba5cd0be034bcfb3627918bc115230123dc20a354a7e9d1651f30d0e0d30a2ddbff0cc6c181e9e9a2a642d73bac86ce766eec04e06287a8053935346b958f299e3fa9a2e3495c583af1f0356a9b346ae3ff4a13523c2c349b23a6ef262169bd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x3, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x7f, 0xf00, 0x7f, [0xf, 0xff000f]}]}, 0x5, [{0xa, &(0x7f0000000280)=@string={0xa, 0x3, "be684f4f4095fc25"}}, {0xc4, &(0x7f00000002c0)=@string={0xc4, 0x3, "9806f06db7fe00073fc8566aa74418d9b34274eee44a796e0150c60459d5e97c3cd32486d12e0707c11900b3eca0794a07c463419b843bacfede2b2b74dd837b0d05cdfca3f24ead1e7dd179ca1fe96b16007b11e8d35cb32b72d3cfc85dcc965cd834d75a429f9377ec54a4bb4959f40a77eb5d800245c3f0a852868b8c42be3bf5de98afbea6237fa3a6d270bd4404104637839b279a270f9ddbb0b9d87e79a86a3499e22b491906c9df6a5b1b6206635db76175d656022ef8b64db3ca16ff2ca1"}}, {0x55, &(0x7f00000003c0)=@string={0x55, 0x3, "8ee21f3aa8b518619130ed08d8098220bb4b5c0200131c50f7b32b3a8acc509309ee18041c4bec421ffd54b9ebacb3ffff46e133f57d0c3a7b4e1cde2fd899d4eaff4733f086d76a56cac88fa0713360aa1ce8"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x287b}}]}) (rerun: 64) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x20, 0x0, 0xbc, {0xbc, 0x21, "bc583cde5ea6d0d7e461c8ee9ebb688c23855a1c3a43ef05745e556b2e203ca000ead49bcb9a7c4a69f5dce2334448eb4f87a9eaba7f9c167e60720ff495737fb1817b89b75190ecf1b4f8d2f3a33a9ac9f08ff61d6d2627e823280716175587e45eae65666ac074b70a2f2acb03467cbfb7ae4c2f1d81a6a737d63926924dbf90d880158a691dc421c98fa5091e230565729375b0dd42b85426e1ec2c9e52c5f3dbfc8792c4be41c973894d6fff4a3655713a81ee87d059ef26"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xf, 0x41, "9f89dd31902cabf00d937eed1b6bbc371d7f5c205885045495f45a0665873fbf63feb1c1933f3e748fe24e3ce65de7a5ea6b237c65d40638938666e922b37572e2"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x4, 0x60, 0x0, 0x3, 0x1, 0x9, 0x1, 0x7, 0x9, 0x8, 0xc0, 0x1f}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000880)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000900)={0x20, 0x89, 0x2}}) 11:09:04 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x0}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2964.019338][T26679] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.019353][T26679] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.019372][T26679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.021158][T26680] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.021172][T26680] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.021191][T26680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.025014][T26681] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.025026][T26681] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.025044][T26681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.054087][T26685] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.054103][T26685] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.054123][T26685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.305253][T23938] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2964.355247][T24041] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2964.355385][T24041] ath9k_htc: Failed to initialize the device [ 2964.355731][T15920] usb 4-1: ath9k_htc: USB layer deinitialized 11:09:05 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:05 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:05 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:05 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:05 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1f, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x20, {0x9, 0x21, 0x9, 0xb7, 0x1, {0x22, 0xf2e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xff, 0xe1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x55, 0x2, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0xc1, 0x4, 0x10, 0x3}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x7, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x4, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x0, 0x1f, 0x8}]}, 0x4, [{0x5d, &(0x7f00000000c0)=@string={0x5d, 0x3, "49c1a891f7e4bb36c872ce56b7d6cfac658ac1b9f34c0d54178fd9f1269c0bddd09dc04b1a27e94f5aef136ae9e967e2a3ff6a5ab694ce4ae7cd588d6988d46feb9ec7e987fcc342cb71707b86d112af23a82260f7989aa5d97dd4"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x801}}, {0x86, &(0x7f0000000180)=@string={0x86, 0x3, "1a30379862251cdf84ae63e9fb9427114b6a8059168435afbc712e074adb607e2b904df04d11399cb3caeafda0463d5c4064c1a64cacd9a8f37327df3f1d1e8a1a667ae13c312b2b8e9641dbe0f41fbf29aaaac01e9cd6198649a474dc79a14e01960443ba4a148b9c66d03e6b4841f0d60a0ec88eb89eb7a49285afae2e2b759b3d5b17"}}, {0x76, &(0x7f0000000240)=@string={0x76, 0x3, "b5927ff0af7765384e06dc478172b968678068983817354562220395735578651c336a36999853b4f89f803de903f48f9e9d48ef1ee04f6a2c73af336300d95736fa675736635ce6aed44199a1a70ae403389a9df6d13a0e51a71a422e8971490354be55e2313477c610d8f1f1d8f9b5afe90c42"}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/197) [ 2964.544744][T26687] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.544766][T26687] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.544787][T26687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.594464][T26690] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.594480][T26690] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.594499][T26690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.607449][T26693] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.607465][T26693] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.607485][T26693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.610219][T26694] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.610233][T26694] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.610252][T26694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.614539][T26695] Error: Driver 'raw-gadget' is already registered, aborting... [ 2964.614552][T26695] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2964.614571][T26695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.665278][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2964.665325][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2964.835305][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2964.835327][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2964.835341][T23938] usb 2-1: Product: syz [ 2964.835351][T23938] usb 2-1: Manufacturer: syz [ 2964.835361][T23938] usb 2-1: SerialNumber: syz [ 2964.885979][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:09:05 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:05 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:05 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2965.068999][T26697] Error: Driver 'raw-gadget' is already registered, aborting... [ 2965.069015][T26697] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2965.069057][T26697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:05 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1f, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x20, {0x9, 0x21, 0x9, 0xb7, 0x1, {0x22, 0xf2e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xff, 0xe1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x55, 0x2, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0xc1, 0x4, 0x10, 0x3}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x7, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x4, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x0, 0x1f, 0x8}]}, 0x4, [{0x5d, &(0x7f00000000c0)=@string={0x5d, 0x3, "49c1a891f7e4bb36c872ce56b7d6cfac658ac1b9f34c0d54178fd9f1269c0bddd09dc04b1a27e94f5aef136ae9e967e2a3ff6a5ab694ce4ae7cd588d6988d46feb9ec7e987fcc342cb71707b86d112af23a82260f7989aa5d97dd4"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x801}}, {0x86, &(0x7f0000000180)=@string={0x86, 0x3, "1a30379862251cdf84ae63e9fb9427114b6a8059168435afbc712e074adb607e2b904df04d11399cb3caeafda0463d5c4064c1a64cacd9a8f37327df3f1d1e8a1a667ae13c312b2b8e9641dbe0f41fbf29aaaac01e9cd6198649a474dc79a14e01960443ba4a148b9c66d03e6b4841f0d60a0ec88eb89eb7a49285afae2e2b759b3d5b17"}}, {0x76, &(0x7f0000000240)=@string={0x76, 0x3, "b5927ff0af7765384e06dc478172b968678068983817354562220395735578651c336a36999853b4f89f803de903f48f9e9d48ef1ee04f6a2c73af336300d95736fa675736635ce6aed44199a1a70ae403389a9df6d13a0e51a71a422e8971490354be55e2313477c610d8f1f1d8f9b5afe90c42"}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/197) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1f, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x20, {0x9, 0x21, 0x9, 0xb7, 0x1, {0x22, 0xf2e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xff, 0xe1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x55, 0x2, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0xc1, 0x4, 0x10, 0x3}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x7, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x4, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x0, 0x1f, 0x8}]}, 0x4, [{0x5d, &(0x7f00000000c0)=@string={0x5d, 0x3, "49c1a891f7e4bb36c872ce56b7d6cfac658ac1b9f34c0d54178fd9f1269c0bddd09dc04b1a27e94f5aef136ae9e967e2a3ff6a5ab694ce4ae7cd588d6988d46feb9ec7e987fcc342cb71707b86d112af23a82260f7989aa5d97dd4"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x801}}, {0x86, &(0x7f0000000180)=@string={0x86, 0x3, "1a30379862251cdf84ae63e9fb9427114b6a8059168435afbc712e074adb607e2b904df04d11399cb3caeafda0463d5c4064c1a64cacd9a8f37327df3f1d1e8a1a667ae13c312b2b8e9641dbe0f41fbf29aaaac01e9cd6198649a474dc79a14e01960443ba4a148b9c66d03e6b4841f0d60a0ec88eb89eb7a49285afae2e2b759b3d5b17"}}, {0x76, &(0x7f0000000240)=@string={0x76, 0x3, "b5927ff0af7765384e06dc478172b968678068983817354562220395735578651c336a36999853b4f89f803de903f48f9e9d48ef1ee04f6a2c73af336300d95736fa675736635ce6aed44199a1a70ae403389a9df6d13a0e51a71a422e8971490354be55e2313477c610d8f1f1d8f9b5afe90c42"}}]}) (async) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/197) (async) [ 2965.150601][T26700] Error: Driver 'raw-gadget' is already registered, aborting... [ 2965.150617][T26700] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2965.150637][T26700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2965.152215][T26701] Error: Driver 'raw-gadget' is already registered, aborting... [ 2965.152228][T26701] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2965.152247][T26701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2965.157744][T26703] Error: Driver 'raw-gadget' is already registered, aborting... [ 2965.157756][T26703] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2965.157772][T26703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2965.160189][T26703] Error: Driver 'raw-gadget' is already registered, aborting... [ 2965.160200][T26703] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2965.160217][T26703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2965.595285][T23938] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2965.595738][T23938] usb 2-1: ath9k_htc: Unable to allocate URBs [ 2965.596334][T23938] usb 2-1: ath9k_htc: USB layer deinitialized [ 2965.805822][T15920] usb 2-1: USB disconnect, device number 35 11:09:07 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:07 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:07 executing program 5: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1f, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x20, {0x9, 0x21, 0x9, 0xb7, 0x1, {0x22, 0xf2e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xff, 0xe1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x55, 0x2, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0xc1, 0x4, 0x10, 0x3}, 0x2b, &(0x7f0000000080)={0x5, 0xf, 0x2b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x7, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x4, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x0, 0x1f, 0x8}]}, 0x4, [{0x5d, &(0x7f00000000c0)=@string={0x5d, 0x3, "49c1a891f7e4bb36c872ce56b7d6cfac658ac1b9f34c0d54178fd9f1269c0bddd09dc04b1a27e94f5aef136ae9e967e2a3ff6a5ab694ce4ae7cd588d6988d46feb9ec7e987fcc342cb71707b86d112af23a82260f7989aa5d97dd4"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x801}}, {0x86, &(0x7f0000000180)=@string={0x86, 0x3, "1a30379862251cdf84ae63e9fb9427114b6a8059168435afbc712e074adb607e2b904df04d11399cb3caeafda0463d5c4064c1a64cacd9a8f37327df3f1d1e8a1a667ae13c312b2b8e9641dbe0f41fbf29aaaac01e9cd6198649a474dc79a14e01960443ba4a148b9c66d03e6b4841f0d60a0ec88eb89eb7a49285afae2e2b759b3d5b17"}}, {0x76, &(0x7f0000000240)=@string={0x76, 0x3, "b5927ff0af7765384e06dc478172b968678068983817354562220395735578651c336a36999853b4f89f803de903f48f9e9d48ef1ee04f6a2c73af336300d95736fa675736635ce6aed44199a1a70ae403389a9df6d13a0e51a71a422e8971490354be55e2313477c610d8f1f1d8f9b5afe90c42"}}]}) (async) r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/197) 11:09:07 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:07 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:07 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2966.336536][T26710] Error: Driver 'raw-gadget' is already registered, aborting... [ 2966.336554][T26710] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.336599][T26710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.339715][T26713] Error: Driver 'raw-gadget' is already registered, aborting... [ 2966.339728][T26713] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.339746][T26713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.348780][T26717] Error: Driver 'raw-gadget' is already registered, aborting... [ 2966.348793][T26717] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.348812][T26717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.350823][T26718] Error: Driver 'raw-gadget' is already registered, aborting... [ 2966.350836][T26718] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.350853][T26718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.358235][T26719] Error: Driver 'raw-gadget' is already registered, aborting... [ 2966.358248][T26719] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.358267][T26719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.595221][T23938] usb 2-1: new high-speed USB device number 36 using dummy_hcd 11:09:07 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:07 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x16) r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7e, "bc93226490de7ed55b0c28067d40de33d775a9b6310100020008000008af259b"}) 11:09:07 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:07 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x25}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:07 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2966.872453][T26721] Error: Driver 'raw-gadget' is already registered, aborting... [ 2966.872469][T26721] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.872488][T26721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.903543][T26725] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:07 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x16) (async) r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7e, "bc93226490de7ed55b0c28067d40de33d775a9b6310100020008000008af259b"}) 11:09:07 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x16) r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7e, "bc93226490de7ed55b0c28067d40de33d775a9b6310100020008000008af259b"}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x16) (async) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x7e, "bc93226490de7ed55b0c28067d40de33d775a9b6310100020008000008af259b"}) (async) [ 2966.903558][T26725] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.903578][T26725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.916029][T26728] Error: Driver 'raw-gadget' is already registered, aborting... [ 2966.916044][T26728] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.916062][T26728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.918054][T26729] Error: Driver 'raw-gadget' is already registered, aborting... [ 2966.918067][T26729] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2966.918085][T26729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2966.955441][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2966.955486][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2967.115357][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2967.115395][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2967.115464][T23938] usb 2-1: Product: syz [ 2967.115480][T23938] usb 2-1: Manufacturer: syz [ 2967.115498][T23938] usb 2-1: SerialNumber: syz [ 2967.156860][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2967.765336][T24041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2967.765713][T24041] usb 2-1: ath9k_htc: Unable to allocate URBs [ 2967.766306][T24041] usb 2-1: ath9k_htc: USB layer deinitialized [ 2967.975749][T15920] usb 2-1: USB disconnect, device number 36 11:09:09 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:09 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:09 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:09 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:09 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2d}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:09 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x2}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:09 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:09 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x20, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 2968.495562][T26744] Error: Driver 'raw-gadget' is already registered, aborting... [ 2968.495578][T26744] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2968.495597][T26744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2968.497855][T26745] Error: Driver 'raw-gadget' is already registered, aborting... [ 2968.497868][T26745] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x9) 11:09:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x9) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x9) (async) 11:09:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (rerun: 32) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async, rerun: 32) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x9) (rerun: 32) [ 2968.497888][T26745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2968.501204][T26746] Error: Driver 'raw-gadget' is already registered, aborting... [ 2968.501218][T26746] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2968.501236][T26746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2968.524813][T26748] Error: Driver 'raw-gadget' is already registered, aborting... [ 2968.524828][T26748] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2968.524848][T26748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x6, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 2968.755263][T15920] usb 3-1: new high-speed USB device number 53 using dummy_hcd 11:09:09 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2969.041314][T26768] Error: Driver 'raw-gadget' is already registered, aborting... [ 2969.041324][T26768] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2969.041336][T26768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2969.115296][T15920] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2969.115325][T15920] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 2969.115341][T15920] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2969.275323][T15920] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2969.275356][T15920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2969.275387][T15920] usb 3-1: Product: syz [ 2969.275404][T15920] usb 3-1: Manufacturer: syz [ 2969.275422][T15920] usb 3-1: SerialNumber: syz [ 2969.316293][T15920] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2969.885278][ T3767] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2969.885654][ T3767] usb 3-1: ath9k_htc: Unable to allocate URBs [ 2969.886035][ T3767] usb 3-1: ath9k_htc: USB layer deinitialized [ 2970.105801][T24041] usb 3-1: USB disconnect, device number 53 11:09:11 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x6, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:11 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:11 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:11 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x2}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:11 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x6, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x4020940d, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/237) [ 2970.626854][T26775] Error: Driver 'raw-gadget' is already registered, aborting... [ 2970.626870][T26775] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2970.626889][T26775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2970.627237][T26776] Error: Driver 'raw-gadget' is already registered, aborting... [ 2970.627250][T26776] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x4020940d, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async, rerun: 64) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (rerun: 64) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) (async, rerun: 64) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/237) (rerun: 64) [ 2970.627267][T26776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2970.630444][T26778] Error: Driver 'raw-gadget' is already registered, aborting... [ 2970.630456][T26778] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2970.630473][T26778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2970.655981][T26780] Error: Driver 'raw-gadget' is already registered, aborting... [ 2970.655995][T26780] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x4020940d, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/237) 11:09:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x20, 0x20, 0x80000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x408002) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/31) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x81, 0x0, 0x5, 0x5, 0xb65, 0x371}) 11:09:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x20, 0x20, 0x80000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x408002) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/31) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x81, 0x0, 0x5, 0x5, 0xb65, 0x371}) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x20, 0x20, 0x80000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x408002) (async) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/31) (async) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x81, 0x0, 0x5, 0x5, 0xb65, 0x371}) (async) [ 2970.656014][T26780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2970.905234][ T3767] usb 1-1: new high-speed USB device number 102 using dummy_hcd 11:09:11 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x20, 0x20, 0x80000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x408002) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/31) (async) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x81, 0x0, 0x5, 0x5, 0xb65, 0x371}) 11:09:11 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:11 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2971.181306][T26803] Error: Driver 'raw-gadget' is already registered, aborting... [ 2971.181321][T26803] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2971.181341][T26803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2971.184556][T26802] Error: Driver 'raw-gadget' is already registered, aborting... [ 2971.184570][T26802] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2971.184590][T26802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2971.190335][T26805] Error: Driver 'raw-gadget' is already registered, aborting... [ 2971.190348][T26805] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2971.190366][T26805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2971.565289][ T3767] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2971.565325][ T3767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2971.565349][ T3767] usb 1-1: Product: syz [ 2971.565367][ T3767] usb 1-1: Manufacturer: syz [ 2971.565383][ T3767] usb 1-1: SerialNumber: syz [ 2971.655740][ T3767] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2972.245282][T15920] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2972.457927][T24041] usb 1-1: USB disconnect, device number 102 11:09:13 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x2}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:13 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x63}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xb096, 0x200000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4) 11:09:13 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:13 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:13 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xb096, 0x200000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4) [ 2972.984614][T26812] Error: Driver 'raw-gadget' is already registered, aborting... [ 2972.984630][T26812] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2972.984650][T26812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2972.993575][T26813] Error: Driver 'raw-gadget' is already registered, aborting... [ 2972.993591][T26813] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xb096, 0x200000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4) 11:09:13 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3, 0x2) write$hidraw(r0, &(0x7f0000000040)="f1dbf7ee555a5984217b0dc0c24ec4b69186b5e3ea21a032187e648f759486ce80747431a4eb9cdf45ddb419780a56c5ad1a99d57a27332fb05ba78b9605242bd4dfb1a3349dc474b8d51b331dc83a2522c6a655fb7e048eb80553b8e5ecf093647e11d91ee3d07094cbf7e99a153572655bd06213bea6de0b822ffc5efa9d507938b36f5484c8686f704f9f7f6317f89661179cdc146d0a98e3648beb18e30ca3af84536b3f34203b9858cb6fff32", 0xaf) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x237903) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:13 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3, 0x2) write$hidraw(r0, &(0x7f0000000040)="f1dbf7ee555a5984217b0dc0c24ec4b69186b5e3ea21a032187e648f759486ce80747431a4eb9cdf45ddb419780a56c5ad1a99d57a27332fb05ba78b9605242bd4dfb1a3349dc474b8d51b331dc83a2522c6a655fb7e048eb80553b8e5ecf093647e11d91ee3d07094cbf7e99a153572655bd06213bea6de0b822ffc5efa9d507938b36f5484c8686f704f9f7f6317f89661179cdc146d0a98e3648beb18e30ca3af84536b3f34203b9858cb6fff32", 0xaf) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x237903) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) syz_open_dev$hidraw(&(0x7f0000000000), 0x3, 0x2) (async) write$hidraw(r0, &(0x7f0000000040)="f1dbf7ee555a5984217b0dc0c24ec4b69186b5e3ea21a032187e648f759486ce80747431a4eb9cdf45ddb419780a56c5ad1a99d57a27332fb05ba78b9605242bd4dfb1a3349dc474b8d51b331dc83a2522c6a655fb7e048eb80553b8e5ecf093647e11d91ee3d07094cbf7e99a153572655bd06213bea6de0b822ffc5efa9d507938b36f5484c8686f704f9f7f6317f89661179cdc146d0a98e3648beb18e30ca3af84536b3f34203b9858cb6fff32", 0xaf) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x237903) (async) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) [ 2972.993612][T26813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2972.994259][T26814] Error: Driver 'raw-gadget' is already registered, aborting... [ 2972.994271][T26814] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2972.994289][T26814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2973.018338][T26817] Error: Driver 'raw-gadget' is already registered, aborting... [ 2973.018355][T26817] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2973.018373][T26817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:13 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x3, 0x2) write$hidraw(r0, &(0x7f0000000040)="f1dbf7ee555a5984217b0dc0c24ec4b69186b5e3ea21a032187e648f759486ce80747431a4eb9cdf45ddb419780a56c5ad1a99d57a27332fb05ba78b9605242bd4dfb1a3349dc474b8d51b331dc83a2522c6a655fb7e048eb80553b8e5ecf093647e11d91ee3d07094cbf7e99a153572655bd06213bea6de0b822ffc5efa9d507938b36f5484c8686f704f9f7f6317f89661179cdc146d0a98e3648beb18e30ca3af84536b3f34203b9858cb6fff32", 0xaf) (async) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x237903) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:13 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000001300), 0x7, 0x100) syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x400000) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/231) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x1000, 0xd6b, 0x5}) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x101900) [ 2973.141517][T26834] Error: Driver 'raw-gadget' is already registered, aborting... [ 2973.141527][T26834] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2973.141539][T26834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2973.245231][T23938] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2973.325205][T15920] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2973.325295][T15920] ath9k_htc: Failed to initialize the device [ 2973.325598][T24041] usb 1-1: ath9k_htc: USB layer deinitialized 11:09:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/222) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x5d5d82) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000100)=""/176) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)=0x200) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x10000) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f00000002c0)={0x5, 0x72, &(0x7f0000000240)="9d98cae1f403e9561ec6db0151f5c6c30a841e527609ca8a0cd8509515f75bec94fa519fc77d9170344a4991458a598652b67a3e6ae065946274d9a16d3aa44154ccde1107695a0623d0091e44fc66d4ab042fbf48494f3739df9d8fc1b8b4a69e0ff04daa481e88ef331662d02ad333c457"}) r4 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001340)=""/4096) 11:09:14 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:14 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2973.538703][T26837] Error: Driver 'raw-gadget' is already registered, aborting... [ 2973.538719][T26837] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2973.538738][T26837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2973.542173][T26838] Error: Driver 'raw-gadget' is already registered, aborting... [ 2973.542188][T26838] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2973.542207][T26838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2973.605391][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2973.605441][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2973.795303][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2973.795326][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2973.795339][T23938] usb 2-1: Product: syz [ 2973.795350][T23938] usb 2-1: Manufacturer: syz [ 2973.795360][T23938] usb 2-1: SerialNumber: syz [ 2973.836286][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2974.425271][T24041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2974.425650][T24041] usb 2-1: ath9k_htc: Unable to allocate URBs [ 2974.426281][T24041] usb 2-1: ath9k_htc: USB layer deinitialized [ 2974.645752][T23938] usb 2-1: USB disconnect, device number 37 11:09:15 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:15 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:15 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:15 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000001300), 0x7, 0x100) syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x400000) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/231) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x1000, 0xd6b, 0x5}) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x101900) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000001300), 0x7, 0x100) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x400000) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) (async) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/231) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x1000, 0xd6b, 0x5}) (async) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x101900) (async) 11:09:15 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:15 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x48}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:16 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000001300), 0x7, 0x100) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x400000) (async) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) (async) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/231) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000140)={0x4, 0x1, 0x2, 0x1000, 0xd6b, 0x5}) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x101900) [ 2975.153083][T26847] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.153098][T26847] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.153118][T26847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.160744][T26849] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.160759][T26849] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.160776][T26849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.166944][T26853] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.166957][T26853] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.166976][T26853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.170331][T26849] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.170343][T26849] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.170360][T26849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.170782][T26848] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.170795][T26848] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.170813][T26848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.189109][T26860] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.189124][T26860] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.189144][T26860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.219271][T26862] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.219285][T26862] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.219303][T26862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.415217][T23938] usb 3-1: new high-speed USB device number 54 using dummy_hcd 11:09:16 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x48}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:16 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:16 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:16 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2975.678102][T26866] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.678118][T26866] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.678138][T26866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.697366][T26868] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.697381][T26868] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:16 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x80000001, 0x80002) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x7f, 0x80, 0x0, 0x1, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x40) r3 = syz_open_dev$hiddev(&(0x7f0000000180), 0x7, 0xc00) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000001c0)={0x2, 0x3, 0x9, 0x48ee, 0x81, 0x1, 0x0, 0x3ff, 0x9, 0x8000, 0x7, 0x1f, 0x7f, 0x6}) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000040)=""/216) 11:09:16 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (rerun: 32) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x80000001, 0x80002) (async, rerun: 32) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x7f, 0x80, 0x0, 0x1, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000000)) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x40) (async, rerun: 32) r3 = syz_open_dev$hiddev(&(0x7f0000000180), 0x7, 0xc00) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000001c0)={0x2, 0x3, 0x9, 0x48ee, 0x81, 0x1, 0x0, 0x3ff, 0x9, 0x8000, 0x7, 0x1f, 0x7f, 0x6}) (async) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000040)=""/216) [ 2975.697400][T26868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.730933][T26871] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.730949][T26871] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.730968][T26871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.735896][T26872] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.735910][T26872] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:16 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0x80000001, 0x80002) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x7f, 0x80, 0x0, 0x1, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x40) r3 = syz_open_dev$hiddev(&(0x7f0000000180), 0x7, 0xc00) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000001c0)={0x2, 0x3, 0x9, 0x48ee, 0x81, 0x1, 0x0, 0x3ff, 0x9, 0x8000, 0x7, 0x1f, 0x7f, 0x6}) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000040)=""/216) syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x80000001, 0x80002) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x7f, 0x80, 0x0, 0x1, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (async) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000000)) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x40) (async) syz_open_dev$hiddev(&(0x7f0000000180), 0x7, 0xc00) (async) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000001c0)={0x2, 0x3, 0x9, 0x48ee, 0x81, 0x1, 0x0, 0x3ff, 0x9, 0x8000, 0x7, 0x1f, 0x7f, 0x6}) (async) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000040)=""/216) (async) 11:09:16 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2975.735929][T26872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.793165][T23938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2975.793210][T23938] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2975.848949][T26886] Error: Driver 'raw-gadget' is already registered, aborting... [ 2975.848959][T26886] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2975.848971][T26886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2975.955401][T23938] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2975.955436][T23938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2975.955460][T23938] usb 3-1: Product: syz [ 2975.955478][T23938] usb 3-1: Manufacturer: syz [ 2975.955495][T23938] usb 3-1: SerialNumber: syz [ 2975.996920][T23938] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2976.555297][T24041] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2976.555699][T24041] usb 3-1: ath9k_htc: Unable to allocate URBs [ 2976.556343][T24041] usb 3-1: ath9k_htc: USB layer deinitialized [ 2976.785687][T23938] usb 3-1: USB disconnect, device number 54 11:09:18 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x2}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:18 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x48}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:18 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x7}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:18 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:18 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x0, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:18 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2977.297938][T26892] Error: Driver 'raw-gadget' is already registered, aborting... [ 2977.297954][T26892] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.297974][T26892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.297996][T26894] Error: Driver 'raw-gadget' is already registered, aborting... [ 2977.298006][T26894] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.298023][T26894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.300258][T26895] Error: Driver 'raw-gadget' is already registered, aborting... [ 2977.300271][T26895] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.300290][T26895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.303132][T26896] Error: Driver 'raw-gadget' is already registered, aborting... [ 2977.303144][T26896] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.303162][T26896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.315404][T26898] Error: Driver 'raw-gadget' is already registered, aborting... [ 2977.315462][T26898] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.315480][T26898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.565213][T23938] usb 5-1: new high-speed USB device number 53 using dummy_hcd 11:09:18 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0xf}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x20, 0x200) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x4c, 0x7, 0x1, 0x0, 0x7fff, 0x2}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000000)=""/169) 11:09:18 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:18 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x2}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:18 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2977.818515][T26900] Error: Driver 'raw-gadget' is already registered, aborting... [ 2977.818532][T26900] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.818552][T26900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.849448][T26903] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) [ 2977.849464][T26903] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.849482][T26903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.867684][T26907] Error: Driver 'raw-gadget' is already registered, aborting... [ 2977.867700][T26907] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.867719][T26907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.872501][T26908] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:18 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) [ 2977.872514][T26908] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2977.872532][T26908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2977.995402][T23938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2977.995458][T23938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2978.165293][T23938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2978.165316][T23938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2978.165332][T23938] usb 5-1: Product: syz [ 2978.165350][T23938] usb 5-1: Manufacturer: syz [ 2978.165360][T23938] usb 5-1: SerialNumber: syz [ 2978.206300][T23938] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2978.805282][T24041] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2978.805660][T24041] usb 5-1: ath9k_htc: Unable to allocate URBs [ 2978.806243][T24041] usb 5-1: ath9k_htc: USB layer deinitialized [ 2979.035670][T23938] usb 5-1: USB disconnect, device number 53 11:09:20 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x31}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:20 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:20 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:20 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:20 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x2}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:20 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xd}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:20 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:20 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) [ 2979.543644][T26925] Error: Driver 'raw-gadget' is already registered, aborting... [ 2979.543660][T26925] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2979.543680][T26925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2979.553589][T26924] Error: Driver 'raw-gadget' is already registered, aborting... [ 2979.553604][T26924] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:20 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:20 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:20 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:20 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) [ 2979.553624][T26924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2979.562269][T26926] Error: Driver 'raw-gadget' is already registered, aborting... [ 2979.562283][T26926] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2979.562302][T26926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2979.565984][T26928] Error: Driver 'raw-gadget' is already registered, aborting... [ 2979.565996][T26928] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2979.566014][T26928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2979.815218][T23938] usb 2-1: new high-speed USB device number 38 using dummy_hcd 11:09:20 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x202}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:20 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) [ 2980.098885][T26944] Error: Driver 'raw-gadget' is already registered, aborting... [ 2980.098902][T26944] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2980.098922][T26944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2980.205276][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2980.205307][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2980.415286][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2980.415309][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.415323][T23938] usb 2-1: Product: syz [ 2980.415333][T23938] usb 2-1: Manufacturer: syz [ 2980.415343][T23938] usb 2-1: SerialNumber: syz [ 2980.456600][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2981.025240][T24041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2981.025624][T24041] usb 2-1: ath9k_htc: Unable to allocate URBs [ 2981.026227][T24041] usb 2-1: ath9k_htc: USB layer deinitialized [ 2981.245824][T15920] usb 2-1: USB disconnect, device number 38 11:09:22 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:22 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xd}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:22 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:22 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, 0x0) 11:09:22 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x203}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, 0x0) 11:09:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, 0x0) [ 2981.763525][T26952] Error: Driver 'raw-gadget' is already registered, aborting... [ 2981.763540][T26952] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2981.763562][T26952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2981.771028][T26953] Error: Driver 'raw-gadget' is already registered, aborting... [ 2981.771043][T26953] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) [ 2981.771062][T26953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2981.777303][T26954] Error: Driver 'raw-gadget' is already registered, aborting... [ 2981.777319][T26954] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2981.777337][T26954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2981.791600][T26957] Error: Driver 'raw-gadget' is already registered, aborting... [ 2981.791615][T26957] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x0, 0x2, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) [ 2981.791635][T26957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2982.025236][T15920] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2982.435290][T15920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2982.435324][T15920] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2982.595294][T15920] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2982.595316][T15920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2982.595331][T15920] usb 3-1: Product: syz [ 2982.595341][T15920] usb 3-1: Manufacturer: syz [ 2982.595351][T15920] usb 3-1: SerialNumber: syz [ 2982.636841][T15920] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2983.195268][ T3767] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2983.195632][ T3767] usb 3-1: ath9k_htc: Unable to allocate URBs [ 2983.196065][ T3767] usb 3-1: ath9k_htc: USB layer deinitialized [ 2983.407579][T24041] usb 3-1: USB disconnect, device number 55 11:09:24 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:24 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:24 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:24 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xd}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f0000000000)={0xfc, 0x0, 0x0, 0x0, "bc93016490de7ed55b0c28000000000008af259b000000000200"}) 11:09:24 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x204}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_usb_connect$cdc_ecm(0x3, 0xa0, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0x7f, 0x30, 0xa4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "7b145977"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0xfff}, [@mdlm={0x15, 0x24, 0x12, 0x40}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7c, 0x1, 0x4c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x1, 0x90, 0x8, 0x40, 0x81}, 0x4e, &(0x7f0000000100)={0x5, 0xf, 0x4e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x4, 0x1b0}, @ssp_cap={0x10, 0x10, 0xa, 0x20, 0x1, 0x4, 0xf00f, 0x7, [0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b1c1f804fb224f1b6caa3b6ca6009e9f"}, @generic={0x11, 0x10, 0x3, "56d7995cda0eb428dbc35bea5be0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x0, 0x0, 0xb77}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}, {0x5b, &(0x7f00000001c0)=@string={0x5b, 0x3, "a0aae2217e8ff41f379db0b7c99970c5681411827d88385f7510cff83acc07a068aefff31416c791b1fa02eb8429db8075e30225ef061900fcdafc8960a1f7a6a9c0320b884d401118bb47f074804aaf2784ba0e13e7daaf30"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x82, &(0x7f00000002c0)=@string={0x82, 0x3, "6caec39c6dee2d07e6d0af77ba2fb181bb1b3ef3d3c942df9fc8cabd59725a76e1ea71ae7e76672b60f8244f362f7f0bc262c396f6d92c18ab3b68605fdb1ecd4349c73b60bf870846e34633edc2cbeb0212d963bb2bf886bbd819d0f1cc326a151df69e66175b5813cc4303154f03367abc31ec6d72bbba896de2cca2edef86"}}]}) syz_usb_connect$cdc_ecm(0x5, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x9, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x7a, 0x2, 0x2, 0x6, 0x0, 0x1f, {{0xb, 0x24, 0x6, 0x0, 0x0, "f187b5126f40"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x3, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0xf, 0x80, 0xff}, @obex={0x5, 0x24, 0x15, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x32, 0x8}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0xff, 0x0, 0x8, 0x78}, 0x24, &(0x7f0000000940)={0x5, 0xf, 0x24, 0x2, [@ss_cap={0x0, 0x10, 0x3, 0x60cfed396782cf4e, 0x4, 0x4, 0x3, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c1fb44fe03a5003a63e89c582bf7652"}]}, 0x2, [{0x81, &(0x7f0000000980)=@string={0x81, 0x3, "7b0d0fc105962ab908b7fec886b9ccf04a53a8290ec436d6b810679df5636c7e3584721951b787c9edac08ce382ee0b1b61f38a5ab75b1b1ac26ac208d2b6c5f18370c132c76b19b1197ca5d96e7e340c4aacb21effbd10aa960f523e3f94be8224b279cedb26d6bfcebb579e0ba4321abdd4b23511f7ba9614c9ca1a41ed6"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44f}}, {0xdd, &(0x7f0000000a80)=@string={0xdd, 0x3, "7bc219e6f2a9db68ad3644dcbeb3fc2563fc56ca31707b2deccd7f69887ef372f6df3707342c802c4221f72925c6ef2d839ab2e41e0fac509f5c54f77798e68c5f1d8a686df15e2d1da85f0d2c828dd9f7196aa3983d7f2bea2495f7ca2b6b3d0a419ff6f58ddefe8f1b0876c0a41d367e47ec652c0509887cf395683c1ecdbd9c64257019af50739bf76fc9316c2c94d10009f01fefad94f6d6e6be824ed4b9f2c462af3b76c684a5896788f563da338243cb83e632d65b23fae7d386a58e06b7b334790fe4ab7caf377b7db4b15b2eabf734e294ce229167ac5e"}}]}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000e00)=""/130) r2 = syz_open_dev$evdev(&(0x7f0000000bc0), 0x5, 0x4c000) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000c00)=""/19) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000c40)={0x2, 0x1, 0x7, 0x2, 0x401, 0x81}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000480)={0x14, &(0x7f0000000400)={0x0, 0xd, 0x10, {0x10, 0xd, "c9609aee085854ca9985069d7471"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f00000004c0)={0x40, 0x12, 0x18, "b0c299f733f716643b031964efa389e59ce299bf7b6f3051"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x46}}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000c80)=""/173) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x81, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0xff, {{0xa, 0x24, 0x6, 0x0, 0x0, "acba53a6a0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xb8, 0xd9, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x6, 0x81}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0x1f, 0x2, 0x9, 0x40, 0x52}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x9e, &(0x7f0000000700)=@string={0x9e, 0x3, "c1724374107685cd1bf350abe8643beffc89a256fbe9df3a3027444fff6f030d884bb268a855d200e97716fba8feed5a2def49c9d92777deea38e0a9986a38ca3d2ad30d8a0fe611a54c860c6f53e4a8f888b3b335dddb98eb3ea1fd3d8624fec455b7acbd5d57a760db141aba5ee3f4a66b21180fc5e2101a9c4d741e7779d1a95ac0a0fe20aac7a271f98c122627c45a47a4136ee5c507329a3d0c"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x83e}}]}) [ 2983.937189][T26976] Error: Driver 'raw-gadget' is already registered, aborting... [ 2983.937205][T26976] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2983.937224][T26976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2983.939347][T26977] Error: Driver 'raw-gadget' is already registered, aborting... [ 2983.939361][T26977] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2983.939380][T26977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2983.942558][T26978] Error: Driver 'raw-gadget' is already registered, aborting... [ 2983.942570][T26978] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2983.942587][T26978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2983.992716][T26982] Error: Driver 'raw-gadget' is already registered, aborting... [ 2983.992731][T26982] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2983.992750][T26982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2983.994009][T26982] Error: Driver 'raw-gadget' is already registered, aborting... [ 2983.994020][T26982] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2983.994038][T26982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2983.998112][T26980] Error: Driver 'raw-gadget' is already registered, aborting... [ 2983.998126][T26980] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2983.998144][T26980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.205219][ T3767] usb 4-1: new high-speed USB device number 4 using dummy_hcd 11:09:25 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x6}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:25 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:25 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:25 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_usb_connect$cdc_ecm(0x3, 0xa0, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0x7f, 0x30, 0xa4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "7b145977"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0xfff}, [@mdlm={0x15, 0x24, 0x12, 0x40}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7c, 0x1, 0x4c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x1, 0x90, 0x8, 0x40, 0x81}, 0x4e, &(0x7f0000000100)={0x5, 0xf, 0x4e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x4, 0x1b0}, @ssp_cap={0x10, 0x10, 0xa, 0x20, 0x1, 0x4, 0xf00f, 0x7, [0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b1c1f804fb224f1b6caa3b6ca6009e9f"}, @generic={0x11, 0x10, 0x3, "56d7995cda0eb428dbc35bea5be0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x0, 0x0, 0xb77}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}, {0x5b, &(0x7f00000001c0)=@string={0x5b, 0x3, "a0aae2217e8ff41f379db0b7c99970c5681411827d88385f7510cff83acc07a068aefff31416c791b1fa02eb8429db8075e30225ef061900fcdafc8960a1f7a6a9c0320b884d401118bb47f074804aaf2784ba0e13e7daaf30"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x82, &(0x7f00000002c0)=@string={0x82, 0x3, "6caec39c6dee2d07e6d0af77ba2fb181bb1b3ef3d3c942df9fc8cabd59725a76e1ea71ae7e76672b60f8244f362f7f0bc262c396f6d92c18ab3b68605fdb1ecd4349c73b60bf870846e34633edc2cbeb0212d963bb2bf886bbd819d0f1cc326a151df69e66175b5813cc4303154f03367abc31ec6d72bbba896de2cca2edef86"}}]}) syz_usb_connect$cdc_ecm(0x5, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x9, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x7a, 0x2, 0x2, 0x6, 0x0, 0x1f, {{0xb, 0x24, 0x6, 0x0, 0x0, "f187b5126f40"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x3, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0xf, 0x80, 0xff}, @obex={0x5, 0x24, 0x15, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x32, 0x8}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0xff, 0x0, 0x8, 0x78}, 0x24, &(0x7f0000000940)={0x5, 0xf, 0x24, 0x2, [@ss_cap={0x0, 0x10, 0x3, 0x60cfed396782cf4e, 0x4, 0x4, 0x3, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c1fb44fe03a5003a63e89c582bf7652"}]}, 0x2, [{0x81, &(0x7f0000000980)=@string={0x81, 0x3, "7b0d0fc105962ab908b7fec886b9ccf04a53a8290ec436d6b810679df5636c7e3584721951b787c9edac08ce382ee0b1b61f38a5ab75b1b1ac26ac208d2b6c5f18370c132c76b19b1197ca5d96e7e340c4aacb21effbd10aa960f523e3f94be8224b279cedb26d6bfcebb579e0ba4321abdd4b23511f7ba9614c9ca1a41ed6"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44f}}, {0xdd, &(0x7f0000000a80)=@string={0xdd, 0x3, "7bc219e6f2a9db68ad3644dcbeb3fc2563fc56ca31707b2deccd7f69887ef372f6df3707342c802c4221f72925c6ef2d839ab2e41e0fac509f5c54f77798e68c5f1d8a686df15e2d1da85f0d2c828dd9f7196aa3983d7f2bea2495f7ca2b6b3d0a419ff6f58ddefe8f1b0876c0a41d367e47ec652c0509887cf395683c1ecdbd9c64257019af50739bf76fc9316c2c94d10009f01fefad94f6d6e6be824ed4b9f2c462af3b76c684a5896788f563da338243cb83e632d65b23fae7d386a58e06b7b334790fe4ab7caf377b7db4b15b2eabf734e294ce229167ac5e"}}]}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000e00)=""/130) r2 = syz_open_dev$evdev(&(0x7f0000000bc0), 0x5, 0x4c000) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000c00)=""/19) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000c40)={0x2, 0x1, 0x7, 0x2, 0x401, 0x81}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000480)={0x14, &(0x7f0000000400)={0x0, 0xd, 0x10, {0x10, 0xd, "c9609aee085854ca9985069d7471"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f00000004c0)={0x40, 0x12, 0x18, "b0c299f733f716643b031964efa389e59ce299bf7b6f3051"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x46}}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000c80)=""/173) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x81, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0xff, {{0xa, 0x24, 0x6, 0x0, 0x0, "acba53a6a0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xb8, 0xd9, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x6, 0x81}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0x1f, 0x2, 0x9, 0x40, 0x52}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x9e, &(0x7f0000000700)=@string={0x9e, 0x3, "c1724374107685cd1bf350abe8643beffc89a256fbe9df3a3027444fff6f030d884bb268a855d200e97716fba8feed5a2def49c9d92777deea38e0a9986a38ca3d2ad30d8a0fe611a54c860c6f53e4a8f888b3b335dddb98eb3ea1fd3d8624fec455b7acbd5d57a760db141aba5ee3f4a66b21180fc5e2101a9c4d741e7779d1a95ac0a0fe20aac7a271f98c122627c45a47a4136ee5c507329a3d0c"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x83e}}]}) [ 2984.474398][T26985] Error: Driver 'raw-gadget' is already registered, aborting... [ 2984.474436][T26985] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2984.474456][T26985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.479254][T26986] Error: Driver 'raw-gadget' is already registered, aborting... [ 2984.479269][T26986] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2984.479286][T26986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.488172][T26988] Error: Driver 'raw-gadget' is already registered, aborting... [ 2984.488185][T26988] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2984.488204][T26988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.544944][T26991] Error: Driver 'raw-gadget' is already registered, aborting... [ 2984.544960][T26991] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2984.544978][T26991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.551663][T26992] Error: Driver 'raw-gadget' is already registered, aborting... [ 2984.551679][T26992] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2984.551697][T26992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.552789][T26992] Error: Driver 'raw-gadget' is already registered, aborting... [ 2984.552800][T26992] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2984.552817][T26992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.571155][ T3767] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 516 [ 2984.735314][ T3767] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2984.735336][ T3767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2984.735350][ T3767] usb 4-1: Product: syz [ 2984.735359][ T3767] usb 4-1: Manufacturer: syz [ 2984.735369][ T3767] usb 4-1: SerialNumber: syz [ 2984.765469][T26975] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 2984.786228][ T3767] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:09:25 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:25 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:25 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x6}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2984.997452][T26994] Error: Driver 'raw-gadget' is already registered, aborting... [ 2984.997469][T26994] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2984.997488][T26994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2985.015352][T26996] Error: Driver 'raw-gadget' is already registered, aborting... [ 2985.015367][T26996] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2985.015386][T26996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:25 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) [ 2985.025532][T26998] Error: Driver 'raw-gadget' is already registered, aborting... [ 2985.025546][T26998] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2985.025565][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2985.080530][T27000] Error: Driver 'raw-gadget' is already registered, aborting... [ 2985.080546][T27000] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2985.080565][T27000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2985.445278][T15920] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2985.650715][T24041] usb 4-1: USB disconnect, device number 4 11:09:26 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x205}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:26 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_usb_connect$cdc_ecm(0x3, 0xa0, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0x7f, 0x30, 0xa4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x9, 0x24, 0x6, 0x0, 0x0, "7b145977"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0xfff}, [@mdlm={0x15, 0x24, 0x12, 0x40}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7c, 0x1, 0x4c}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x1, 0x90, 0x8, 0x40, 0x81}, 0x4e, &(0x7f0000000100)={0x5, 0xf, 0x4e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x4, 0x1b0}, @ssp_cap={0x10, 0x10, 0xa, 0x20, 0x1, 0x4, 0xf00f, 0x7, [0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b1c1f804fb224f1b6caa3b6ca6009e9f"}, @generic={0x11, 0x10, 0x3, "56d7995cda0eb428dbc35bea5be0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x0, 0x0, 0xb77}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}, {0x5b, &(0x7f00000001c0)=@string={0x5b, 0x3, "a0aae2217e8ff41f379db0b7c99970c5681411827d88385f7510cff83acc07a068aefff31416c791b1fa02eb8429db8075e30225ef061900fcdafc8960a1f7a6a9c0320b884d401118bb47f074804aaf2784ba0e13e7daaf30"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x82, &(0x7f00000002c0)=@string={0x82, 0x3, "6caec39c6dee2d07e6d0af77ba2fb181bb1b3ef3d3c942df9fc8cabd59725a76e1ea71ae7e76672b60f8244f362f7f0bc262c396f6d92c18ab3b68605fdb1ecd4349c73b60bf870846e34633edc2cbeb0212d963bb2bf886bbd819d0f1cc326a151df69e66175b5813cc4303154f03367abc31ec6d72bbba896de2cca2edef86"}}]}) syz_usb_connect$cdc_ecm(0x5, 0x5f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x9, 0x90, 0x3f, [{{0x9, 0x4, 0x0, 0x7a, 0x2, 0x2, 0x6, 0x0, 0x1f, {{0xb, 0x24, 0x6, 0x0, 0x0, "f187b5126f40"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xffff, 0x3, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0xf, 0x80, 0xff}, @obex={0x5, 0x24, 0x15, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x32, 0x8}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0xff, 0x0, 0x8, 0x78}, 0x24, &(0x7f0000000940)={0x5, 0xf, 0x24, 0x2, [@ss_cap={0x0, 0x10, 0x3, 0x60cfed396782cf4e, 0x4, 0x4, 0x3, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c1fb44fe03a5003a63e89c582bf7652"}]}, 0x2, [{0x81, &(0x7f0000000980)=@string={0x81, 0x3, "7b0d0fc105962ab908b7fec886b9ccf04a53a8290ec436d6b810679df5636c7e3584721951b787c9edac08ce382ee0b1b61f38a5ab75b1b1ac26ac208d2b6c5f18370c132c76b19b1197ca5d96e7e340c4aacb21effbd10aa960f523e3f94be8224b279cedb26d6bfcebb579e0ba4321abdd4b23511f7ba9614c9ca1a41ed6"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44f}}, {0xdd, &(0x7f0000000a80)=@string={0xdd, 0x3, "7bc219e6f2a9db68ad3644dcbeb3fc2563fc56ca31707b2deccd7f69887ef372f6df3707342c802c4221f72925c6ef2d839ab2e41e0fac509f5c54f77798e68c5f1d8a686df15e2d1da85f0d2c828dd9f7196aa3983d7f2bea2495f7ca2b6b3d0a419ff6f58ddefe8f1b0876c0a41d367e47ec652c0509887cf395683c1ecdbd9c64257019af50739bf76fc9316c2c94d10009f01fefad94f6d6e6be824ed4b9f2c462af3b76c684a5896788f563da338243cb83e632d65b23fae7d386a58e06b7b334790fe4ab7caf377b7db4b15b2eabf734e294ce229167ac5e"}}]}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000e00)=""/130) r2 = syz_open_dev$evdev(&(0x7f0000000bc0), 0x5, 0x4c000) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000c00)=""/19) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000c40)={0x2, 0x1, 0x7, 0x2, 0x401, 0x81}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000480)={0x14, &(0x7f0000000400)={0x0, 0xd, 0x10, {0x10, 0xd, "c9609aee085854ca9985069d7471"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f00000004c0)={0x40, 0x12, 0x18, "b0c299f733f716643b031964efa389e59ce299bf7b6f3051"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x46}}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000c80)=""/173) syz_usb_connect$cdc_ecm(0x6, 0x59, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x81, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0xff, {{0xa, 0x24, 0x6, 0x0, 0x0, "acba53a6a0"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0xb8, 0xd9, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x8, 0x4e}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x6, 0x81}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0x1f, 0x2, 0x9, 0x40, 0x52}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x9e, &(0x7f0000000700)=@string={0x9e, 0x3, "c1724374107685cd1bf350abe8643beffc89a256fbe9df3a3027444fff6f030d884bb268a855d200e97716fba8feed5a2def49c9d92777deea38e0a9986a38ca3d2ad30d8a0fe611a54c860c6f53e4a8f888b3b335dddb98eb3ea1fd3d8624fec455b7acbd5d57a760db141aba5ee3f4a66b21180fc5e2101a9c4d741e7779d1a95ac0a0fe20aac7a271f98c122627c45a47a4136ee5c507329a3d0c"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x83e}}]}) 11:09:26 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:26 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x0, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:26 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x6}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:26 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) [ 2986.184315][T27006] sysfs: cannot create duplicate filename '/bus/gadget/drivers/raw-gadget' [ 2986.184335][T27006] CPU: 0 PID: 27006 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-00076-g508aeb54e4f0 #0 [ 2986.184365][T27006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2986.184379][T27006] Call Trace: [ 2986.184386][T27006] [ 2986.184394][T27006] dump_stack_lvl+0xcd/0x134 [ 2986.184424][T27006] sysfs_warn_dup.cold+0x1c/0x29 [ 2986.184452][T27006] sysfs_create_dir_ns+0x233/0x290 [ 2986.184479][T27006] ? sysfs_create_mount_point+0xb0/0xb0 [ 2986.184506][T27006] ? rwlock_bug.part.0+0x90/0x90 [ 2986.184534][T27006] ? do_raw_spin_unlock+0x171/0x230 [ 2986.184572][T27006] kobject_add_internal+0x2ce/0x900 [ 2986.184598][T27006] kobject_init_and_add+0x101/0x160 [ 2986.184606][T27008] Error: Driver 'raw-gadget' is already registered, aborting... [ 2986.184618][T27008] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.184624][T27006] ? kobject_create_and_add+0xb0/0xb0 [ 2986.184637][T27008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.184649][T27006] ? lockdep_init_map_type+0x21a/0x7f0 [ 2986.184677][T27006] ? __raw_spin_lock_init+0x36/0x110 [ 2986.184704][T27006] bus_add_driver+0x1ed/0x640 [ 2986.184729][T27006] ? kset_find_obj+0xc2/0x110 [ 2986.184752][T27006] driver_register+0x220/0x3a0 [ 2986.184777][T27006] usb_gadget_register_driver_owner+0xfb/0x1e0 [ 2986.184806][T27006] raw_ioctl+0x188d/0x2730 [ 2986.184836][T27006] ? gadget_suspend+0x10/0x10 [ 2986.184863][T27006] ? gadget_suspend+0x10/0x10 [ 2986.184889][T27006] __x64_sys_ioctl+0x193/0x200 [ 2986.184917][T27006] do_syscall_64+0x35/0xb0 [ 2986.184946][T27006] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2986.184972][T27006] RIP: 0033:0x7fce21a61ec7 [ 2986.184992][T27006] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2986.185017][T27006] RSP: 002b:00007fce211d6098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2986.185042][T27006] RAX: ffffffffffffffda RBX: 00007fce211d7110 RCX: 00007fce21a61ec7 [ 2986.185060][T27006] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 2986.185076][T27006] RBP: 0000000000000003 R08: 000000000000ffff R09: 000000000000000b [ 2986.185091][T27006] R10: 00007fce211d6140 R11: 0000000000000246 R12: 0000000000000000 [ 2986.185107][T27006] R13: 0000000000000000 R14: 0000000020000000 R15: 0000000000000000 [ 2986.185128][T27006] [ 2986.185198][T27006] kobject_add_internal failed for raw-gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 2986.185222][T27006] UDC core: USB Raw Gadget: driver registration failed: -17 [ 2986.185241][T27006] misc raw-gadget: fail, usb_gadget_register_driver returned -17 [ 2986.198244][T27010] Error: Driver 'raw-gadget' is already registered, aborting... [ 2986.198259][T27010] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.198278][T27010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.207193][T27012] Error: Driver 'raw-gadget' is already registered, aborting... [ 2986.207208][T27012] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.207227][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.209007][T27009] Error: Driver 'raw-gadget' is already registered, aborting... [ 2986.209020][T27009] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.209038][T27009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.210146][T27009] Error: Driver 'raw-gadget' is already registered, aborting... [ 2986.210158][T27009] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.210174][T27009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.446551][T23938] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2986.515627][T15920] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2986.515797][T15920] ath9k_htc: Failed to initialize the device [ 2986.522881][T24041] usb 4-1: ath9k_htc: USB layer deinitialized 11:09:27 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x0, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1000, 0x424c20) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/193) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000140)=""/47) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:27 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) 11:09:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000006000008af259b"}) 11:09:27 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x206}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2986.720016][T27014] Error: Driver 'raw-gadget' is already registered, aborting... [ 2986.720033][T27014] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.720060][T27014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.758070][T27017] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:27 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x2d}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000100)=0x3) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/70) [ 2986.758087][T27017] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.758106][T27017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.772884][T27021] Error: Driver 'raw-gadget' is already registered, aborting... [ 2986.772899][T27021] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.772918][T27021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000100)=0x3) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/70) [ 2986.807242][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2986.807284][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2986.819879][T27026] Error: Driver 'raw-gadget' is already registered, aborting... [ 2986.819893][T27026] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2986.819912][T27026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2986.965284][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2986.965306][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2986.965321][T23938] usb 2-1: Product: syz [ 2986.965330][T23938] usb 2-1: Manufacturer: syz [ 2986.965341][T23938] usb 2-1: SerialNumber: syz [ 2987.006300][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2987.565265][T24041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2987.565670][T24041] usb 2-1: ath9k_htc: Unable to allocate URBs [ 2987.566263][T24041] usb 2-1: ath9k_htc: USB layer deinitialized [ 2987.785820][T15920] usb 2-1: USB disconnect, device number 39 11:09:29 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000100)=0x3) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/70) 11:09:29 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x0, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:29 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x207}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:29 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:29 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x2d}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000100)=0x3) [ 2988.297353][T27037] Error: Driver 'raw-gadget' is already registered, aborting... [ 2988.297369][T27037] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2988.297389][T27037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2988.302318][T27036] Error: Driver 'raw-gadget' is already registered, aborting... [ 2988.302333][T27036] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2988.302352][T27036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) 11:09:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) 11:09:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:09:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) [ 2988.320605][T27040] Error: Driver 'raw-gadget' is already registered, aborting... [ 2988.320621][T27040] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2988.320640][T27040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:29 executing program 0: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) [ 2988.565200][T24041] usb 6-1: new high-speed USB device number 92 using dummy_hcd 11:09:29 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:29 executing program 0: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) 11:09:29 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:29 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:29 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x218}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2988.843187][T27057] Error: Driver 'raw-gadget' is already registered, aborting... [ 2988.843203][T27057] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2988.843223][T27057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2988.843939][T27058] Error: Driver 'raw-gadget' is already registered, aborting... [ 2988.843951][T27058] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2988.843969][T27058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2988.857229][T27061] Error: Driver 'raw-gadget' is already registered, aborting... [ 2988.857244][T27061] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2988.857273][T27061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2989.235341][T24041] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2989.235364][T24041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2989.235378][T24041] usb 6-1: Product: syz [ 2989.235388][T24041] usb 6-1: Manufacturer: syz [ 2989.235398][T24041] usb 6-1: SerialNumber: syz [ 2989.285878][T24041] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2989.865328][T23938] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2990.079186][T15920] usb 6-1: USB disconnect, device number 92 11:09:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000002c0)=""/112) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/76) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x4800) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000180)=""/64) 11:09:31 executing program 0: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) 11:09:31 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:31 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:31 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x248}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:31 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000002c0)=""/112) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/76) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x4800) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000180)=""/64) 11:09:31 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) [ 2990.634166][T27073] Error: Driver 'raw-gadget' is already registered, aborting... [ 2990.634183][T27073] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2990.634202][T27073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2990.644034][T27071] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:31 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) 11:09:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000002c0)=""/112) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/76) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x4800) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000180)=""/64) 11:09:31 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) 11:09:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000002c0)=""/112) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/76) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x4800) 11:09:31 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) [ 2990.644048][T27071] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2990.644067][T27071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:31 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) [ 2990.915200][T23938] ath9k_htc 6-1:45.0: ath9k_htc: Target is unresponsive [ 2990.915208][ T3767] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2990.915325][T23938] ath9k_htc: Failed to initialize the device [ 2990.915677][T15920] usb 6-1: ath9k_htc: USB layer deinitialized 11:09:31 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000002c0)=""/112) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/76) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000380)=0x1) 11:09:31 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x2, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) [ 2991.193842][T27096] Error: Driver 'raw-gadget' is already registered, aborting... [ 2991.193858][T27096] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2991.193878][T27096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2991.345372][ T3767] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2991.345421][ T3767] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2991.565322][ T3767] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2991.565356][ T3767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.565372][ T3767] usb 5-1: Product: syz [ 2991.565382][ T3767] usb 5-1: Manufacturer: syz [ 2991.565392][ T3767] usb 5-1: SerialNumber: syz [ 2991.606585][ T3767] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2992.205274][T15920] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2992.205630][T15920] usb 5-1: ath9k_htc: Unable to allocate URBs [ 2992.206215][T15920] usb 5-1: ath9k_htc: USB layer deinitialized [ 2992.425725][T23938] usb 5-1: USB disconnect, device number 54 11:09:33 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:33 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:33 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x24c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 11:09:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) r6 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, 0x0) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000002c0)=""/112) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/76) 11:09:33 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 11:09:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) r5 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000002c0)=""/112) 11:09:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) [ 2992.949103][T27106] Error: Driver 'raw-gadget' is already registered, aborting... [ 2992.949119][T27106] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2992.949139][T27106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2992.966468][T27108] Error: Driver 'raw-gadget' is already registered, aborting... [ 2992.966485][T27108] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) r5 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0) 11:09:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x28, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd4a"}) 11:09:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x0) [ 2992.966505][T27108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2993.215200][T15920] usb 4-1: new high-speed USB device number 5 using dummy_hcd 11:09:34 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) [ 2993.485322][T27124] Error: Driver 'raw-gadget' is already registered, aborting... [ 2993.485338][T27124] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2993.485357][T27124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2993.645293][T15920] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 588 [ 2993.815607][T15920] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2993.815629][T15920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.815643][T15920] usb 4-1: Product: syz [ 2993.815653][T15920] usb 4-1: Manufacturer: syz [ 2993.815664][T15920] usb 4-1: SerialNumber: syz [ 2993.835553][T27100] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 2993.856033][T15920] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2994.415296][T15920] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2994.619485][T23938] usb 4-1: USB disconnect, device number 5 11:09:35 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x268}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f000001a340)=""/102379) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x40d2) 11:09:35 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:35 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) 11:09:35 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) 11:09:36 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f000001a340)=""/102379) [ 2995.156238][T27134] Error: Driver 'raw-gadget' is already registered, aborting... [ 2995.156253][T27134] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2995.156273][T27134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2995.168998][T27136] Error: Driver 'raw-gadget' is already registered, aborting... [ 2995.169013][T27136] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)) 11:09:36 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000200)={0x81, 0x2, 0x101, 0x6, 0x1, 0x8}) 11:09:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)) [ 2995.169033][T27136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:36 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) [ 2995.445213][T24041] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2995.475269][T15920] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2995.475376][T15920] ath9k_htc: Failed to initialize the device [ 2995.475733][T23938] usb 4-1: ath9k_htc: USB layer deinitialized 11:09:36 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x26c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)) 11:09:36 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x10000) [ 2995.693971][T27153] Error: Driver 'raw-gadget' is already registered, aborting... [ 2995.693987][T27153] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2995.694006][T27153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2995.835301][T24041] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2995.835346][T24041] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2996.005305][T24041] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2996.005339][T24041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2996.005364][T24041] usb 2-1: Product: syz [ 2996.005381][T24041] usb 2-1: Manufacturer: syz [ 2996.005400][T24041] usb 2-1: SerialNumber: syz [ 2996.046321][T24041] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2996.605286][T24041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2996.605646][T24041] usb 2-1: ath9k_htc: Unable to allocate URBs [ 2996.606312][T24041] usb 2-1: ath9k_htc: USB layer deinitialized [ 2996.835822][T15920] usb 2-1: USB disconnect, device number 40 11:09:38 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:38 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:38 executing program 2: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:38 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000280)) 11:09:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32"}) 11:09:38 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x274}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32"}) 11:09:38 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x0) 11:09:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32"}) [ 2997.343248][T27163] Error: Driver 'raw-gadget' is already registered, aborting... [ 2997.343264][T27163] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2997.343284][T27163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2997.357696][T27166] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:38 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fd"}) 11:09:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fd"}) [ 2997.357711][T27166] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2997.357759][T27166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2997.625218][T24041] usb 4-1: new high-speed USB device number 6 using dummy_hcd 11:09:38 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:38 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCSKEYCODE_V2(r1, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x1e, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fd"}) 11:09:38 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:38 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 2997.887401][T27185] Error: Driver 'raw-gadget' is already registered, aborting... [ 2997.887418][T27185] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2997.887438][T27185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2997.890983][T27187] Error: Driver 'raw-gadget' is already registered, aborting... [ 2997.890999][T27187] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2997.891019][T27187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2997.914385][T27188] Error: Driver 'raw-gadget' is already registered, aborting... [ 2997.914408][T27188] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2997.914427][T27188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2997.985328][T24041] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 628 [ 2998.145259][T24041] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2998.145281][T24041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2998.145295][T24041] usb 4-1: Product: syz [ 2998.145305][T24041] usb 4-1: Manufacturer: syz [ 2998.145315][T24041] usb 4-1: SerialNumber: syz [ 2998.172544][T27161] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 2998.186041][T24041] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2998.745266][T24041] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2998.950557][T23938] usb 4-1: USB disconnect, device number 6 11:09:40 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x27a}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:40 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x23, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a"}) 11:09:40 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:40 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:40 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x23, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a"}) 11:09:40 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) [ 2999.482884][T27196] Error: Driver 'raw-gadget' is already registered, aborting... [ 2999.482901][T27196] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2999.482922][T27196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2999.487122][T27198] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x23, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a"}) 11:09:40 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x26, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4"}) 11:09:40 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) [ 2999.487135][T27198] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2999.487153][T27198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2999.521207][T27202] Error: Driver 'raw-gadget' is already registered, aborting... [ 2999.521224][T27202] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2999.521243][T27202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2999.745221][T15920] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2999.805221][T24041] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2999.805372][T24041] ath9k_htc: Failed to initialize the device [ 2999.805647][T23938] usb 4-1: ath9k_htc: USB layer deinitialized 11:09:40 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x300}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x26, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4"}) 11:09:40 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:40 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:40 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3000.054697][T27219] Error: Driver 'raw-gadget' is already registered, aborting... [ 3000.054713][T27219] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3000.054733][T27219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3000.062943][T27221] Error: Driver 'raw-gadget' is already registered, aborting... [ 3000.062957][T27221] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3000.062976][T27221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3000.072524][T27222] Error: Driver 'raw-gadget' is already registered, aborting... [ 3000.072537][T27222] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3000.072556][T27222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3000.105321][T15920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3000.105386][T15920] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3000.275312][T15920] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3000.275338][T15920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3000.275353][T15920] usb 5-1: Product: syz [ 3000.275362][T15920] usb 5-1: Manufacturer: syz [ 3000.275373][T15920] usb 5-1: SerialNumber: syz [ 3000.325991][T15920] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3000.995301][ T3767] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3000.995675][ T3767] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3000.996342][ T3767] usb 5-1: ath9k_htc: USB layer deinitialized [ 3001.225825][T23938] usb 5-1: USB disconnect, device number 55 11:09:42 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x26, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4"}) 11:09:42 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x700}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:42 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:42 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x27, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd"}) 11:09:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x27, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd"}) 11:09:42 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x4, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) [ 3001.730604][T27232] Error: Driver 'raw-gadget' is already registered, aborting... [ 3001.730621][T27232] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3001.730638][T27232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3001.732565][T27231] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x27, &(0x7f0000000000)="619952aa7e902627bad4749f0c391e385fd50e32ce90fab546695cf943fdf862f5b73a3a19c4dd"}) 11:09:42 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x4, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:42 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x4, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) [ 3001.732577][T27231] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3001.732594][T27231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3001.750738][T27234] Error: Driver 'raw-gadget' is already registered, aborting... [ 3001.750753][T27234] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3001.750773][T27234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3002.015204][T23938] usb 3-1: new high-speed USB device number 56 using dummy_hcd 11:09:43 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:43 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x26c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:43 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3002.272014][T27250] Error: Driver 'raw-gadget' is already registered, aborting... [ 3002.272031][T27250] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3002.272053][T27250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3002.274802][T27252] Error: Driver 'raw-gadget' is already registered, aborting... [ 3002.274816][T27252] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3002.274836][T27252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3002.278426][T27254] Error: Driver 'raw-gadget' is already registered, aborting... [ 3002.278440][T27254] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3002.278458][T27254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3002.445252][T23938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3002.445290][T23938] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3002.635315][T23938] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3002.635353][T23938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3002.635379][T23938] usb 3-1: Product: syz [ 3002.635397][T23938] usb 3-1: Manufacturer: syz [ 3002.635416][T23938] usb 3-1: SerialNumber: syz [ 3002.676285][T23938] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3003.295265][T24041] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3003.295640][T24041] usb 3-1: ath9k_htc: Unable to allocate URBs [ 3003.296051][T24041] usb 3-1: ath9k_htc: USB layer deinitialized [ 3003.515584][T23938] usb 3-1: USB disconnect, device number 56 11:09:44 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:44 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0xf00}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:44 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:44 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0xff0000, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:44 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x26c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x0, 0x1) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) [ 3004.032019][T27262] Error: Driver 'raw-gadget' is already registered, aborting... [ 3004.032035][T27262] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3004.032056][T27262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3004.045959][T27264] Error: Driver 'raw-gadget' is already registered, aborting... [ 3004.045975][T27264] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:44 executing program 5: syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:44 executing program 5: syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:44 executing program 5: syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x0, 0x20, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) [ 3004.045994][T27264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3004.050358][T27266] Error: Driver 'raw-gadget' is already registered, aborting... [ 3004.050371][T27266] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3004.050390][T27266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3004.051506][T27260] Error: Driver 'raw-gadget' is already registered, aborting... [ 3004.051518][T27260] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3004.051536][T27260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, 0x0) [ 3004.305196][ T3767] usb 2-1: new high-speed USB device number 41 using dummy_hcd 11:09:45 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:45 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x1f00}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, 0x0) [ 3004.567826][T27280] Error: Driver 'raw-gadget' is already registered, aborting... [ 3004.567842][T27280] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3004.567861][T27280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3004.594747][T27284] Error: Driver 'raw-gadget' is already registered, aborting... [ 3004.594763][T27284] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3004.594782][T27284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3004.715297][ T3767] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3004.715329][ T3767] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3004.915306][ T3767] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3004.915329][ T3767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3004.915343][ T3767] usb 2-1: Product: syz [ 3004.915353][ T3767] usb 2-1: Manufacturer: syz [ 3004.915363][ T3767] usb 2-1: SerialNumber: syz [ 3004.966144][ T3767] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3005.565265][ T3767] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3005.565639][ T3767] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3005.566243][ T3767] usb 2-1: ath9k_htc: USB layer deinitialized [ 3005.785609][T15920] usb 2-1: USB disconnect, device number 41 11:09:47 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:47 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x26c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:47 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, 0x0) 11:09:47 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:47 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x3100}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x80, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) [ 3006.299977][T27291] Error: Driver 'raw-gadget' is already registered, aborting... [ 3006.299994][T27291] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3006.300013][T27291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.301077][T27292] Error: Driver 'raw-gadget' is already registered, aborting... [ 3006.301089][T27292] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3006.301107][T27292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0xffffffff, "bc93276490de7ed55b0c28067d40de33af259b00"}) 11:09:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x80, 0x0, "bc93276490de7ed55b0c28067d40de33af259b00"}) [ 3006.311057][T27293] Error: Driver 'raw-gadget' is already registered, aborting... [ 3006.311072][T27293] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3006.311090][T27293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.330396][T27296] Error: Driver 'raw-gadget' is already registered, aborting... [ 3006.330412][T27296] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3006.330431][T27296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:47 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3006.448473][T27308] Error: Driver 'raw-gadget' is already registered, aborting... [ 3006.448490][T27308] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3006.448509][T27308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.565238][T23938] usb 5-1: new high-speed USB device number 56 using dummy_hcd 11:09:47 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x4000}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:47 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3006.850826][T27312] Error: Driver 'raw-gadget' is already registered, aborting... [ 3006.850841][T27312] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3006.850861][T27312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.850936][T27311] Error: Driver 'raw-gadget' is already registered, aborting... [ 3006.850948][T27311] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3006.850965][T27311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3006.945222][T23938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3006.945256][T23938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3007.125266][T23938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3007.125289][T23938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3007.125303][T23938] usb 5-1: Product: syz [ 3007.125312][T23938] usb 5-1: Manufacturer: syz [ 3007.125322][T23938] usb 5-1: SerialNumber: syz [ 3007.175813][T23938] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3007.735279][T24041] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3007.735634][T24041] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3007.736343][T24041] usb 5-1: ath9k_htc: USB layer deinitialized [ 3007.965768][T15920] usb 5-1: USB disconnect, device number 56 11:09:49 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x25}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0xff00}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3008.462973][T27319] Error: Driver 'raw-gadget' is already registered, aborting... [ 3008.462991][T27319] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3008.463011][T27319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3008.466972][T27320] Error: Driver 'raw-gadget' is already registered, aborting... [ 3008.466987][T27320] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3008.467008][T27320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3008.475400][T27323] Error: Driver 'raw-gadget' is already registered, aborting... [ 3008.475455][T27323] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3008.475475][T27323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3008.476144][T27321] Error: Driver 'raw-gadget' is already registered, aborting... [ 3008.476157][T27321] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3008.476176][T27321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3008.487408][T27324] Error: Driver 'raw-gadget' is already registered, aborting... [ 3008.487423][T27324] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3008.487443][T27324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3008.765211][T15920] usb 6-1: new high-speed USB device number 93 using dummy_hcd 11:09:49 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x25}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:49 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3009.026843][T27328] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.026859][T27328] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.026880][T27328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.029643][T27329] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.029656][T27329] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.029675][T27329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.032146][T27330] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.032160][T27330] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.032179][T27330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.040175][T27333] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.040187][T27333] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.040206][T27333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.044942][T27334] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.044954][T27334] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.044974][T27334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.395326][T15920] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3009.395359][T15920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3009.395385][T15920] usb 6-1: Product: syz [ 3009.395455][T15920] usb 6-1: Manufacturer: syz [ 3009.395474][T15920] usb 6-1: SerialNumber: syz [ 3009.396947][T15920] usb 6-1: config 0 descriptor?? [ 3009.437663][T15920] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:09:50 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:50 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:50 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x25}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:50 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3009.559677][T27336] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.559692][T27336] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.559712][T27336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.596017][T27339] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.596032][T27339] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.596053][T27339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.599279][T27340] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.599293][T27340] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.599313][T27340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3009.606284][T27342] Error: Driver 'raw-gadget' is already registered, aborting... [ 3009.606298][T27342] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3009.606315][T27342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3010.145301][T15920] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3010.358498][T24041] usb 6-1: USB disconnect, device number 93 11:09:51 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:51 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, [0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:51 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:51 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:51 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:51 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3010.891502][T27352] Error: Driver 'raw-gadget' is already registered, aborting... [ 3010.891519][T27352] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3010.891540][T27352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3010.892686][T27351] Error: Driver 'raw-gadget' is already registered, aborting... [ 3010.892700][T27351] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3010.892719][T27351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3010.894604][T27348] Error: Driver 'raw-gadget' is already registered, aborting... [ 3010.894618][T27348] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3010.894637][T27348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3010.894804][T27349] sysfs: cannot create duplicate filename '/bus/gadget/drivers/raw-gadget' [ 3010.894820][T27349] CPU: 0 PID: 27349 Comm: syz-executor.0 Not tainted 5.19.0-rc3-syzkaller-00076-g508aeb54e4f0 #0 [ 3010.894850][T27349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3010.894865][T27349] Call Trace: [ 3010.894871][T27349] [ 3010.894880][T27349] dump_stack_lvl+0xcd/0x134 [ 3010.894913][T27349] sysfs_warn_dup.cold+0x1c/0x29 [ 3010.894943][T27349] sysfs_create_dir_ns+0x233/0x290 [ 3010.894969][T27349] ? sysfs_create_mount_point+0xb0/0xb0 [ 3010.894995][T27349] ? rwlock_bug.part.0+0x90/0x90 [ 3010.895023][T27349] ? do_raw_spin_unlock+0x171/0x230 [ 3010.895052][T27349] kobject_add_internal+0x2ce/0x900 [ 3010.895078][T27349] kobject_init_and_add+0x101/0x160 [ 3010.895102][T27349] ? kobject_create_and_add+0xb0/0xb0 [ 3010.895125][T27349] ? lockdep_init_map_type+0x21a/0x7f0 [ 3010.895150][T27349] ? __raw_spin_lock_init+0x36/0x110 [ 3010.895177][T27349] bus_add_driver+0x1ed/0x640 [ 3010.895201][T27349] ? kset_find_obj+0xc2/0x110 [ 3010.895223][T27349] driver_register+0x220/0x3a0 [ 3010.895249][T27349] usb_gadget_register_driver_owner+0xfb/0x1e0 [ 3010.895276][T27349] raw_ioctl+0x188d/0x2730 [ 3010.895304][T27349] ? gadget_suspend+0x10/0x10 [ 3010.895330][T27349] ? gadget_suspend+0x10/0x10 [ 3010.895356][T27349] __x64_sys_ioctl+0x193/0x200 [ 3010.895385][T27349] do_syscall_64+0x35/0xb0 [ 3010.895414][T27349] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3010.895441][T27349] RIP: 0033:0x7fe545a2cec7 [ 3010.895459][T27349] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 34 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3010.895484][T27349] RSP: 002b:00007fe5451a1098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3010.895510][T27349] RAX: ffffffffffffffda RBX: 00007fe5451a2110 RCX: 00007fe545a2cec7 [ 3010.895527][T27349] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 3010.895542][T27349] RBP: 0000000000000003 R08: 000000000000ffff R09: 000000000000000b [ 3010.895557][T27349] R10: 00007fe5451a1140 R11: 0000000000000246 R12: 0000000000000000 [ 3010.895575][T27349] R13: 0000000000000000 R14: 0000000020000000 R15: 0000000000000000 [ 3010.895593][T27349] [ 3010.895805][T27349] kobject_add_internal failed for raw-gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 3010.895833][T27349] UDC core: USB Raw Gadget: driver registration failed: -17 [ 3010.895853][T27349] misc raw-gadget: fail, usb_gadget_register_driver returned -17 [ 3010.910692][T27354] Error: Driver 'raw-gadget' is already registered, aborting... [ 3010.910707][T27354] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3010.910726][T27354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.155193][ T3767] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3011.166595][T15920] ath9k_htc 6-1:0.0: ath9k_htc: Target is unresponsive [ 3011.166677][T15920] ath9k_htc: Failed to initialize the device [ 3011.166984][T24041] usb 6-1: ath9k_htc: USB layer deinitialized 11:09:52 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:52 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:52 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:52 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:52 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x0}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3011.424855][T27356] Error: Driver 'raw-gadget' is already registered, aborting... [ 3011.424871][T27356] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3011.424891][T27356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.452509][T27358] Error: Driver 'raw-gadget' is already registered, aborting... [ 3011.452525][T27358] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3011.452545][T27358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.461734][T27360] Error: Driver 'raw-gadget' is already registered, aborting... [ 3011.461749][T27360] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3011.461769][T27360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.469895][T27363] Error: Driver 'raw-gadget' is already registered, aborting... [ 3011.469910][T27363] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3011.469930][T27363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.474509][T27364] Error: Driver 'raw-gadget' is already registered, aborting... [ 3011.474520][T27364] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3011.474539][T27364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3011.515307][ T3767] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3011.515352][ T3767] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3011.675314][ T3767] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3011.675350][ T3767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3011.675374][ T3767] usb 2-1: Product: syz [ 3011.675384][ T3767] usb 2-1: Manufacturer: syz [ 3011.675394][ T3767] usb 2-1: SerialNumber: syz [ 3011.716436][ T3767] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:09:52 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:52 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x60, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3012.002280][T27366] Error: Driver 'raw-gadget' is already registered, aborting... [ 3012.002297][T27366] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3012.002318][T27366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3012.009533][T27368] Error: Driver 'raw-gadget' is already registered, aborting... [ 3012.009553][T27368] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3012.009573][T27368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3012.375280][ T3767] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3012.375662][ T3767] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3012.376354][ T3767] usb 2-1: ath9k_htc: USB layer deinitialized [ 3012.585710][T24041] usb 2-1: USB disconnect, device number 42 11:09:53 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, [0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:53 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x5}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:53 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:53 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:53 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x0}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/38) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x11, 0x51, &(0x7f0000000000)="3dec77cfecf289b407880798c913ed62bc2443e4b8ed9261f2d55a9222da76f7a2468b269c00bf94d90e820aef7d3bd676ea6a20cc899646096b9e86979c51cdcc966dfd2648178cc30daf97aa455cc191"}) 11:09:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/38) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x11, 0x51, &(0x7f0000000000)="3dec77cfecf289b407880798c913ed62bc2443e4b8ed9261f2d55a9222da76f7a2468b269c00bf94d90e820aef7d3bd676ea6a20cc899646096b9e86979c51cdcc966dfd2648178cc30daf97aa455cc191"}) 11:09:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/38) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x11, 0x51, &(0x7f0000000000)="3dec77cfecf289b407880798c913ed62bc2443e4b8ed9261f2d55a9222da76f7a2468b269c00bf94d90e820aef7d3bd676ea6a20cc899646096b9e86979c51cdcc966dfd2648178cc30daf97aa455cc191"}) [ 3013.112671][T27376] Error: Driver 'raw-gadget' is already registered, aborting... [ 3013.112686][T27376] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3013.112705][T27376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3013.113100][T27377] Error: Driver 'raw-gadget' is already registered, aborting... [ 3013.113113][T27377] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3013.113131][T27377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:09:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/38) 11:09:54 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) 11:09:54 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) 11:09:54 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) [ 3013.127325][T27379] Error: Driver 'raw-gadget' is already registered, aborting... [ 3013.127341][T27379] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3013.127360][T27379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3013.129222][T27380] Error: Driver 'raw-gadget' is already registered, aborting... [ 3013.129234][T27380] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3013.129252][T27380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3013.365281][ T3767] usb 5-1: new high-speed USB device number 57 using dummy_hcd 11:09:54 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, [0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:54 executing program 0: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) [ 3013.664262][T27396] Error: Driver 'raw-gadget' is already registered, aborting... [ 3013.664272][T27396] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3013.664284][T27396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3013.785270][ T3767] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3013.785299][ T3767] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3013.985283][ T3767] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3013.985318][ T3767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3013.985355][ T3767] usb 5-1: Product: syz [ 3013.985373][ T3767] usb 5-1: Manufacturer: syz [ 3013.985384][ T3767] usb 5-1: SerialNumber: syz [ 3014.026244][ T3767] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3014.605289][T15920] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3014.605649][T15920] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3014.606231][T15920] usb 5-1: ath9k_htc: USB layer deinitialized [ 3014.835829][ T3767] usb 5-1: USB disconnect, device number 57 11:09:56 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:56 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x6}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:56 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) 11:09:56 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x0}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:56 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, [0x60, 0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:56 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) 11:09:56 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) [ 3015.343883][T27404] Error: Driver 'raw-gadget' is already registered, aborting... [ 3015.343897][T27404] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3015.343919][T27404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3015.351765][T27403] Error: Driver 'raw-gadget' is already registered, aborting... [ 3015.351781][T27403] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:56 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xfc, 0x442) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) 11:09:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x442) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) [ 3015.351800][T27403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3015.355966][T27406] Error: Driver 'raw-gadget' is already registered, aborting... [ 3015.355981][T27406] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3015.356002][T27406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3015.357612][T27408] Error: Driver 'raw-gadget' is already registered, aborting... [ 3015.357625][T27408] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x442) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) 11:09:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x442) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) [ 3015.357644][T27408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3015.605208][ T3767] usb 6-1: new high-speed USB device number 94 using dummy_hcd 11:09:56 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) [ 3015.882406][T27424] Error: Driver 'raw-gadget' is already registered, aborting... [ 3015.882423][T27424] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3015.882443][T27424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3015.985330][ T3767] usb 6-1: config 1 has an invalid interface number: 0 but max is -1 [ 3015.985360][ T3767] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 3016.145305][ T3767] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3016.145327][ T3767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3016.145341][ T3767] usb 6-1: Product: syz [ 3016.145351][ T3767] usb 6-1: Manufacturer: syz [ 3016.145361][ T3767] usb 6-1: SerialNumber: syz [ 3016.195766][ T3767] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3016.765259][ T3767] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3016.977037][T15920] usb 6-1: USB disconnect, device number 94 11:09:58 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x0}}]}}, 0x0) 11:09:58 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:58 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) 11:09:58 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x60, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:58 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0x0, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:58 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:09:58 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) [ 3017.510275][T27430] Error: Driver 'raw-gadget' is already registered, aborting... [ 3017.510289][T27430] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3017.510307][T27430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.527753][T27436] Error: Driver 'raw-gadget' is already registered, aborting... 11:09:58 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)=[0xffffffff, 0x81]) 11:09:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) [ 3017.527767][T27436] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3017.527787][T27436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.540222][T27433] Error: Driver 'raw-gadget' is already registered, aborting... [ 3017.540238][T27433] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3017.540258][T27433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.541384][T27434] Error: Driver 'raw-gadget' is already registered, aborting... [ 3017.541398][T27434] UDC core: USB Raw Gadget: driver registration failed: -16 11:09:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 11:09:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 11:09:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffff]) [ 3017.541416][T27434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.775202][T24041] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 3017.805188][ T3767] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3017.805279][ T3767] ath9k_htc: Failed to initialize the device [ 3017.805700][T15920] usb 6-1: ath9k_htc: USB layer deinitialized 11:09:58 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x0}}]}}, 0x0) 11:09:58 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x18}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3018.058641][T27450] Error: Driver 'raw-gadget' is already registered, aborting... [ 3018.058656][T27450] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3018.058676][T27450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3018.069471][T27452] Error: Driver 'raw-gadget' is already registered, aborting... [ 3018.069485][T27452] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3018.069505][T27452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3018.135329][T24041] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3018.135374][T24041] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3018.345295][T24041] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3018.345329][T24041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3018.345354][T24041] usb 3-1: Product: syz [ 3018.345371][T24041] usb 3-1: Manufacturer: syz [ 3018.345389][T24041] usb 3-1: SerialNumber: syz [ 3018.405882][T24041] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3019.035280][T23938] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3019.035641][T23938] usb 3-1: ath9k_htc: Unable to allocate URBs [ 3019.036046][T23938] usb 3-1: ath9k_htc: USB layer deinitialized [ 3019.245726][T15920] usb 3-1: USB disconnect, device number 57 11:10:00 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:00 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x60, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:00 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x1, 0x0, 0x0, [0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:00 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x0}}]}}, 0x0) 11:10:00 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x48}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) [ 3019.772064][T27459] Error: Driver 'raw-gadget' is already registered, aborting... [ 3019.772081][T27459] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3019.772102][T27459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3019.774266][T27460] Error: Driver 'raw-gadget' is already registered, aborting... [ 3019.774281][T27460] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3019.774299][T27460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:00 executing program 0: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)) [ 3019.777796][T27462] Error: Driver 'raw-gadget' is already registered, aborting... [ 3019.777809][T27462] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3019.777829][T27462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3019.785991][T27464] Error: Driver 'raw-gadget' is already registered, aborting... [ 3019.786005][T27464] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3019.786024][T27464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3020.025186][T15920] usb 6-1: new high-speed USB device number 95 using dummy_hcd 11:10:01 executing program 0: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)) 11:10:01 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x4c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:01 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:01 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x1, 0x0, 0x0, [0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3020.328455][T27480] Error: Driver 'raw-gadget' is already registered, aborting... [ 3020.328470][T27480] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3020.328489][T27480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3020.355748][T27483] Error: Driver 'raw-gadget' is already registered, aborting... [ 3020.355764][T27483] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3020.355784][T27483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3020.360137][T27484] Error: Driver 'raw-gadget' is already registered, aborting... [ 3020.360150][T27484] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3020.360169][T27484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3020.392887][T15920] usb 6-1: config 1 has an invalid interface number: 0 but max is -1 [ 3020.392918][T15920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 3020.545344][T15920] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3020.545379][T15920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3020.545405][T15920] usb 6-1: Product: syz [ 3020.545424][T15920] usb 6-1: Manufacturer: syz [ 3020.545442][T15920] usb 6-1: SerialNumber: syz [ 3020.586535][T15920] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3021.145267][T15920] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3021.348818][ T3767] usb 6-1: USB disconnect, device number 95 11:10:02 executing program 5: 11:10:02 executing program 0: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)) 11:10:02 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x60, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:02 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x68}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:02 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:02 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x1, 0x0, 0x0, [0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:02 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:02 executing program 5: 11:10:02 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) [ 3021.875248][T27491] Error: Driver 'raw-gadget' is already registered, aborting... [ 3021.875264][T27491] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3021.875284][T27491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3021.880527][T27493] Error: Driver 'raw-gadget' is already registered, aborting... [ 3021.880543][T27493] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:02 executing program 5: 11:10:02 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:02 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) [ 3021.880563][T27493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3021.890246][T27494] Error: Driver 'raw-gadget' is already registered, aborting... [ 3021.890260][T27494] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3021.890280][T27494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) [ 3022.135211][T23938] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 3022.195247][T15920] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3022.195340][T15920] ath9k_htc: Failed to initialize the device [ 3022.195671][ T3767] usb 6-1: ath9k_htc: USB layer deinitialized 11:10:03 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x60, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:03 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x6c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3022.413091][T27512] Error: Driver 'raw-gadget' is already registered, aborting... [ 3022.413107][T27512] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3022.413128][T27512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3022.415206][T27513] Error: Driver 'raw-gadget' is already registered, aborting... [ 3022.415220][T27513] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3022.415238][T27513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3022.545360][T23938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3022.546457][T23938] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3022.745299][T23938] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3022.745336][T23938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3022.745361][T23938] usb 3-1: Product: syz [ 3022.745381][T23938] usb 3-1: Manufacturer: syz [ 3022.745398][T23938] usb 3-1: SerialNumber: syz [ 3022.786632][T23938] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3023.385277][T24041] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3023.385723][T24041] usb 3-1: ath9k_htc: Unable to allocate URBs [ 3023.386109][T24041] usb 3-1: ath9k_htc: USB layer deinitialized [ 3023.595794][ T3767] usb 3-1: USB disconnect, device number 58 11:10:04 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, 0x0) 11:10:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)) 11:10:04 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x0, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:04 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 11:10:04 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x60, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:04 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x74}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)) 11:10:04 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)) [ 3024.118630][T27521] Error: Driver 'raw-gadget' is already registered, aborting... [ 3024.118647][T27521] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3024.118667][T27521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3024.135353][T27522] Error: Driver 'raw-gadget' is already registered, aborting... [ 3024.135369][T27522] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3024.135388][T27522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:05 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000100)) 11:10:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 11:10:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) [ 3024.136778][T27525] Error: Driver 'raw-gadget' is already registered, aborting... [ 3024.136792][T27525] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3024.136811][T27525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:05 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) [ 3024.375266][ T3767] usb 5-1: new high-speed USB device number 58 using dummy_hcd 11:10:05 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, 0x0) 11:10:05 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3024.654050][T27539] Error: Driver 'raw-gadget' is already registered, aborting... [ 3024.654066][T27539] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3024.654087][T27539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3024.660221][T27541] Error: Driver 'raw-gadget' is already registered, aborting... [ 3024.660237][T27541] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3024.660256][T27541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3024.735269][ T3767] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3024.735302][ T3767] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3024.895291][ T3767] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3024.895326][ T3767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3024.895340][ T3767] usb 5-1: Product: syz [ 3024.895351][ T3767] usb 5-1: Manufacturer: syz [ 3024.895361][ T3767] usb 5-1: SerialNumber: syz [ 3024.937135][ T3767] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3025.565270][ T3767] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3025.565629][ T3767] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3025.566261][ T3767] usb 5-1: ath9k_htc: USB layer deinitialized [ 3025.785790][T15920] usb 5-1: USB disconnect, device number 58 11:10:07 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x0, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:07 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x60, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:07 executing program 5: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 11:10:07 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7a}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:07 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:07 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, 0x0) [ 3026.297841][T27549] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.297858][T27549] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.297877][T27549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.300587][T27548] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.300600][T27548] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.300619][T27548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.304504][T27551] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.304518][T27551] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.304536][T27551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.317816][T27553] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.317831][T27553] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.317854][T27553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.565197][T24041] usb 1-1: new high-speed USB device number 103 using dummy_hcd 11:10:07 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:07 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:07 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:07 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x0, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:07 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x9, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3026.849060][T27555] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.849078][T27555] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.849098][T27555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.850745][T27557] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.850758][T27557] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.850776][T27557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.862467][T27560] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.862481][T27560] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.862500][T27560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.872454][T27563] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.872469][T27563] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.872489][T27563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.873810][T27562] Error: Driver 'raw-gadget' is already registered, aborting... [ 3026.873824][T27562] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3026.873843][T27562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.945275][T24041] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3026.945363][T24041] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3027.125263][T24041] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3027.125285][T24041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3027.125299][T24041] usb 1-1: Product: syz [ 3027.125310][T24041] usb 1-1: Manufacturer: syz [ 3027.125320][T24041] usb 1-1: SerialNumber: syz [ 3027.166953][T24041] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:08 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:08 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:08 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x9, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:08 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:08 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3027.375921][T27565] Error: Driver 'raw-gadget' is already registered, aborting... [ 3027.375937][T27565] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3027.375957][T27565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3027.421485][T27572] Error: Driver 'raw-gadget' is already registered, aborting... [ 3027.421501][T27572] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3027.421521][T27572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3027.423139][T27571] Error: Driver 'raw-gadget' is already registered, aborting... [ 3027.423152][T27571] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3027.423170][T27571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3027.426959][T27570] Error: Driver 'raw-gadget' is already registered, aborting... [ 3027.426972][T27570] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3027.426990][T27570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3027.427715][T27573] Error: Driver 'raw-gadget' is already registered, aborting... [ 3027.427726][T27573] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3027.427743][T27573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3027.775245][T23938] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3027.775761][T23938] usb 1-1: ath9k_htc: Unable to allocate URBs [ 3027.776373][T23938] usb 1-1: ath9k_htc: USB layer deinitialized [ 3027.995817][T15920] usb 1-1: USB disconnect, device number 103 11:10:09 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:09 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:09 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x9, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:09 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:09 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:09 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3028.511179][T27580] Error: Driver 'raw-gadget' is already registered, aborting... [ 3028.511195][T27580] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3028.511216][T27580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3028.514107][T27581] Error: Driver 'raw-gadget' is already registered, aborting... [ 3028.514122][T27581] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3028.514141][T27581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3028.523411][T27583] Error: Driver 'raw-gadget' is already registered, aborting... [ 3028.523424][T27583] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3028.523444][T27583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3028.525930][T27584] Error: Driver 'raw-gadget' is already registered, aborting... [ 3028.525943][T27584] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3028.526005][T27584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3028.539480][T27585] Error: Driver 'raw-gadget' is already registered, aborting... [ 3028.539495][T27585] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3028.539514][T27585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3028.795224][T23938] usb 2-1: new high-speed USB device number 43 using dummy_hcd 11:10:09 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:09 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:09 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) 11:10:09 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3029.039204][T27587] Error: Driver 'raw-gadget' is already registered, aborting... [ 3029.039220][T27587] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3029.039240][T27587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3029.073266][T27591] Error: Driver 'raw-gadget' is already registered, aborting... [ 3029.073281][T27591] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3029.073300][T27591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3029.095974][T27596] Error: Driver 'raw-gadget' is already registered, aborting... [ 3029.096015][T27596] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3029.096034][T27596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3029.101156][T27597] Error: Driver 'raw-gadget' is already registered, aborting... [ 3029.101170][T27597] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3029.101189][T27597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3029.215254][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3029.216602][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3029.375256][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3029.375278][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3029.375292][T23938] usb 2-1: Product: syz [ 3029.375302][T23938] usb 2-1: Manufacturer: syz [ 3029.375312][T23938] usb 2-1: SerialNumber: syz [ 3029.416439][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3029.975211][T23938] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3029.975600][T23938] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3029.976186][T23938] usb 2-1: ath9k_htc: USB layer deinitialized [ 3030.195601][T24041] usb 2-1: USB disconnect, device number 43 11:10:11 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:11 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:11 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x5}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:11 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) 11:10:11 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:11 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:11 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:11 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3030.711005][T27608] Error: Driver 'raw-gadget' is already registered, aborting... [ 3030.711021][T27608] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3030.711040][T27608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3030.722918][T27606] Error: Driver 'raw-gadget' is already registered, aborting... [ 3030.722933][T27606] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:11 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:11 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3030.722953][T27606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3030.731091][T27605] Error: Driver 'raw-gadget' is already registered, aborting... [ 3030.731107][T27605] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3030.731124][T27605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3030.745739][T27612] Error: Driver 'raw-gadget' is already registered, aborting... [ 3030.745754][T27612] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:11 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:11 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3030.745772][T27612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3031.005183][T24041] usb 4-1: new high-speed USB device number 7 using dummy_hcd 11:10:12 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:12 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3031.276507][T27627] Error: Driver 'raw-gadget' is already registered, aborting... [ 3031.276522][T27627] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3031.276543][T27627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3031.565265][T24041] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3031.565294][T24041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3031.565308][T24041] usb 4-1: Product: syz [ 3031.565318][T24041] usb 4-1: Manufacturer: syz [ 3031.565328][T24041] usb 4-1: SerialNumber: syz [ 3031.605942][T24041] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3032.185295][T23938] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3032.388520][T24041] usb 4-1: USB disconnect, device number 7 11:10:13 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x6}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:13 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:13 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) 11:10:13 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:13 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:13 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, 0x0) 11:10:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, 0x0) [ 3032.922870][T27634] Error: Driver 'raw-gadget' is already registered, aborting... [ 3032.922886][T27634] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3032.922905][T27634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3032.928196][T27636] Error: Driver 'raw-gadget' is already registered, aborting... [ 3032.928220][T27636] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, 0x0) 11:10:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3032.928240][T27636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3032.936007][T27638] Error: Driver 'raw-gadget' is already registered, aborting... [ 3032.936022][T27638] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3032.936040][T27638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3032.944553][T27641] Error: Driver 'raw-gadget' is already registered, aborting... [ 3032.944567][T27641] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3032.944586][T27641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3033.185251][ T1259] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3033.235285][T23938] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3033.235447][T23938] ath9k_htc: Failed to initialize the device [ 3033.235874][T24041] usb 4-1: ath9k_htc: USB layer deinitialized 11:10:14 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3033.465731][T27653] Error: Driver 'raw-gadget' is already registered, aborting... [ 3033.465742][T27653] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3033.465760][T27653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3033.565328][ T1259] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3033.565372][ T1259] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3033.785258][ T1259] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3033.785281][ T1259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3033.785334][ T1259] usb 3-1: Product: syz [ 3033.785358][ T1259] usb 3-1: Manufacturer: syz [ 3033.785375][ T1259] usb 3-1: SerialNumber: syz [ 3033.835873][ T1259] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3034.415221][ T1259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3034.415593][ T1259] usb 3-1: ath9k_htc: Unable to allocate URBs [ 3034.415998][ T1259] usb 3-1: ath9k_htc: USB layer deinitialized [ 3034.635701][T24041] usb 3-1: USB disconnect, device number 59 11:10:15 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:15 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:15 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x3, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:15 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:15 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:15 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x18}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3035.152330][T27662] Error: Driver 'raw-gadget' is already registered, aborting... [ 3035.152345][T27662] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3035.152365][T27662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.153009][T27663] Error: Driver 'raw-gadget' is already registered, aborting... [ 3035.153022][T27663] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3035.153040][T27663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.159408][T27664] Error: Driver 'raw-gadget' is already registered, aborting... [ 3035.159421][T27664] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3035.159440][T27664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.164535][T27665] Error: Driver 'raw-gadget' is already registered, aborting... [ 3035.164547][T27665] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3035.164565][T27665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.405166][T15920] usb 4-1: new high-speed USB device number 8 using dummy_hcd 11:10:16 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:16 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:16 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x3, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:16 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:16 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3035.693116][T27669] Error: Driver 'raw-gadget' is already registered, aborting... [ 3035.693132][T27669] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3035.693153][T27669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.707718][T27672] Error: Driver 'raw-gadget' is already registered, aborting... [ 3035.707734][T27672] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3035.707753][T27672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.719104][T27674] Error: Driver 'raw-gadget' is already registered, aborting... [ 3035.719119][T27674] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3035.719140][T27674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.719611][T27675] Error: Driver 'raw-gadget' is already registered, aborting... [ 3035.719623][T27675] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3035.719641][T27675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3035.925266][T15920] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3035.925289][T15920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3035.925304][T15920] usb 4-1: Product: syz [ 3035.925314][T15920] usb 4-1: Manufacturer: syz [ 3035.925324][T15920] usb 4-1: SerialNumber: syz [ 3035.965993][T15920] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:17 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:17 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:17 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:17 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:17 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x3, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3036.220841][T27679] Error: Driver 'raw-gadget' is already registered, aborting... [ 3036.220858][T27679] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3036.220877][T27679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.243030][T27681] Error: Driver 'raw-gadget' is already registered, aborting... [ 3036.243046][T27681] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3036.243065][T27681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.261521][T27683] Error: Driver 'raw-gadget' is already registered, aborting... [ 3036.261536][T27683] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3036.261555][T27683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.265484][T27685] Error: Driver 'raw-gadget' is already registered, aborting... [ 3036.265498][T27685] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3036.265517][T27685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.535278][T15920] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 11:10:17 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3036.740366][ T3767] usb 4-1: USB disconnect, device number 8 11:10:18 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x48}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3037.268937][T27692] Error: Driver 'raw-gadget' is already registered, aborting... [ 3037.268953][T27692] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3037.268972][T27692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.270233][T27694] Error: Driver 'raw-gadget' is already registered, aborting... [ 3037.270245][T27694] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3037.270263][T27694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.272442][T27695] Error: Driver 'raw-gadget' is already registered, aborting... [ 3037.272455][T27695] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3037.272473][T27695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.299187][T27698] Error: Driver 'raw-gadget' is already registered, aborting... [ 3037.299202][T27698] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3037.299221][T27698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.535180][T24041] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 3037.565165][T15920] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3037.565305][T15920] ath9k_htc: Failed to initialize the device [ 3037.565651][ T3767] usb 4-1: ath9k_htc: USB layer deinitialized 11:10:18 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x4c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:18 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3037.839652][T27705] Error: Driver 'raw-gadget' is already registered, aborting... [ 3037.839668][T27705] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3037.839689][T27705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.841357][T27703] Error: Driver 'raw-gadget' is already registered, aborting... [ 3037.841369][T27703] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3037.841389][T27703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.842821][T27706] Error: Driver 'raw-gadget' is already registered, aborting... [ 3037.842834][T27706] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3037.842852][T27706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.842920][T27707] Error: Driver 'raw-gadget' is already registered, aborting... [ 3037.842930][T27707] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3037.842947][T27707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3037.895267][T24041] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3037.895311][T24041] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3038.055316][T24041] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3038.055339][T24041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3038.055362][T24041] usb 3-1: Product: syz [ 3038.055379][T24041] usb 3-1: Manufacturer: syz [ 3038.055396][T24041] usb 3-1: SerialNumber: syz [ 3038.096889][T24041] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:19 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:19 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:19 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:19 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3038.381340][T27711] Error: Driver 'raw-gadget' is already registered, aborting... [ 3038.381356][T27711] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3038.381375][T27711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3038.401385][T27714] Error: Driver 'raw-gadget' is already registered, aborting... [ 3038.401400][T27714] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3038.401421][T27714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3038.402525][T27717] Error: Driver 'raw-gadget' is already registered, aborting... [ 3038.402538][T27717] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3038.402557][T27717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3038.403124][T27716] Error: Driver 'raw-gadget' is already registered, aborting... [ 3038.403135][T27716] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3038.403152][T27716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3038.765237][ T1259] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3038.765653][ T1259] usb 3-1: ath9k_htc: Unable to allocate URBs [ 3038.766224][ T1259] usb 3-1: ath9k_htc: USB layer deinitialized [ 3038.975772][ T3767] usb 3-1: USB disconnect, device number 60 11:10:20 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:20 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x68}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:20 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:20 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x0, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:20 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310600000000000008af259b"}) 11:10:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3039.493214][T27725] Error: Driver 'raw-gadget' is already registered, aborting... [ 3039.493229][T27725] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3039.493249][T27725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3039.514123][T27729] Error: Driver 'raw-gadget' is already registered, aborting... [ 3039.514139][T27729] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:20 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x2d, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3039.514158][T27729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3039.514255][T27727] Error: Driver 'raw-gadget' is already registered, aborting... [ 3039.514267][T27727] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3039.514283][T27727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3039.523320][T27730] Error: Driver 'raw-gadget' is already registered, aborting... [ 3039.523334][T27730] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3039.523352][T27730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3039.567048][T27734] Error: Driver 'raw-gadget' is already registered, aborting... [ 3039.567063][T27734] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3039.567083][T27734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3039.775202][ T1259] usb 4-1: new high-speed USB device number 9 using dummy_hcd 11:10:20 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:20 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:20 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x0, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:20 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3040.017309][T27736] Error: Driver 'raw-gadget' is already registered, aborting... [ 3040.017352][T27736] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3040.017367][T27736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3040.042913][T27738] Error: Driver 'raw-gadget' is already registered, aborting... [ 3040.042929][T27738] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:20 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x2d, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3040.042949][T27738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3040.066318][T27741] Error: Driver 'raw-gadget' is already registered, aborting... [ 3040.066332][T27741] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3040.066352][T27741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3040.067415][T27742] Error: Driver 'raw-gadget' is already registered, aborting... [ 3040.067426][T27742] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3040.067443][T27742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3040.095705][T27744] Error: Driver 'raw-gadget' is already registered, aborting... [ 3040.095719][T27744] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3040.095738][T27744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3040.405303][ T1259] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3040.405326][ T1259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3040.405341][ T1259] usb 4-1: Product: syz [ 3040.405351][ T1259] usb 4-1: Manufacturer: syz [ 3040.405361][ T1259] usb 4-1: SerialNumber: syz [ 3040.446402][ T1259] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3041.025291][ T1259] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3041.231357][T24041] usb 4-1: USB disconnect, device number 9 11:10:22 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x6c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:22 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:22 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:22 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:22 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x0, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:22 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x2d, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3041.762388][T27752] Error: Driver 'raw-gadget' is already registered, aborting... [ 3041.762403][T27752] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3041.762422][T27752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3041.767801][T27753] Error: Driver 'raw-gadget' is already registered, aborting... [ 3041.767815][T27753] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3041.767834][T27753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3041.779862][T27755] Error: Driver 'raw-gadget' is already registered, aborting... [ 3041.779877][T27755] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3041.779896][T27755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3041.781512][T27750] Error: Driver 'raw-gadget' is already registered, aborting... [ 3041.781524][T27750] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3041.781542][T27750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3041.787248][T27756] Error: Driver 'raw-gadget' is already registered, aborting... [ 3041.787261][T27756] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3041.787278][T27756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.035185][ T1259] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3042.035274][ T1259] ath9k_htc: Failed to initialize the device [ 3042.035565][T24041] usb 4-1: ath9k_htc: USB layer deinitialized [ 3042.037641][T23938] usb 1-1: new high-speed USB device number 104 using dummy_hcd 11:10:23 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:23 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x0, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:23 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:23 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x74}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:23 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f0000000780)=ANY=[@ANYBLOB="3b00c4b109ff7f0faeb0dd9e7070554b004e4b43265196db18f7d26f97f54c42f3f2bd9ab017a6f57961d22d1f59d0c2b2f8029f585af20f83074b5de49ae9aa336919551371f806"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x91, &(0x7f0000000000)=@generic={0x3, 0x0, 0x89, "d6dff7e5", "b901613d13373542e8545534787ff2be494db85f8f321b48cdd17b6f5e92fdde613327b7d829bcf5f65d0103233b1f96655e7740bdd92182f735923381c1f1b43582c5c1eda8d76a5528f7164956a3c76c51365f29bee85ee0d5fc3beeb7f138567e51da9df85e7144701bc7bf6a0743229eda1162fb9ac07fe9cd13708876ac709d47a3501d8d9368"}) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3042.320348][T27760] Error: Driver 'raw-gadget' is already registered, aborting... [ 3042.320364][T27760] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3042.320384][T27760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.321811][T27761] Error: Driver 'raw-gadget' is already registered, aborting... [ 3042.321824][T27761] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3042.321843][T27761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.326920][T27763] Error: Driver 'raw-gadget' is already registered, aborting... [ 3042.326934][T27763] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3042.326953][T27763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.333521][T27765] Error: Driver 'raw-gadget' is already registered, aborting... [ 3042.333535][T27765] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3042.333554][T27765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.340213][T27766] Error: Driver 'raw-gadget' is already registered, aborting... [ 3042.340227][T27766] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3042.340245][T27766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.455256][T23938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3042.455290][T23938] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3042.615341][T23938] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3042.615377][T23938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3042.615404][T23938] usb 1-1: Product: syz [ 3042.615423][T23938] usb 1-1: Manufacturer: syz [ 3042.615440][T23938] usb 1-1: SerialNumber: syz [ 3042.665885][T23938] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:23 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:23 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3042.854897][T27768] Error: Driver 'raw-gadget' is already registered, aborting... [ 3042.854915][T27768] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3042.854934][T27768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3042.870890][T27770] Error: Driver 'raw-gadget' is already registered, aborting... [ 3042.870906][T27770] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3042.870926][T27770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3043.335297][T24041] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3043.335673][T24041] usb 1-1: ath9k_htc: Unable to allocate URBs [ 3043.336367][T24041] usb 1-1: ath9k_htc: USB layer deinitialized [ 3043.546160][ T3767] usb 1-1: USB disconnect, device number 104 11:10:24 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f0000000780)=ANY=[@ANYBLOB="3b00c4b109ff7f0faeb0dd9e7070554b004e4b43265196db18f7d26f97f54c42f3f2bd9ab017a6f57961d22d1f59d0c2b2f8029f585af20f83074b5de49ae9aa336919551371f806"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x91, &(0x7f0000000000)=@generic={0x3, 0x0, 0x89, "d6dff7e5", "b901613d13373542e8545534787ff2be494db85f8f321b48cdd17b6f5e92fdde613327b7d829bcf5f65d0103233b1f96655e7740bdd92182f735923381c1f1b43582c5c1eda8d76a5528f7164956a3c76c51365f29bee85ee0d5fc3beeb7f138567e51da9df85e7144701bc7bf6a0743229eda1162fb9ac07fe9cd13708876ac709d47a3501d8d9368"}) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:24 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7a}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:24 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:24 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:24 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3044.066485][T27777] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.066500][T27777] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.066519][T27777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.070528][T27780] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.070541][T27780] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.070560][T27780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.071438][T27778] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.071450][T27778] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.071470][T27778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.072735][T27779] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.072748][T27779] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.072766][T27779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.083519][T27782] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.083533][T27782] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.083551][T27782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.355172][T24041] usb 6-1: new high-speed USB device number 96 using dummy_hcd 11:10:25 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:25 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:25 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:25 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:25 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3044.620321][T27787] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.620338][T27787] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.620358][T27787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.624313][T27789] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.624327][T27789] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.624346][T27789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.628853][T27790] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.628866][T27790] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.628885][T27790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.631003][T27791] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.631015][T27791] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.631032][T27791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.633148][T27792] Error: Driver 'raw-gadget' is already registered, aborting... [ 3044.633160][T27792] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3044.633178][T27792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3044.955341][T24041] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3044.955402][T24041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3044.955428][T24041] usb 6-1: Product: syz [ 3044.955445][T24041] usb 6-1: Manufacturer: syz [ 3044.955461][T24041] usb 6-1: SerialNumber: syz [ 3045.006082][T24041] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:25 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:25 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3045.171323][T27794] Error: Driver 'raw-gadget' is already registered, aborting... [ 3045.171339][T27794] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3045.171359][T27794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3045.179190][T27796] Error: Driver 'raw-gadget' is already registered, aborting... [ 3045.179205][T27796] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3045.179223][T27796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3045.755223][T23938] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3046.396875][ T3767] usb 6-1: USB disconnect, device number 96 [ 3046.835176][T23938] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 3046.835274][T23938] ath9k_htc: Failed to initialize the device [ 3046.835650][ T3767] usb 6-1: ath9k_htc: USB layer deinitialized 11:10:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f0000000780)=ANY=[@ANYBLOB="3b00c4b109ff7f0faeb0dd9e7070554b004e4b43265196db18f7d26f97f54c42f3f2bd9ab017a6f57961d22d1f59d0c2b2f8029f585af20f83074b5de49ae9aa336919551371f806"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x91, &(0x7f0000000000)=@generic={0x3, 0x0, 0x89, "d6dff7e5", "b901613d13373542e8545534787ff2be494db85f8f321b48cdd17b6f5e92fdde613327b7d829bcf5f65d0103233b1f96655e7740bdd92182f735923381c1f1b43582c5c1eda8d76a5528f7164956a3c76c51365f29bee85ee0d5fc3beeb7f138567e51da9df85e7144701bc7bf6a0743229eda1162fb9ac07fe9cd13708876ac709d47a3501d8d9368"}) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:27 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:27 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:27 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:27 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:27 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3046.927698][T27803] Error: Driver 'raw-gadget' is already registered, aborting... [ 3046.927715][T27803] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3046.927734][T27803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3046.937102][T27804] Error: Driver 'raw-gadget' is already registered, aborting... [ 3046.937117][T27804] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3046.937137][T27804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3046.939453][T27805] Error: Driver 'raw-gadget' is already registered, aborting... [ 3046.939466][T27805] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3046.939484][T27805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3046.941969][T27806] Error: Driver 'raw-gadget' is already registered, aborting... [ 3046.941982][T27806] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3046.941999][T27806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3046.950690][T27808] Error: Driver 'raw-gadget' is already registered, aborting... [ 3046.950704][T27808] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3046.950723][T27808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.195214][T15920] usb 2-1: new high-speed USB device number 44 using dummy_hcd 11:10:28 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:28 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f0000000780)=ANY=[@ANYBLOB="3b00c4b109ff7f0faeb0dd9e7070554b004e4b43265196db18f7d26f97f54c42f3f2bd9ab017a6f57961d22d1f59d0c2b2f8029f585af20f83074b5de49ae9aa336919551371f806"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x91, &(0x7f0000000000)=@generic={0x3, 0x0, 0x89, "d6dff7e5", "b901613d13373542e8545534787ff2be494db85f8f321b48cdd17b6f5e92fdde613327b7d829bcf5f65d0103233b1f96655e7740bdd92182f735923381c1f1b43582c5c1eda8d76a5528f7164956a3c76c51365f29bee85ee0d5fc3beeb7f138567e51da9df85e7144701bc7bf6a0743229eda1162fb9ac07fe9cd13708876ac709d47a3501d8d9368"}) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:28 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:28 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:28 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3047.477050][T27810] Error: Driver 'raw-gadget' is already registered, aborting... [ 3047.477066][T27810] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3047.477114][T27810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.504966][T27814] Error: Driver 'raw-gadget' is already registered, aborting... [ 3047.504988][T27814] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3047.505009][T27814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.511081][T27817] Error: Driver 'raw-gadget' is already registered, aborting... [ 3047.511096][T27817] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3047.511147][T27817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.511448][T27815] Error: Driver 'raw-gadget' is already registered, aborting... [ 3047.511459][T27815] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3047.511477][T27815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.511774][T27818] Error: Driver 'raw-gadget' is already registered, aborting... [ 3047.511786][T27818] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3047.511803][T27818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.615331][T15920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3047.615373][T15920] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3047.785246][T15920] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3047.785288][T15920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.785302][T15920] usb 2-1: Product: syz [ 3047.785312][T15920] usb 2-1: Manufacturer: syz [ 3047.785323][T15920] usb 2-1: SerialNumber: syz [ 3047.826306][T15920] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:28 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:28 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:28 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:28 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f0000000780)=ANY=[@ANYBLOB="3b00c4b109ff7f0faeb0dd9e7070554b004e4b43265196db18f7d26f97f54c42f3f2bd9ab017a6f57961d22d1f59d0c2b2f8029f585af20f83074b5de49ae9aa336919551371f806"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x91, &(0x7f0000000000)=@generic={0x3, 0x0, 0x89, "d6dff7e5", "b901613d13373542e8545534787ff2be494db85f8f321b48cdd17b6f5e92fdde613327b7d829bcf5f65d0103233b1f96655e7740bdd92182f735923381c1f1b43582c5c1eda8d76a5528f7164956a3c76c51365f29bee85ee0d5fc3beeb7f138567e51da9df85e7144701bc7bf6a0743229eda1162fb9ac07fe9cd13708876ac709d47a3501d8d9368"}) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:28 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3047.997116][T27820] Error: Driver 'raw-gadget' is already registered, aborting... [ 3047.997126][T27820] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3047.997138][T27820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3048.047250][T27822] Error: Driver 'raw-gadget' is already registered, aborting... [ 3048.047267][T27822] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3048.047288][T27822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3048.057487][T27825] Error: Driver 'raw-gadget' is already registered, aborting... [ 3048.057501][T27825] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3048.057521][T27825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3048.062637][T27827] Error: Driver 'raw-gadget' is already registered, aborting... [ 3048.062653][T27827] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3048.062672][T27827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3048.070638][T27828] Error: Driver 'raw-gadget' is already registered, aborting... [ 3048.070651][T27828] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3048.070670][T27828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3048.535343][ T3767] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3048.535710][ T3767] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3048.536448][ T3767] usb 2-1: ath9k_htc: USB layer deinitialized [ 3048.745959][T23938] usb 2-1: USB disconnect, device number 44 11:10:30 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:30 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:30 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x5}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:30 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:30 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x48, &(0x7f0000000780)=ANY=[@ANYBLOB="3b00c4b109ff7f0faeb0dd9e7070554b004e4b43265196db18f7d26f97f54c42f3f2bd9ab017a6f57961d22d1f59d0c2b2f8029f585af20f83074b5de49ae9aa336919551371f806"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x91, &(0x7f0000000000)=@generic={0x3, 0x0, 0x89, "d6dff7e5", "b901613d13373542e8545534787ff2be494db85f8f321b48cdd17b6f5e92fdde613327b7d829bcf5f65d0103233b1f96655e7740bdd92182f735923381c1f1b43582c5c1eda8d76a5528f7164956a3c76c51365f29bee85ee0d5fc3beeb7f138567e51da9df85e7144701bc7bf6a0743229eda1162fb9ac07fe9cd13708876ac709d47a3501d8d9368"}) r1 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000007c0)={0x0, 0x57, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:30 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3049.268289][T27834] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.268305][T27834] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.268324][T27834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.273938][T27836] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.273953][T27836] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.273972][T27836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.277782][T27838] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.277795][T27838] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.277814][T27838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.279896][T27837] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.279908][T27837] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.279926][T27837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.295355][T27840] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.295370][T27840] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.295389][T27840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.525199][ T3767] usb 1-1: new high-speed USB device number 105 using dummy_hcd 11:10:30 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:30 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:30 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x6}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:30 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:30 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x7, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3049.789989][T27842] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.790006][T27842] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.790026][T27842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.820916][T27845] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.820933][T27845] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.820953][T27845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.829254][T27846] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.829269][T27846] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.829289][T27846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.835029][T27848] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.835045][T27848] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.835066][T27848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.842213][T27850] Error: Driver 'raw-gadget' is already registered, aborting... [ 3049.842228][T27850] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3049.842247][T27850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.891994][ T3767] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3049.892022][ T3767] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3050.045242][ T3767] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3050.045266][ T3767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3050.045280][ T3767] usb 1-1: Product: syz [ 3050.045290][ T3767] usb 1-1: Manufacturer: syz [ 3050.045299][ T3767] usb 1-1: SerialNumber: syz [ 3050.087786][ T3767] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:31 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:31 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3050.313997][T27852] Error: Driver 'raw-gadget' is already registered, aborting... [ 3050.314013][T27852] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3050.314026][T27852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3050.369939][T27854] Error: Driver 'raw-gadget' is already registered, aborting... [ 3050.369950][T27854] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3050.369962][T27854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3050.645306][ T3767] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3050.645706][ T3767] usb 1-1: ath9k_htc: Unable to allocate URBs [ 3050.646307][ T3767] usb 1-1: ath9k_htc: USB layer deinitialized [ 3050.865632][T15920] usb 1-1: USB disconnect, device number 105 11:10:32 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x7}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x7, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3051.374393][T27861] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.374409][T27861] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.374428][T27861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.382409][T27863] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.382429][T27863] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.382449][T27863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.383429][T27862] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.383442][T27862] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.383461][T27862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.388853][T27864] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.388867][T27864] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.388887][T27864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.399988][T27866] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.400003][T27866] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.400022][T27866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.635187][T15920] usb 3-1: new high-speed USB device number 61 using dummy_hcd 11:10:32 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x7, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x18}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:32 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3051.924156][T27869] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.924174][T27869] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.924194][T27869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.926025][T27870] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.926038][T27870] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.926056][T27870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.941361][T27872] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.941375][T27872] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.941394][T27872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.953298][T27875] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.953312][T27875] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.953331][T27875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.955721][T27876] Error: Driver 'raw-gadget' is already registered, aborting... [ 3051.955734][T27876] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3051.955752][T27876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3051.999504][T15920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3052.000885][T15920] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3052.155254][T15920] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3052.155277][T15920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.155291][T15920] usb 3-1: Product: syz [ 3052.155301][T15920] usb 3-1: Manufacturer: syz [ 3052.155311][T15920] usb 3-1: SerialNumber: syz [ 3052.196464][T15920] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:33 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x0, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:33 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x48}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:33 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3052.456236][T27878] Error: Driver 'raw-gadget' is already registered, aborting... [ 3052.456254][T27878] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3052.456274][T27878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3052.483390][T27882] Error: Driver 'raw-gadget' is already registered, aborting... [ 3052.483405][T27882] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3052.483424][T27882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3052.483483][T27881] Error: Driver 'raw-gadget' is already registered, aborting... [ 3052.483494][T27881] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3052.483510][T27881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3052.755285][ T3767] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3052.755646][ T3767] usb 3-1: ath9k_htc: Unable to allocate URBs [ 3052.756147][ T3767] usb 3-1: ath9k_htc: USB layer deinitialized [ 3052.986209][T15920] usb 3-1: USB disconnect, device number 61 11:10:34 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x0, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x4c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3053.492165][T27890] Error: Driver 'raw-gadget' is already registered, aborting... [ 3053.492182][T27890] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3053.492203][T27890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.494275][T27889] Error: Driver 'raw-gadget' is already registered, aborting... [ 3053.494288][T27889] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3053.494307][T27889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.498552][T27893] Error: Driver 'raw-gadget' is already registered, aborting... [ 3053.498565][T27893] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3053.498584][T27893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.504083][T27894] Error: Driver 'raw-gadget' is already registered, aborting... [ 3053.504097][T27894] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3053.504115][T27894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.506941][T27892] Error: Driver 'raw-gadget' is already registered, aborting... [ 3053.506954][T27892] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3053.506980][T27892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.755223][T23938] usb 1-1: new high-speed USB device number 106 using dummy_hcd 11:10:34 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x0, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:34 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x68}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3054.012887][T27896] Error: Driver 'raw-gadget' is already registered, aborting... [ 3054.012903][T27896] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3054.012923][T27896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.037069][T27898] Error: Driver 'raw-gadget' is already registered, aborting... [ 3054.037084][T27898] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3054.037103][T27898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.060020][T27901] Error: Driver 'raw-gadget' is already registered, aborting... [ 3054.060034][T27901] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3054.060053][T27901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.068231][T27903] Error: Driver 'raw-gadget' is already registered, aborting... [ 3054.068245][T27903] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3054.068263][T27903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.069191][T27904] Error: Driver 'raw-gadget' is already registered, aborting... [ 3054.069208][T27904] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3054.069225][T27904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.125271][T23938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3054.125315][T23938] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3054.285309][T23938] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3054.285343][T23938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3054.285369][T23938] usb 1-1: Product: syz [ 3054.285406][T23938] usb 1-1: Manufacturer: syz [ 3054.285424][T23938] usb 1-1: SerialNumber: syz [ 3054.326023][T23938] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:35 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3054.563636][T27908] Error: Driver 'raw-gadget' is already registered, aborting... [ 3054.563652][T27908] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3054.563673][T27908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.995292][T23938] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3054.995641][T23938] usb 1-1: ath9k_htc: Unable to allocate URBs [ 3054.996289][T23938] usb 1-1: ath9k_htc: USB layer deinitialized [ 3055.215720][T15920] usb 1-1: USB disconnect, device number 106 11:10:36 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:36 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:36 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:36 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x111, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:36 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x6c}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:36 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3055.748423][T27914] Error: Driver 'raw-gadget' is already registered, aborting... [ 3055.748438][T27914] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3055.748458][T27914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3055.749124][T27915] Error: Driver 'raw-gadget' is already registered, aborting... [ 3055.749140][T27915] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3055.749159][T27915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3055.754516][T27918] Error: Driver 'raw-gadget' is already registered, aborting... [ 3055.754530][T27918] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3055.754548][T27918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3055.763609][T27917] Error: Driver 'raw-gadget' is already registered, aborting... [ 3055.763622][T27917] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3055.763642][T27917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3055.777994][T27920] Error: Driver 'raw-gadget' is already registered, aborting... [ 3055.778009][T27920] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3055.778029][T27920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3056.025179][T23938] usb 2-1: new high-speed USB device number 45 using dummy_hcd 11:10:37 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x111, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:37 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:37 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:37 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, 0x0, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:37 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x74}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3056.265825][T27922] Error: Driver 'raw-gadget' is already registered, aborting... [ 3056.265836][T27922] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3056.265849][T27922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3056.321731][T27927] Error: Driver 'raw-gadget' is already registered, aborting... [ 3056.321748][T27927] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3056.321769][T27927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3056.324386][T27928] Error: Driver 'raw-gadget' is already registered, aborting... [ 3056.324400][T27928] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3056.324419][T27928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3056.327093][T27929] Error: Driver 'raw-gadget' is already registered, aborting... [ 3056.327107][T27929] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3056.327125][T27929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3056.328911][T27930] Error: Driver 'raw-gadget' is already registered, aborting... [ 3056.328924][T27930] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3056.328942][T27930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3056.445261][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3056.445305][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3056.625255][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3056.625278][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3056.625292][T23938] usb 2-1: Product: syz [ 3056.625303][T23938] usb 2-1: Manufacturer: syz [ 3056.625313][T23938] usb 2-1: SerialNumber: syz [ 3056.675894][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 11:10:37 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x111, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3056.792608][T27932] Error: Driver 'raw-gadget' is already registered, aborting... [ 3056.792619][T27932] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3056.792631][T27932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3057.235361][T23938] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3057.235724][T23938] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3057.236389][T23938] usb 2-1: ath9k_htc: USB layer deinitialized [ 3057.455733][T15920] usb 2-1: USB disconnect, device number 45 11:10:38 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:38 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:38 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, 0x0, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:38 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x7a}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:38 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x2, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3057.968696][T27939] Error: Driver 'raw-gadget' is already registered, aborting... [ 3057.968712][T27939] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3057.968732][T27939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3057.969944][T27941] Error: Driver 'raw-gadget' is already registered, aborting... [ 3057.969958][T27941] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3057.969976][T27941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:38 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:38 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3057.975078][T27942] Error: Driver 'raw-gadget' is already registered, aborting... [ 3057.975207][T27942] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3057.975227][T27942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3057.985014][T27944] Error: Driver 'raw-gadget' is already registered, aborting... [ 3057.985030][T27944] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3057.985049][T27944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:38 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3058.225237][T15920] usb 4-1: new high-speed USB device number 10 using dummy_hcd 11:10:39 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:39 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:39 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3058.510935][T27961] Error: Driver 'raw-gadget' is already registered, aborting... [ 3058.510951][T27961] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3058.510972][T27961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3058.514704][T27962] Error: Driver 'raw-gadget' is already registered, aborting... [ 3058.514720][T27962] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3058.514741][T27962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3058.825295][T15920] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3058.825318][T15920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3058.825332][T15920] usb 4-1: Product: syz [ 3058.825342][T15920] usb 4-1: Manufacturer: syz [ 3058.825352][T15920] usb 4-1: SerialNumber: syz [ 3058.867479][T15920] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3059.495259][T15920] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3059.700618][T23938] usb 4-1: USB disconnect, device number 10 11:10:41 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:41 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, 0x0, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:41 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:41 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:41 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:41 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:41 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:41 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3060.230940][T27970] Error: Driver 'raw-gadget' is already registered, aborting... [ 3060.230956][T27970] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3060.230975][T27970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3060.239750][T27972] Error: Driver 'raw-gadget' is already registered, aborting... [ 3060.239765][T27972] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:41 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:41 executing program 5: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, 0x0) 11:10:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, 0x0) [ 3060.239785][T27972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3060.240191][T27973] Error: Driver 'raw-gadget' is already registered, aborting... [ 3060.240204][T27973] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3060.240224][T27973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3060.246668][T27974] Error: Driver 'raw-gadget' is already registered, aborting... [ 3060.246685][T27974] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3060.246704][T27974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3060.495162][T24041] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3060.515218][T15920] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 3060.515343][T15920] ath9k_htc: Failed to initialize the device [ 3060.515766][T23938] usb 4-1: ath9k_htc: USB layer deinitialized 11:10:41 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, 0x0) [ 3060.775783][T27990] Error: Driver 'raw-gadget' is already registered, aborting... [ 3060.775800][T27990] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3060.775820][T27990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3060.855291][T24041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3060.855335][T24041] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3061.045273][T24041] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3061.045295][T24041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3061.045310][T24041] usb 5-1: Product: syz [ 3061.045319][T24041] usb 5-1: Manufacturer: syz [ 3061.045329][T24041] usb 5-1: SerialNumber: syz [ 3061.086500][T24041] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3061.655283][T23938] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3061.655646][T23938] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3061.656324][T23938] usb 5-1: ath9k_htc: USB layer deinitialized [ 3061.875770][T15920] usb 5-1: USB disconnect, device number 59 11:10:43 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:43 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:43 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:43 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:43 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3062.384233][T27997] Error: Driver 'raw-gadget' is already registered, aborting... [ 3062.384250][T27997] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3062.384270][T27997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3062.397656][T28001] Error: Driver 'raw-gadget' is already registered, aborting... [ 3062.397670][T28001] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (fail_nth: 1) [ 3062.397689][T28001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3062.403910][T28000] Error: Driver 'raw-gadget' is already registered, aborting... [ 3062.403926][T28000] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3062.403945][T28000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3062.406460][T28002] Error: Driver 'raw-gadget' is already registered, aborting... [ 3062.406473][T28002] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3062.406491][T28002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (fail_nth: 2) 11:10:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (fail_nth: 3) 11:10:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) (fail_nth: 4) [ 3062.494738][T28008] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3062.512908][T28010] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3062.545321][T28014] FAULT_INJECTION: forcing a failure. [ 3062.545321][T28014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3062.545342][T28014] CPU: 1 PID: 28014 Comm: syz-executor.5 Not tainted 5.19.0-rc3-syzkaller-00076-g508aeb54e4f0 #0 [ 3062.545358][T28014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3062.545366][T28014] Call Trace: [ 3062.545370][T28014] [ 3062.545375][T28014] dump_stack_lvl+0xcd/0x134 [ 3062.545393][T28014] should_fail.cold+0x5/0xa [ 3062.545409][T28014] _copy_to_user+0x2a/0x140 [ 3062.545425][T28014] simple_read_from_buffer+0xcc/0x160 [ 3062.545444][T28014] proc_fail_nth_read+0x187/0x220 [ 3062.545460][T28014] ? proc_sessionid_read+0x220/0x220 [ 3062.545475][T28014] ? security_file_permission+0xab/0xd0 [ 3062.545491][T28014] ? proc_sessionid_read+0x220/0x220 [ 3062.545506][T28014] vfs_read+0x1ef/0x5d0 [ 3062.545521][T28014] ksys_read+0x127/0x250 [ 3062.545535][T28014] ? vfs_write+0xac0/0xac0 [ 3062.545549][T28014] ? syscall_enter_from_user_mode+0x21/0x70 [ 3062.545565][T28014] ? syscall_enter_from_user_mode+0x21/0x70 [ 3062.545579][T28014] do_syscall_64+0x35/0xb0 [ 3062.545594][T28014] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 3062.545608][T28014] RIP: 0033:0x7f1a155a9cbc [ 3062.545619][T28014] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3062.545632][T28014] RSP: 002b:00007f1a14d6d160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3062.545646][T28014] RAX: ffffffffffffffda RBX: 00007f1a15709f60 RCX: 00007f1a155a9cbc [ 3062.545655][T28014] RDX: 000000000000000f RSI: 00007f1a14d6d1e0 RDI: 0000000000000004 [ 3062.545664][T28014] RBP: 00007f1a14d6d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.545673][T28014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3062.545688][T28014] R13: 00007fff36527a8f R14: 00007f1a14d6d300 R15: 0000000000022000 [ 3062.545698][T28014] [ 3062.645188][T23938] usb 2-1: new high-speed USB device number 46 using dummy_hcd 11:10:43 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:43 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3062.929909][T28016] Error: Driver 'raw-gadget' is already registered, aborting... [ 3062.929924][T28016] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3062.929944][T28016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3062.935622][T28018] Error: Driver 'raw-gadget' is already registered, aborting... [ 3062.935635][T28018] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3062.935654][T28018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3063.005283][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3063.005327][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3063.165241][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3063.165264][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3063.165278][T23938] usb 2-1: Product: syz [ 3063.165289][T23938] usb 2-1: Manufacturer: syz [ 3063.165299][T23938] usb 2-1: SerialNumber: syz [ 3063.206879][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3063.765269][T24041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3063.765620][T24041] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3063.766227][T24041] usb 2-1: ath9k_htc: USB layer deinitialized [ 3063.985757][T15920] usb 2-1: USB disconnect, device number 46 11:10:45 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, 0x0) 11:10:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:45 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x5}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:45 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:45 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:45 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x2, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3064.499014][T28026] Error: Driver 'raw-gadget' is already registered, aborting... [ 3064.499029][T28026] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3064.499049][T28026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3064.506417][T28028] Error: Driver 'raw-gadget' is already registered, aborting... [ 3064.506432][T28028] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3064.506452][T28028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x10, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x541b, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5421, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5450, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3064.508114][T28027] Error: Driver 'raw-gadget' is already registered, aborting... [ 3064.508126][T28027] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3064.508144][T28027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3064.528820][T28030] Error: Driver 'raw-gadget' is already registered, aborting... [ 3064.528836][T28030] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3064.528856][T28030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5451, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3064.765198][T24041] usb 4-1: new high-speed USB device number 11 using dummy_hcd 11:10:45 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:45 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, 0x0) [ 3065.044339][T28044] Error: Driver 'raw-gadget' is already registered, aborting... [ 3065.044356][T28044] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3065.044379][T28044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3065.059377][T28046] Error: Driver 'raw-gadget' is already registered, aborting... [ 3065.059393][T28046] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3065.059412][T28046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3065.135343][T24041] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3065.135371][T24041] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 3065.135386][T24041] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 3065.305272][T24041] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3065.305304][T24041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3065.305318][T24041] usb 4-1: Product: syz [ 3065.305328][T24041] usb 4-1: Manufacturer: syz [ 3065.305338][T24041] usb 4-1: SerialNumber: syz [ 3065.347087][T24041] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3065.935261][T23938] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3065.935621][T23938] usb 4-1: ath9k_htc: Unable to allocate URBs [ 3065.936287][T23938] usb 4-1: ath9k_htc: USB layer deinitialized [ 3066.155724][T15920] usb 4-1: USB disconnect, device number 11 11:10:47 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:47 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:47 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5460, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:47 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:47 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, 0x0) 11:10:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x8933, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40049409, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3066.671386][T28056] Error: Driver 'raw-gadget' is already registered, aborting... [ 3066.671403][T28056] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3066.671424][T28056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.673062][T28053] Error: Driver 'raw-gadget' is already registered, aborting... [ 3066.673074][T28053] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3066.673093][T28053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40086602, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40186366, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x401c5820, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x4020940d, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3066.683560][T28057] Error: Driver 'raw-gadget' is already registered, aborting... [ 3066.683575][T28057] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3066.683597][T28057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.685531][T28058] Error: Driver 'raw-gadget' is already registered, aborting... [ 3066.685544][T28058] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3066.685563][T28058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.965186][T15920] usb 1-1: new high-speed USB device number 107 using dummy_hcd 11:10:48 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x7}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80086301, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:48 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:48 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3067.217113][T28076] Error: Driver 'raw-gadget' is already registered, aborting... [ 3067.217128][T28076] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3067.217157][T28076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3067.221718][T28078] Error: Driver 'raw-gadget' is already registered, aborting... [ 3067.221733][T28078] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3067.221752][T28078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3067.223334][T28077] Error: Driver 'raw-gadget' is already registered, aborting... [ 3067.223346][T28077] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3067.223365][T28077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3067.385254][T15920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3067.385286][T15920] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3067.575272][T15920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3067.575295][T15920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3067.575309][T15920] usb 1-1: Product: syz [ 3067.575319][T15920] usb 1-1: Manufacturer: syz [ 3067.575329][T15920] usb 1-1: SerialNumber: syz [ 3067.618789][T15920] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3068.205278][ T3767] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3068.205650][ T3767] usb 1-1: ath9k_htc: Unable to allocate URBs [ 3068.206334][ T3767] usb 1-1: ath9k_htc: USB layer deinitialized [ 3068.435838][T23938] usb 1-1: USB disconnect, device number 107 11:10:49 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:49 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:49 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80086601, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:49 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:49 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x8}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x801c581f, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0xc0045878, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3068.939498][T28086] Error: Driver 'raw-gadget' is already registered, aborting... [ 3068.939514][T28086] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3068.939536][T28086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3068.948069][T28087] Error: Driver 'raw-gadget' is already registered, aborting... [ 3068.948085][T28087] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3068.948104][T28087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0xc0045878, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0xc0189436, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0xc020660b, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3068.948954][T28088] Error: Driver 'raw-gadget' is already registered, aborting... [ 3068.948965][T28088] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3068.948988][T28088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3068.971071][T28090] Error: Driver 'raw-gadget' is already registered, aborting... [ 3068.971095][T28090] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3068.971114][T28090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3069.225175][T23938] usb 5-1: new high-speed USB device number 60 using dummy_hcd 11:10:50 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3069.491284][T28106] Error: Driver 'raw-gadget' is already registered, aborting... [ 3069.491299][T28106] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3069.491320][T28106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3069.615245][T23938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3069.615276][T23938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3069.815265][T23938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3069.815287][T23938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.815301][T23938] usb 5-1: Product: syz [ 3069.815313][T23938] usb 5-1: Manufacturer: syz [ 3069.815324][T23938] usb 5-1: SerialNumber: syz [ 3069.865699][T23938] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3070.445247][T24041] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3070.445674][T24041] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3070.446292][T24041] usb 5-1: ath9k_htc: USB layer deinitialized [ 3070.665738][T23938] usb 5-1: USB disconnect, device number 60 11:10:51 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:51 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:51 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:51 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:51 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x2, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3071.177848][T28114] Error: Driver 'raw-gadget' is already registered, aborting... [ 3071.177865][T28114] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3071.177886][T28114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3071.180457][T28115] Error: Driver 'raw-gadget' is already registered, aborting... [ 3071.180470][T28115] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3071.180491][T28115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x3, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x4, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x5, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x6, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3071.181794][T28113] Error: Driver 'raw-gadget' is already registered, aborting... [ 3071.181808][T28113] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3071.181827][T28113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3071.193277][T28118] Error: Driver 'raw-gadget' is already registered, aborting... [ 3071.193292][T28118] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3071.193310][T28118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3071.435170][ T3767] usb 1-1: new high-speed USB device number 108 using dummy_hcd 11:10:52 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x7, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:52 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xb}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:52 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:52 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3071.713777][T28133] Error: Driver 'raw-gadget' is already registered, aborting... [ 3071.713792][T28133] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3071.713813][T28133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3071.734632][T28138] Error: Driver 'raw-gadget' is already registered, aborting... [ 3071.734648][T28138] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3071.734667][T28138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3071.736246][T28137] Error: Driver 'raw-gadget' is already registered, aborting... [ 3071.736258][T28137] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3071.736276][T28137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3071.749990][T28140] Error: Driver 'raw-gadget' is already registered, aborting... [ 3071.750005][T28140] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3071.750023][T28140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3071.795382][ T3767] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3071.795427][ T3767] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3071.955260][ T3767] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3071.955291][ T3767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3071.955306][ T3767] usb 1-1: Product: syz [ 3071.955317][ T3767] usb 1-1: Manufacturer: syz [ 3071.955329][ T3767] usb 1-1: SerialNumber: syz [ 3071.996518][ T3767] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3072.565248][T15920] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3072.565622][T15920] usb 1-1: ath9k_htc: Unable to allocate URBs [ 3072.566227][T15920] usb 1-1: ath9k_htc: USB layer deinitialized [ 3072.785776][T23938] usb 1-1: USB disconnect, device number 108 11:10:54 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:54 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:54 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:54 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:54 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x2, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3073.301334][T28144] Error: Driver 'raw-gadget' is already registered, aborting... [ 3073.301351][T28144] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3073.301370][T28144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.304534][T28149] Error: Driver 'raw-gadget' is already registered, aborting... [ 3073.304628][T28149] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3073.304652][T28149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x3, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x4, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x5, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x6, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3073.314404][T28151] Error: Driver 'raw-gadget' is already registered, aborting... [ 3073.314419][T28151] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3073.314439][T28151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.323155][T28152] Error: Driver 'raw-gadget' is already registered, aborting... [ 3073.323168][T28152] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3073.323187][T28152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x7, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3073.575192][T23938] usb 5-1: new high-speed USB device number 61 using dummy_hcd 11:10:54 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x300, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:54 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:54 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:54 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xd}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3073.861215][T28172] Error: Driver 'raw-gadget' is already registered, aborting... [ 3073.861232][T28172] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3073.861254][T28172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.871222][T28174] Error: Driver 'raw-gadget' is already registered, aborting... [ 3073.871236][T28174] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3073.871256][T28174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.879471][T28171] Error: Driver 'raw-gadget' is already registered, aborting... [ 3073.879485][T28171] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3073.879504][T28171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.880831][T28173] Error: Driver 'raw-gadget' is already registered, aborting... [ 3073.880844][T28173] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3073.880863][T28173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3073.985256][T23938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3073.985290][T23938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3074.165331][T23938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3074.165366][T23938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3074.165391][T23938] usb 5-1: Product: syz [ 3074.165408][T23938] usb 5-1: Manufacturer: syz [ 3074.165426][T23938] usb 5-1: SerialNumber: syz [ 3074.206285][T23938] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3074.825246][T24041] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3074.825698][T24041] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3074.826279][T24041] usb 5-1: ath9k_htc: USB layer deinitialized [ 3075.035763][T23938] usb 5-1: USB disconnect, device number 61 11:10:56 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x0, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x500, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:56 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:56 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:56 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:56 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xe}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x600, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3075.554994][T28180] Error: Driver 'raw-gadget' is already registered, aborting... [ 3075.555010][T28180] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3075.555029][T28180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3075.559791][T28182] Error: Driver 'raw-gadget' is already registered, aborting... [ 3075.559805][T28182] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x700, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0xff00, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x2, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3075.559831][T28182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3075.564922][T28184] Error: Driver 'raw-gadget' is already registered, aborting... [ 3075.564936][T28184] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3075.564955][T28184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3075.591946][T28186] Error: Driver 'raw-gadget' is already registered, aborting... [ 3075.591962][T28186] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3075.591980][T28186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x3, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3075.845190][T23938] usb 3-1: new high-speed USB device number 62 using dummy_hcd 11:10:56 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x4, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:56 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x0, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3076.113812][T28203] Error: Driver 'raw-gadget' is already registered, aborting... [ 3076.113828][T28203] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3076.113847][T28203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3076.123568][T28204] Error: Driver 'raw-gadget' is already registered, aborting... [ 3076.123584][T28204] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3076.123603][T28204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3076.275227][T23938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3076.275257][T23938] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3076.435375][T23938] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3076.435409][T23938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3076.435423][T23938] usb 3-1: Product: syz [ 3076.435433][T23938] usb 3-1: Manufacturer: syz [ 3076.435443][T23938] usb 3-1: SerialNumber: syz [ 3076.476020][T23938] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3077.035204][T24041] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3077.035570][T24041] usb 3-1: ath9k_htc: Unable to allocate URBs [ 3077.035974][T24041] usb 3-1: ath9k_htc: USB layer deinitialized [ 3077.255749][T23938] usb 3-1: USB disconnect, device number 62 11:10:58 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:58 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0xf}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:58 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x5, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:58 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:58 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x0, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x6, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x7, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3077.767178][T28213] Error: Driver 'raw-gadget' is already registered, aborting... [ 3077.767193][T28213] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3077.767212][T28213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3077.784797][T28211] Error: Driver 'raw-gadget' is already registered, aborting... [ 3077.784811][T28211] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x300, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x500, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3077.784830][T28211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3077.799093][T28214] Error: Driver 'raw-gadget' is already registered, aborting... [ 3077.799110][T28214] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3077.799130][T28214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3077.799156][T28218] Error: Driver 'raw-gadget' is already registered, aborting... [ 3077.799167][T28218] UDC core: USB Raw Gadget: driver registration failed: -16 11:10:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x600, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:10:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x700, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3077.799184][T28218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3078.035190][T15920] usb 2-1: new high-speed USB device number 47 using dummy_hcd 11:10:59 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:10:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0xff00, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3078.330601][T28232] Error: Driver 'raw-gadget' is already registered, aborting... [ 3078.330617][T28232] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3078.330638][T28232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3078.395264][T15920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3078.395296][T15920] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3078.555272][T15920] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3078.555295][T15920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3078.555309][T15920] usb 2-1: Product: syz [ 3078.555319][T15920] usb 2-1: Manufacturer: syz [ 3078.555328][T15920] usb 2-1: SerialNumber: syz [ 3078.597611][T15920] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3079.155196][T15920] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3079.155618][T15920] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3079.156204][T15920] usb 2-1: ath9k_htc: USB layer deinitialized [ 3079.375512][ T3767] usb 2-1: USB disconnect, device number 47 11:11:00 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:00 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x0, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:00 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x10}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:00 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x0, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x1000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:11:00 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x2000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3079.890667][T28238] Error: Driver 'raw-gadget' is already registered, aborting... [ 3079.890684][T28238] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3079.890705][T28238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3079.906296][T28242] Error: Driver 'raw-gadget' is already registered, aborting... [ 3079.906310][T28242] UDC core: USB Raw Gadget: driver registration failed: -16 11:11:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x3000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:11:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x4000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:11:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x5000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:11:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x6000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3079.906328][T28242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3079.908145][T28243] Error: Driver 'raw-gadget' is already registered, aborting... [ 3079.908157][T28243] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3079.908174][T28243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3079.921430][T28244] Error: Driver 'raw-gadget' is already registered, aborting... [ 3079.921445][T28244] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3079.921465][T28244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:11:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x7000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3080.155189][T23938] usb 5-1: new high-speed USB device number 62 using dummy_hcd 11:11:01 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0xfdfdffff, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:11:01 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3080.451839][T28260] Error: Driver 'raw-gadget' is already registered, aborting... [ 3080.451855][T28260] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3080.451875][T28260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3080.457130][T28262] Error: Driver 'raw-gadget' is already registered, aborting... [ 3080.457149][T28262] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3080.457170][T28262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3080.545220][T23938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3080.545250][T23938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3080.705281][T23938] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3080.705314][T23938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3080.705339][T23938] usb 5-1: Product: syz [ 3080.705376][T23938] usb 5-1: Manufacturer: syz [ 3080.705395][T23938] usb 5-1: SerialNumber: syz [ 3080.746419][T23938] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3081.305243][T24041] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3081.306114][T24041] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3081.306705][T24041] usb 5-1: ath9k_htc: USB layer deinitialized [ 3081.535713][ T3767] usb 5-1: USB disconnect, device number 62 11:11:02 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x0, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:02 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:02 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x11}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0xff000000, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:11:02 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:02 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0xfffffdfd, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) 11:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93175c90de7ed55b0c28067d40de33d77596b6310000000000000008af259b"}) [ 3082.040048][T28271] Error: Driver 'raw-gadget' is already registered, aborting... [ 3082.040064][T28271] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3082.040084][T28271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.040266][T28272] Error: Driver 'raw-gadget' is already registered, aborting... [ 3082.040278][T28272] UDC core: USB Raw Gadget: driver registration failed: -16 11:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b1128067d40de33d77596b6310000000000000008af259b"}) 11:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28037d40de33d77596b6310000000000000008af259b"}) 11:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28077d40de33d77596b6310000000000000008af259b"}) 11:11:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28117d40de33d77596b6310000000000000008af259b"}) [ 3082.040296][T28272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.053261][T28274] Error: Driver 'raw-gadget' is already registered, aborting... [ 3082.053277][T28274] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3082.053296][T28274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.053965][T28273] Error: Driver 'raw-gadget' is already registered, aborting... [ 3082.053977][T28273] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3082.053995][T28273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.305167][ T3767] usb 2-1: new high-speed USB device number 48 using dummy_hcd 11:11:03 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x0, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d02de33d77596b6310000000000000008af259b"}) 11:11:03 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x12}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:03 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:03 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3082.580349][T28291] Error: Driver 'raw-gadget' is already registered, aborting... [ 3082.580365][T28291] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3082.580385][T28291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.596644][T28293] Error: Driver 'raw-gadget' is already registered, aborting... [ 3082.596659][T28293] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3082.596678][T28293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.604672][T28294] Error: Driver 'raw-gadget' is already registered, aborting... [ 3082.604696][T28294] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3082.604716][T28294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.611426][T28296] Error: Driver 'raw-gadget' is already registered, aborting... [ 3082.611440][T28296] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3082.611458][T28296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3082.725228][ T3767] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3082.725258][ T3767] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3082.915267][ T3767] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3082.915301][ T3767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3082.915327][ T3767] usb 2-1: Product: syz [ 3082.915346][ T3767] usb 2-1: Manufacturer: syz [ 3082.915364][ T3767] usb 2-1: SerialNumber: syz [ 3082.956906][ T3767] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3083.585271][T15920] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3083.585630][T15920] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3083.586222][T15920] usb 2-1: ath9k_htc: USB layer deinitialized [ 3083.815732][T24041] usb 2-1: USB disconnect, device number 48 11:11:05 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x2}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d75c96b6310000000000000008af259b"}) 11:11:05 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x0, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:05 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:05 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:05 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310200000000000008af259b"}) [ 3084.314775][T28303] Error: Driver 'raw-gadget' is already registered, aborting... [ 3084.314791][T28303] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3084.314812][T28303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.332179][T28306] Error: Driver 'raw-gadget' is already registered, aborting... 11:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310300000000000008af259b"}) 11:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310400000000000008af259b"}) [ 3084.332194][T28306] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3084.332214][T28306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.334425][T28307] Error: Driver 'raw-gadget' is already registered, aborting... [ 3084.334438][T28307] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3084.334457][T28307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.338818][T28308] Error: Driver 'raw-gadget' is already registered, aborting... [ 3084.338831][T28308] UDC core: USB Raw Gadget: driver registration failed: -16 11:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310500000000000008af259b"}) 11:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310600000000000008af259b"}) 11:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310700000000000008af259b"}) [ 3084.338848][T28308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.585192][T24041] usb 1-1: new high-speed USB device number 109 using dummy_hcd 11:11:05 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310003000000000008af259b"}) 11:11:05 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:05 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:05 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3084.874636][T28326] Error: Driver 'raw-gadget' is already registered, aborting... [ 3084.874653][T28326] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3084.874674][T28326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.884236][T28328] Error: Driver 'raw-gadget' is already registered, aborting... [ 3084.884251][T28328] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3084.884270][T28328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.888966][T28329] Error: Driver 'raw-gadget' is already registered, aborting... [ 3084.888980][T28329] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3084.888999][T28329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.895940][T28330] Error: Driver 'raw-gadget' is already registered, aborting... [ 3084.895953][T28330] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3084.895981][T28330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3084.985229][T24041] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3084.985263][T24041] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3085.195261][T24041] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3085.195297][T24041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3085.195323][T24041] usb 1-1: Product: syz [ 3085.195347][T24041] usb 1-1: Manufacturer: syz [ 3085.195366][T24041] usb 1-1: SerialNumber: syz [ 3085.245770][T24041] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3085.865219][T24041] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3085.865615][T24041] usb 1-1: ath9k_htc: Unable to allocate URBs [ 3085.866227][T24041] usb 1-1: ath9k_htc: USB layer deinitialized [ 3086.085712][T23938] usb 1-1: USB disconnect, device number 109 11:11:07 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310005000000000008af259b"}) 11:11:07 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:07 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:07 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:07 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310006000000000008af259b"}) 11:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310007000000000008af259b"}) [ 3086.595860][T28338] Error: Driver 'raw-gadget' is already registered, aborting... [ 3086.595875][T28338] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3086.595895][T28338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3086.597657][T28339] Error: Driver 'raw-gadget' is already registered, aborting... [ 3086.597671][T28339] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3086.597692][T28339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b63100ff000000000008af259b"}) 11:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000100000008af259b"}) 11:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000200000008af259b"}) 11:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000300000008af259b"}) [ 3086.600217][T28340] Error: Driver 'raw-gadget' is already registered, aborting... [ 3086.600230][T28340] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3086.600249][T28340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3086.615552][T28342] Error: Driver 'raw-gadget' is already registered, aborting... [ 3086.615566][T28342] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3086.615584][T28342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3086.865180][T23938] usb 3-1: new high-speed USB device number 63 using dummy_hcd 11:11:07 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000400000008af259b"}) [ 3087.145438][T28358] Error: Driver 'raw-gadget' is already registered, aborting... [ 3087.145455][T28358] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3087.145475][T28358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3087.295226][T23938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3087.295255][T23938] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 3087.485329][T23938] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3087.485351][T23938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3087.485365][T23938] usb 3-1: Product: syz [ 3087.485375][T23938] usb 3-1: Manufacturer: syz [ 3087.485386][T23938] usb 3-1: SerialNumber: syz [ 3087.526561][T23938] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3088.105234][T24041] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3088.105639][T24041] usb 3-1: ath9k_htc: Unable to allocate URBs [ 3088.106019][T24041] usb 3-1: ath9k_htc: USB layer deinitialized [ 3088.335675][T23938] usb 3-1: USB disconnect, device number 63 11:11:09 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:09 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:09 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x6}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:09 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000500000008af259b"}) 11:11:09 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000600000008af259b"}) 11:11:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000700000008af259b"}) [ 3088.837858][T28365] Error: Driver 'raw-gadget' is already registered, aborting... [ 3088.837874][T28365] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3088.837895][T28365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3088.838897][T28366] Error: Driver 'raw-gadget' is already registered, aborting... [ 3088.838909][T28366] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3088.838927][T28366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:11:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b631fffffdfd00000008af259b"}) 11:11:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b631000000ff00000008af259b"}) 11:11:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b631fdfdffff00000008af259b"}) 11:11:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000000000011af259b"}) [ 3088.839737][T28367] Error: Driver 'raw-gadget' is already registered, aborting... [ 3088.839750][T28367] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3088.839771][T28367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3088.860257][T28370] Error: Driver 'raw-gadget' is already registered, aborting... [ 3088.860271][T28370] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3088.860290][T28370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.115183][T15920] usb 4-1: new high-speed USB device number 12 using dummy_hcd 11:11:10 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b63100000000000000ffaf259b"}) [ 3089.382706][T28386] Error: Driver 'raw-gadget' is already registered, aborting... [ 3089.382722][T28386] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3089.382743][T28386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.525317][T15920] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 3089.695248][T15920] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3089.695270][T15920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3089.695284][T15920] usb 4-1: Product: syz [ 3089.695294][T15920] usb 4-1: Manufacturer: syz [ 3089.695304][T15920] usb 4-1: SerialNumber: syz [ 3089.736934][T15920] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3090.295243][T15920] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3090.295643][T15920] usb 4-1: ath9k_htc: Unable to allocate URBs [ 3090.297015][T15920] usb 4-1: ath9k_htc: USB layer deinitialized [ 3090.505619][ T3767] usb 4-1: USB disconnect, device number 12 11:11:11 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x7}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:11 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:11 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x0, 0x1}}}, 0x0) 11:11:11 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310002000000000008af259b"}) 11:11:11 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310003000000000008af259b"}) [ 3091.028791][T28394] Error: Driver 'raw-gadget' is already registered, aborting... [ 3091.028815][T28394] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3091.028834][T28394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3091.031284][T28395] Error: Driver 'raw-gadget' is already registered, aborting... [ 3091.031297][T28395] UDC core: USB Raw Gadget: driver registration failed: -16 11:11:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310004000000000008af259b"}) 11:11:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310005000000000008af259b"}) 11:11:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310006000000000008af259b"}) 11:11:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310007000000000008af259b"}) [ 3091.031317][T28395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3091.037366][T28393] Error: Driver 'raw-gadget' is already registered, aborting... [ 3091.037380][T28393] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3091.037398][T28393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3091.061368][T28398] Error: Driver 'raw-gadget' is already registered, aborting... [ 3091.061383][T28398] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3091.061403][T28398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:11:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000030000000008af259b"}) [ 3091.305189][T23938] usb 2-1: new high-speed USB device number 49 using dummy_hcd 11:11:12 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0xf}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000050000000008af259b"}) 11:11:12 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x0, 0x1}}}, 0x0) [ 3091.577209][T28413] Error: Driver 'raw-gadget' is already registered, aborting... [ 3091.577225][T28413] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3091.577245][T28413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3091.590099][T28416] Error: Driver 'raw-gadget' is already registered, aborting... [ 3091.590114][T28416] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3091.590134][T28416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3091.725253][T23938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3091.725322][T23938] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3091.925258][T23938] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3091.925295][T23938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3091.925321][T23938] usb 2-1: Product: syz [ 3091.925340][T23938] usb 2-1: Manufacturer: syz [ 3091.925358][T23938] usb 2-1: SerialNumber: syz [ 3091.966845][T23938] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3092.555243][T24041] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3092.555664][T24041] usb 2-1: ath9k_htc: Unable to allocate URBs [ 3092.556251][T24041] usb 2-1: ath9k_htc: USB layer deinitialized [ 3092.785715][T23938] usb 2-1: USB disconnect, device number 49 11:11:14 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:14 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000060000000008af259b"}) 11:11:14 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, &(0x7f0000000540)={0x40, 0x17, 0x6}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:14 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x0, 0x1}}}, 0x0) 11:11:14 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x10}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000070000000008af259b"}) 11:11:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000ff0000000008af259b"}) [ 3093.294978][T28424] Error: Driver 'raw-gadget' is already registered, aborting... [ 3093.294994][T28424] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3093.295014][T28424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3093.299542][T28425] Error: Driver 'raw-gadget' is already registered, aborting... [ 3093.299556][T28425] UDC core: USB Raw Gadget: driver registration failed: -16 11:11:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000001000008af259b"}) 11:11:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000002000008af259b"}) 11:11:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000003000008af259b"}) 11:11:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000004000008af259b"}) [ 3093.299575][T28425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3093.301249][T28427] Error: Driver 'raw-gadget' is already registered, aborting... [ 3093.301262][T28427] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3093.301280][T28427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3093.316449][T28429] Error: Driver 'raw-gadget' is already registered, aborting... [ 3093.316465][T28429] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3093.316484][T28429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3093.555169][ T3767] usb 5-1: new high-speed USB device number 63 using dummy_hcd 11:11:14 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3093.836746][T28442] Error: Driver 'raw-gadget' is already registered, aborting... [ 3093.836757][T28442] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3093.836769][T28442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3093.915211][ T3767] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3093.915257][ T3767] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 3094.085236][ T3767] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3094.085259][ T3767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3094.085279][ T3767] usb 5-1: Product: syz [ 3094.085297][ T3767] usb 5-1: Manufacturer: syz [ 3094.085315][ T3767] usb 5-1: SerialNumber: syz [ 3094.126539][ T3767] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3094.725203][T15920] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3094.725562][T15920] usb 5-1: ath9k_htc: Unable to allocate URBs [ 3094.726176][T15920] usb 5-1: ath9k_htc: USB layer deinitialized [ 3094.955708][T23938] usb 5-1: USB disconnect, device number 63 11:11:16 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000005000008af259b"}) 11:11:16 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:16 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, &(0x7f0000000540)={0x40, 0x17, 0x6}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:16 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{}, {0x9, 0x5, 0x82, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x1, 0xf0f, 0x0, [0x30, 0x60, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:16 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xa}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x0, [0x0, 0x0]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0x6, 0x30, 0x0, 0x7ff}}}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xad}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000006000008af259b"}) [ 3095.463533][T28447] Error: Driver 'raw-gadget' is already registered, aborting... [ 3095.463549][T28451] Error: Driver 'raw-gadget' is already registered, aborting... [ 3095.463548][T28447] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3095.463560][T28451] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3095.463569][T28447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000000007000008af259b"}) 11:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b63100fffffdfd000008af259b"}) 11:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b63100000000ff000008af259b"}) 11:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b63100fdfdffff000008af259b"}) [ 3095.463577][T28451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3095.467317][T28452] Error: Driver 'raw-gadget' is already registered, aborting... [ 3095.467331][T28452] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3095.467350][T28452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3095.487097][T28454] Error: Driver 'raw-gadget' is already registered, aborting... [ 3095.487111][T28454] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3095.487130][T28454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000020000000008af259b"}) [ 3095.725164][T15920] usb 4-1: new high-speed USB device number 13 using dummy_hcd 11:11:16 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8e, 0x78, 0x200}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x1, 0x0, 0x0, [0x30, 0xff0000, 0x0, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x3f, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x6, 0x30, 0x1, 0x7ff, 0x1}}}, 0x0) 11:11:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f00000007c0)={0x2, 0x0, 0x0, 0x0, "bc93176490de7ed55b0c28067d40de33d77596b6310000030000000008af259b"}) 11:11:16 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0xc}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0xff, 0x0, "bdc51233", "6869e620"}}, 0x0}, &(0x7f00000006c0)={0x84, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, 0x0, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev}, &(0x7f0000000540)={0x40, 0x17, 0x6}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) 11:11:16 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, "", {{0xc}}}}}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb8, 0x0, 0x0, 0x0, "bdc51233", "6869e620"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x30, 0x1, 0x0, 0x1}}}, &(0x7f00000006c0)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x4, 0x8}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000480)={0x40, 0xb, 0x2, "e7e0"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "6bdb"}, 0x0, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) [ 3096.001577][T28469] Error: Driver 'raw-gadget' is already registered, aborting... [ 3096.001593][T28469] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3096.001612][T28469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3096.013828][T28472] Error: Driver 'raw-gadget' is already registered, aborting... [ 3096.013844][T28472] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3096.013873][T28472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3096.028203][T28474] Error: Driver 'raw-gadget' is already registered, aborting... [ 3096.028219][T28474] UDC core: USB Raw Gadget: driver registration failed: -16 [ 3096.028238][T28474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3096.105277][T15920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3096.275269][T15920] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3096.275290][T15920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3096.275304][T15920] usb 4-1: Product: syz [ 3096.275314][T15920] usb 4-1: Manufacturer: syz [ 3096.275324][T15920] usb 4-1: SerialNumber: syz [ 3096.316847][T15920] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3096.905194][T15920] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3096.905467][T15920] ------------[ cut here ]------------ [ 3096.905472][T15920] usb 4-1: BOGUS urb xfer, pipe 3 != type 1 [ 3096.905667][T15920] WARNING: CPU: 1 PID: 15920 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 3096.935782][T15920] Modules linked in: [ 3096.939676][T15920] CPU: 1 PID: 15920 Comm: kworker/1:1 Not tainted 5.19.0-rc3-syzkaller-00076-g508aeb54e4f0 #0 [ 3096.950013][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3096.960150][T15920] Workqueue: events request_firmware_work_func [ 3096.966450][T15920] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 3096.972097][T15920] Code: 7c 24 18 e8 b0 4b 8f fd 48 8b 7c 24 18 e8 36 41 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 1c a9 86 e8 fe ca 09 02 <0f> 0b e9 58 f8 ff ff e8 82 4b 8f fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 3096.991791][T15920] RSP: 0018:ffffc900015cfb38 EFLAGS: 00010286 [ 3096.997940][T15920] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 3097.005979][T15920] RDX: ffff888132c18000 RSI: ffffffff812c1d98 RDI: fffff520002b9f59 [ 3097.013967][T15920] RBP: ffff88811be2a850 R08: 0000000000000005 R09: 0000000000000000 [ 3097.022004][T15920] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000003 [ 3097.030065][T15920] R13: ffff88810993f640 R14: 0000000000000003 R15: ffff8881107a5d00 [ 3097.038109][T15920] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 3097.047116][T15920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3097.053711][T15920] CR2: 000055555668eb38 CR3: 0000000131808000 CR4: 00000000003506e0 [ 3097.061776][T15920] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3097.069825][T15920] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3097.077873][T15920] Call Trace: [ 3097.081166][T15920] [ 3097.084107][T15920] ? _raw_spin_unlock_irqrestore+0x43/0x70 [ 3097.090003][T15920] ath9k_hif_usb_alloc_urbs+0x7d8/0x1050 [ 3097.095769][T15920] ath9k_hif_usb_firmware_cb+0x148/0x530 [ 3097.101427][T15920] ? ath9k_hif_usb_alloc_urbs+0x1050/0x1050 [ 3097.107427][T15920] request_firmware_work_func+0x12c/0x230 [ 3097.113168][T15920] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 3097.119578][T15920] process_one_work+0x996/0x1610 [ 3097.121615][T23938] usb 4-1: USB disconnect, device number 13 [ 3097.124626][T15920] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3097.136075][T15920] ? rwlock_bug.part.0+0x90/0x90 [ 3097.141044][T15920] ? _raw_spin_lock_irq+0x41/0x50 [ 3097.146165][T15920] worker_thread+0x665/0x1080 [ 3097.150955][T15920] ? __kthread_parkme+0x15f/0x220 [ 3097.156057][T15920] ? process_one_work+0x1610/0x1610 [ 3097.161273][T15920] kthread+0x2ef/0x3a0 [ 3097.165410][T15920] ? kthread_complete_and_exit+0x40/0x40 [ 3097.171057][T15920] ret_from_fork+0x1f/0x30 [ 3097.175538][T15920] [ 3097.178570][T15920] Kernel panic - not syncing: panic_on_warn set ... [ 3097.185149][T15920] CPU: 1 PID: 15920 Comm: kworker/1:1 Not tainted 5.19.0-rc3-syzkaller-00076-g508aeb54e4f0 #0 [ 3097.195385][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3097.205534][T15920] Workqueue: events request_firmware_work_func [ 3097.211685][T15920] Call Trace: [ 3097.214958][T15920] [ 3097.217880][T15920] dump_stack_lvl+0xcd/0x134 [ 3097.222463][T15920] panic+0x2d7/0x64a [ 3097.226375][T15920] ? panic_print_sys_info.part.0+0x10b/0x10b [ 3097.232351][T15920] ? __warn.cold+0x1d9/0x2cd [ 3097.236948][T15920] ? usb_submit_urb+0xed2/0x18a0 [ 3097.241876][T15920] __warn.cold+0x1ea/0x2cd [ 3097.246288][T15920] ? usb_submit_urb+0xed2/0x18a0 [ 3097.251215][T15920] report_bug+0x1bc/0x210 [ 3097.255540][T15920] handle_bug+0x3c/0x60 [ 3097.259687][T15920] exc_invalid_op+0x14/0x40 [ 3097.264202][T15920] asm_exc_invalid_op+0x1b/0x20 [ 3097.269046][T15920] RIP: 0010:usb_submit_urb+0xed2/0x18a0 [ 3097.274593][T15920] Code: 7c 24 18 e8 b0 4b 8f fd 48 8b 7c 24 18 e8 36 41 18 ff 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 80 1c a9 86 e8 fe ca 09 02 <0f> 0b e9 58 f8 ff ff e8 82 4b 8f fd 48 81 c5 b8 05 00 00 e9 84 f7 [ 3097.294196][T15920] RSP: 0018:ffffc900015cfb38 EFLAGS: 00010286 [ 3097.300254][T15920] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 3097.308216][T15920] RDX: ffff888132c18000 RSI: ffffffff812c1d98 RDI: fffff520002b9f59 [ 3097.316180][T15920] RBP: ffff88811be2a850 R08: 0000000000000005 R09: 0000000000000000 [ 3097.324139][T15920] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000003 [ 3097.332100][T15920] R13: ffff88810993f640 R14: 0000000000000003 R15: ffff8881107a5d00 [ 3097.340065][T15920] ? vprintk+0x88/0x90 [ 3097.344134][T15920] ? usb_submit_urb+0xed2/0x18a0 [ 3097.349064][T15920] ? _raw_spin_unlock_irqrestore+0x43/0x70 [ 3097.354866][T15920] ath9k_hif_usb_alloc_urbs+0x7d8/0x1050 [ 3097.360492][T15920] ath9k_hif_usb_firmware_cb+0x148/0x530 [ 3097.366133][T15920] ? ath9k_hif_usb_alloc_urbs+0x1050/0x1050 [ 3097.372024][T15920] request_firmware_work_func+0x12c/0x230 [ 3097.377789][T15920] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 3097.384117][T15920] process_one_work+0x996/0x1610 [ 3097.389073][T15920] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3097.394576][T15920] ? rwlock_bug.part.0+0x90/0x90 [ 3097.399536][T15920] ? _raw_spin_lock_irq+0x41/0x50 [ 3097.404628][T15920] worker_thread+0x665/0x1080 [ 3097.409331][T15920] ? __kthread_parkme+0x15f/0x220 [ 3097.414791][T15920] ? process_one_work+0x1610/0x1610 [ 3097.419998][T15920] kthread+0x2ef/0x3a0 [ 3097.424063][T15920] ? kthread_complete_and_exit+0x40/0x40 [ 3097.429736][T15920] ret_from_fork+0x1f/0x30 [ 3097.434165][T15920] [ 3097.437421][T15920] Kernel Offset: disabled [ 3097.441806][T15920] Rebooting in 86400 seconds..