Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 15.627735][ C1] random: crng init done [ 15.632054][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.204' (ECDSA) to the list of known hosts. 2020/06/12 06:03:16 fuzzer started 2020/06/12 06:03:16 dialing manager at 10.128.0.105:38763 2020/06/12 06:03:16 syscalls: 90 2020/06/12 06:03:16 code coverage: enabled 2020/06/12 06:03:16 comparison tracing: enabled 2020/06/12 06:03:16 extra coverage: enabled 2020/06/12 06:03:16 setuid sandbox: enabled 2020/06/12 06:03:16 namespace sandbox: enabled 2020/06/12 06:03:16 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/12 06:03:16 fault injection: enabled 2020/06/12 06:03:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/12 06:03:16 net packet injection: /dev/net/tun does not exist 2020/06/12 06:03:16 net device setup: enabled 2020/06/12 06:03:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/12 06:03:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/12 06:03:16 USB emulation: enabled 06:03:31 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x1ef7, 0x660200) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x0, "8e7d977c7598e400e6724e5049b794a2e492ef4842cff405f28fdfeb6afc674ad00106b970bcc388cc294dfe698a552f8ac8e9b962bd13f9099253f5a656c8e1"}) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x8, 0x101402) r1 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000140)) write$hidraw(0xffffffffffffffff, &(0x7f0000000180)="5d2e8b31951a66fd5a41320c478434c335e7388abf2e7acdc8d65ee057867c3df6351a44871070071bd11e4ab26849ab7a68f1491fbf9f7b67f5d1f5282f6dc71c6c3d10c173", 0x46) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000200)) read$hidraw(r1, &(0x7f0000000240)=""/68, 0x44) write$hidraw(r0, &(0x7f00000002c0)="8ea693c4d575583199b1121b65b6a2beb141c6a9df8b37c5abf1b492ada90fdea788cf7d5d0969cf02ec3b0b1e44ef33a6b064d1119f287bdcc0da261d1877867c3f7eabbe4c6351be93cacf0a9828f0e80f0fec368b95628bc8d97c3e4f8cca6057bd3f1e5566334757654ecf3557754bb6a38f0bc748e210020eefcb21595d27a4073b8753078094530a6906708cf3599858672986cfb274302a944c6d593cfb45c55ee32b21ba490a4915c08e73766262481a250282ba485b56f169894f313b17fac5b338f658f7bc14024562e089ef60ddaf5008ed", 0xd7) r2 = syz_open_dev$hiddev(&(0x7f00000003c0)='/dev/usb/hiddev#\x00', 0x9, 0x140) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000400)={{0x3, 0x100, 0x100, 0x40, 0xc0000000, 0x1}, 0x26c, [0x5, 0x0, 0xffff13b7, 0x2, 0x6, 0x1, 0x2, 0x7fffffff, 0x5, 0x7, 0xaa439d7d, 0x200, 0xffffff99, 0x1000, 0xc241, 0x3f, 0x7fffffff, 0x9, 0x7, 0xb7ed, 0xfffffffb, 0x6, 0x1, 0x8001, 0x4, 0xffffffc4, 0x10263751, 0x9, 0x0, 0x2, 0x600000, 0x2, 0x4, 0x7f, 0x101, 0x20, 0x9, 0x9f0e, 0x100, 0x5, 0xb925, 0x9, 0x5, 0x8, 0x4, 0x7fffffff, 0x1, 0x8, 0x8, 0xfffffff8, 0x1ff, 0x8, 0x101, 0x2, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6, 0x1ff, 0xcf, 0x3f, 0x5, 0x3, 0x0, 0xbde, 0x8, 0x8, 0x0, 0xa70, 0x1, 0x5, 0x0, 0x0, 0x9, 0x5, 0x7, 0x8, 0x9, 0x1c3, 0x6, 0xa09, 0x8000, 0x400, 0xc3, 0x47af, 0x4, 0x400, 0x4, 0x16, 0x4, 0x7fffffff, 0x100, 0x9, 0x800, 0x0, 0xffffffff, 0x7, 0x9f, 0xfffffffe, 0x8, 0x3, 0x4, 0x1, 0x0, 0x1, 0x9, 0xffffff71, 0x80, 0x0, 0x9, 0x1, 0x5, 0x81, 0xf06a0000, 0x9, 0x6, 0x2, 0x7, 0x7, 0x9, 0xfbef, 0x3, 0xe0, 0x2, 0x3, 0x7fffffff, 0x5, 0x800, 0x80000000, 0x5, 0x10000, 0x1000, 0x3, 0x1, 0x2, 0xb4, 0x1, 0xc28, 0x1, 0x8, 0x1, 0x6, 0x6d, 0x7, 0x6, 0x5, 0x100, 0xc736, 0x0, 0x40, 0x8001, 0x4, 0x8000, 0x20, 0x9, 0x101, 0x7ff, 0xfffffff9, 0x0, 0x9, 0x4, 0x1, 0xf18, 0x6, 0x7f, 0x4, 0x7fff, 0x101, 0x7, 0x5, 0x7, 0xe755, 0xa000, 0x3, 0x8, 0x9, 0x1, 0x1ff, 0x80, 0xcb5, 0x200, 0x9, 0x7f, 0xff, 0x5, 0x8, 0x6, 0x2, 0x3, 0xe282, 0x80, 0x20, 0x6, 0x2, 0xa1, 0x69d2, 0x0, 0x72a00000, 0x200, 0x2, 0x3e22, 0x1, 0x7, 0x6, 0x10000, 0x548, 0xff, 0x1f, 0x1f, 0x19da, 0x8, 0x2771, 0x4, 0x80, 0xe78f, 0x7, 0x80, 0x6, 0x1, 0x800, 0xfffffff9, 0x57f, 0x2, 0xfff, 0xfffffffd, 0x3, 0x7f, 0xfff, 0x9, 0x9, 0x7fffffff, 0x7, 0x9ce, 0x9, 0x0, 0xfffffff7, 0x9, 0x6b2e530c, 0x4, 0xcf61, 0x6341fb38, 0x1f, 0x4, 0x0, 0x3, 0x0, 0x3, 0xb685, 0x2, 0x200, 0x9, 0x6, 0xa744, 0x5, 0x20, 0x1, 0x2, 0x97ed, 0xfffffbff, 0x5, 0x5, 0x1f, 0x401, 0x9, 0x74, 0x5, 0x7, 0x10000, 0x8, 0x9, 0x9, 0x10000, 0x9, 0x2, 0x0, 0xff, 0x4, 0x80, 0x59d, 0x1, 0x181129a0, 0x4, 0x3, 0x8, 0x0, 0x3, 0x7, 0xfff, 0x9, 0x0, 0x9, 0x54, 0x2df, 0x1ff, 0x5, 0x81, 0x8000, 0x91e, 0x4, 0x5, 0x1, 0xea4c, 0x4, 0xffffffe0, 0x2, 0x101, 0x7, 0x9, 0x7, 0x6, 0x9, 0xfffff800, 0x6, 0x0, 0x4, 0xffff, 0x3, 0x400, 0xfe4, 0xfebf, 0x3f, 0x0, 0x6, 0x7, 0xdc4, 0x8, 0x6, 0x0, 0x0, 0x17, 0x3ff, 0x9cac, 0x81, 0xc5, 0x8000, 0x3, 0x8, 0x7fff, 0x3, 0xcd, 0x80, 0x6, 0x6, 0x9, 0x20, 0x9, 0x2, 0x9, 0x9, 0x1000, 0x1, 0x101, 0x5, 0x0, 0xfff, 0x10001, 0xfff, 0x8, 0x8, 0x1ff, 0x1, 0x3, 0x1, 0x30, 0x3, 0x8001, 0x8, 0x5, 0x800, 0x8, 0x80000001, 0x3, 0x4, 0xfff, 0x5f805dec, 0x7fffffff, 0x0, 0x9, 0x1f, 0x4, 0x81, 0x2, 0x2, 0x6a, 0x3f, 0x8b, 0x80000000, 0x401, 0x91b, 0x3f, 0x5, 0x8, 0x1f, 0x1f, 0x7f, 0x6, 0x100, 0xec9, 0x19, 0x80000000, 0x6, 0x7, 0x1, 0x1, 0x3f, 0x1ff, 0x2, 0x3, 0x9, 0xfffffffd, 0x9, 0xfffffff9, 0x3, 0x7ff, 0x296, 0x2f7f, 0x9, 0x1, 0x400, 0xb8a, 0x6, 0x4342, 0x5, 0xfffffffb, 0x8, 0x1, 0xff, 0x40, 0x400, 0x401, 0x9, 0x0, 0x6, 0xffff, 0x0, 0x675, 0x0, 0x5871, 0x400, 0x1f, 0x4, 0x100, 0xfffffffc, 0x3, 0x2, 0x0, 0x7fffffff, 0x4, 0x10000, 0x8, 0x4, 0xfff, 0x55, 0x8, 0x7fffffff, 0x4, 0x8, 0x10001, 0x6, 0x100, 0x4, 0x1000, 0x7, 0x3, 0x4, 0x5, 0x8000, 0x4f82, 0x0, 0x9, 0xbe9, 0x40, 0x1, 0x3, 0x9, 0x9, 0x81, 0x80, 0x1f, 0x4, 0x3ff, 0x9, 0x5, 0xa030, 0xa3c, 0x1, 0x454c, 0xb3d1, 0xb94, 0x2, 0x100, 0x3, 0x4a5, 0xffffffff, 0xb3e, 0x1, 0x5, 0x8, 0x8001, 0x2, 0x8b52, 0x4, 0x2, 0x7fff, 0x9, 0x1, 0x9, 0x6, 0x6, 0x7fff, 0x7ea6, 0x0, 0x3ff, 0x8, 0xe, 0x101, 0x6, 0xffff, 0x3, 0x20, 0x0, 0x7, 0x5, 0x20, 0x6, 0x3, 0xfffffbaf, 0xe8, 0x1f, 0xbad, 0x3, 0x61, 0x1, 0x7c, 0x5, 0x2, 0x5, 0xfffffff9, 0x81, 0x39, 0x4, 0x1, 0x0, 0x3, 0x1, 0x2254, 0x4, 0x2d71, 0x3f, 0x2, 0x6, 0x3, 0x7, 0x1c0000, 0x1f, 0x0, 0x80, 0x10000, 0x800, 0x96, 0x10001, 0xd8, 0xffffff14, 0xa7f8, 0x4, 0x21e, 0xe2f, 0x0, 0x8, 0x6, 0xffffff9a, 0x5, 0x6, 0x80, 0x6, 0xf0e, 0xfffffffb, 0x7fff, 0x7ff, 0x2000000, 0x9, 0x6, 0x27, 0x1, 0x4, 0x6, 0xb761, 0x3f, 0x3, 0x1f, 0x9, 0x5, 0x1, 0x9, 0xc1, 0xf2, 0x4, 0x430, 0x7ff, 0x20, 0x7, 0x400, 0x8, 0xff, 0x9, 0x7ff, 0x0, 0x80, 0x6, 0x8, 0x5, 0x200, 0x5b, 0x9, 0x46c19f15, 0x7, 0x3, 0x5, 0x8, 0x0, 0x2, 0x80000001, 0x7fff, 0x429, 0x7, 0x5, 0x8000, 0x101, 0x10000, 0x1f, 0x0, 0x6, 0x4, 0x1, 0x5, 0x4, 0x8000, 0x7, 0x2, 0x10001, 0x8, 0x1, 0x5, 0x0, 0xf7, 0x6, 0x3, 0x8, 0x7e, 0x4, 0x94fc, 0xfffff800, 0x6180, 0x7, 0x2, 0x6, 0xf91e, 0xd58, 0x1fffe0, 0x200, 0x2, 0x5, 0x7, 0x7ff, 0x800, 0x9a, 0x2, 0x1f, 0x3ff, 0xab, 0x10000, 0x4, 0x2, 0x6, 0x3, 0x6, 0x2, 0x7, 0x4, 0x4, 0x4, 0x9, 0x2, 0x7, 0x9, 0x6, 0x80000000, 0x3, 0x8, 0x6, 0x3ff, 0x5, 0x81, 0xfabc, 0xff, 0x4, 0xff, 0x8, 0xffffff0b, 0x5, 0x6, 0x40, 0x0, 0x2, 0x0, 0x6, 0x8, 0x70, 0x2, 0x4ec0, 0x20, 0x10c000, 0x8000, 0x8001, 0x3, 0x5, 0x200, 0xfffffffd, 0x7f, 0x449, 0xfffffff7, 0x1c2, 0x800, 0x5, 0x7, 0x3, 0xfff, 0x8, 0x80000000, 0xffffffe1, 0x9, 0x6, 0x8, 0x40, 0xfffffffa, 0x3f, 0x80000000, 0x800, 0x7, 0x0, 0x6, 0x10000, 0x998e, 0xce, 0x8, 0x8, 0x8228, 0x2, 0x1ff, 0x0, 0x4, 0xffff, 0x7, 0x7, 0xfffffffa, 0x7, 0x6, 0xc9, 0x9, 0x0, 0x6, 0x8001, 0x8, 0x10000, 0x39, 0x4, 0x653, 0x8, 0x6, 0x4, 0x7, 0x1, 0x9, 0x3, 0xfffffffe, 0x7ff, 0x1, 0x8, 0x9, 0x7f, 0x7, 0xa8, 0x10000, 0x5, 0x321d, 0x9, 0x5, 0x0, 0x1000, 0x6, 0xfff, 0x0, 0x2, 0x20, 0x800, 0xffffffff, 0x3, 0x2, 0x6, 0x5, 0x0, 0x800, 0x4, 0xffffffff, 0x7, 0x1f, 0x80, 0x3ff, 0xfffffffa, 0x2, 0x2, 0x40, 0x6, 0x8, 0x9cd9, 0x8a, 0xd94, 0x3f, 0x5331ab30, 0x1, 0x2, 0x1, 0x7fffffff, 0x9, 0xffffffff, 0x2, 0xa9d09c6, 0x2, 0x1e8, 0x4, 0x511c04ef, 0x3ff, 0xc436, 0x2, 0x9, 0xfffffffc, 0x1, 0x6, 0x80, 0x6, 0x8, 0x7, 0x8, 0x9, 0x7fff, 0xfffff442, 0x5, 0x332, 0x8, 0x5, 0x40, 0x5, 0x3, 0x3, 0xb0f1, 0x7, 0x9, 0x200, 0x0, 0x6, 0x7f, 0x2, 0x8, 0x7fffffff, 0x4, 0x3, 0x0, 0xbc, 0x9, 0xffff, 0x5, 0x7ff, 0x8, 0x3f, 0x3a4, 0x9, 0x6c, 0x81, 0xef, 0x101, 0x8, 0x0, 0x7, 0x8000, 0x7e, 0x7f, 0x2, 0x1f, 0x0, 0x1, 0x42, 0x3, 0xff, 0x10001, 0x1, 0x9, 0xffffffff, 0xff, 0x8, 0xc55, 0x8, 0x0, 0x9, 0x80000000, 0xd9, 0xffffff80, 0x7ff, 0x1, 0x100, 0xfffff801, 0x7, 0xd3f1, 0x5, 0x7, 0x10000, 0xe4a, 0x4, 0x3, 0x3, 0x0, 0x4, 0xaa, 0xffffffff, 0x0, 0x5, 0x1, 0x3ff, 0x3ff, 0x1000, 0x2d, 0xffff4109, 0x6c5, 0x26, 0x3, 0x1f, 0xf6, 0x40, 0x3, 0xe7, 0x100, 0x3f, 0x40, 0xff, 0x7, 0x3, 0x4, 0x2, 0x3f, 0x9, 0x4, 0x8001, 0xfffffffc, 0x2, 0x7ff, 0x0, 0x4, 0x3ff, 0x40, 0x57, 0x10001, 0xeae, 0x6, 0x401, 0x7, 0x2, 0x3, 0x7, 0xff, 0xff, 0x1000, 0x1f70e199, 0x4, 0xfffffffe, 0x5, 0x80000000, 0x4, 0x6, 0xe968, 0x7, 0x3, 0x7ff, 0x10001, 0xffffffeb, 0x0, 0x1f8, 0x10000, 0x5, 0x7, 0x30, 0x80000001, 0x400, 0x2, 0x9b, 0xfc, 0x0, 0x10000000, 0x6, 0x7a, 0x8, 0x3f, 0x8, 0xffff, 0x3, 0x80, 0x7, 0x10001, 0xfff, 0x401, 0x1f, 0x6, 0x80000000, 0x3f, 0x0, 0x3, 0x238, 0xd64e, 0x1, 0x3, 0x6159, 0x6, 0x40]}) r3 = syz_open_dev$hidraw(&(0x7f0000001440)='/dev/hidraw#\x00', 0xe908, 0x24ab00) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000001480)=""/15) r4 = syz_open_dev$hidraw(&(0x7f00000014c0)='/dev/hidraw#\x00', 0x4, 0x1) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000001500)) r5 = syz_open_dev$hidraw(&(0x7f0000001540)='/dev/hidraw#\x00', 0x2, 0x1) read$hidraw(r5, &(0x7f0000001580)=""/42, 0x2a) r6 = syz_open_dev$hidraw(&(0x7f00000015c0)='/dev/hidraw#\x00', 0x1, 0x412200) read$hidraw(r6, &(0x7f0000001600)=""/175, 0xaf) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001700)=0x6) 06:03:31 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x1, 0x4000) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x354) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000040)=""/54) r1 = syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x3, 0x103040) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0xf1c) r2 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x5, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000100)={{0x3, 0xffffffff, 0x0, 0x401, 0x81, 0x8001}, 0xa1, [0x5b3, 0x80000000, 0x1ff, 0x9c72, 0x9a8d, 0x255, 0x3, 0xff, 0x7, 0x6, 0x200, 0x0, 0x5, 0x8, 0x401, 0xf59a, 0xa6bc, 0x80000001, 0x9, 0x6, 0xd62, 0x4, 0x9e8c, 0x4, 0x9, 0xff, 0x0, 0x9, 0x1000, 0x80000001, 0x92b, 0x4, 0xfffffc01, 0x0, 0x7, 0x4, 0x5, 0xfff, 0x7f, 0x9, 0xfffffffb, 0x9, 0x10001, 0x9, 0x3b, 0x51, 0x38, 0x4, 0x7, 0x5, 0x2, 0xff, 0x9668, 0xfffffff9, 0x6, 0x56, 0x6f, 0xfffffffb, 0x4, 0x7, 0x3c5, 0x6, 0xa3b, 0x6, 0x7, 0x2, 0x9, 0x8, 0x4, 0x16, 0x3, 0xdb, 0x0, 0x7, 0x8, 0x80000001, 0x1f, 0xb7c2, 0x1, 0x550, 0x2000000, 0x101, 0x7, 0xff, 0x76, 0xffffffff, 0x8, 0x0, 0x8, 0x7, 0x1, 0x6e, 0x6, 0x2, 0xd5d6, 0x8000, 0xa046, 0x1, 0x6, 0x4f6, 0x9, 0xd75, 0x5, 0x0, 0x1ff, 0x0, 0x80000001, 0x4, 0x5, 0xffffffff, 0x5, 0x5e, 0x81, 0x4, 0x5, 0x6f8, 0x2, 0x1, 0x173, 0x687, 0x0, 0xffffffff, 0x1, 0x4, 0x25b, 0x6, 0x3f, 0x7fff, 0x5, 0xffffffbb, 0x99a0, 0xfffff976, 0x101, 0x8, 0xdd7, 0x7ff, 0x400, 0x7, 0x400, 0x55bf, 0x6, 0x9, 0x4, 0x3, 0xfffffffe, 0x0, 0x3ff, 0x8, 0x9, 0x4, 0x5, 0xcb, 0x27f, 0x6, 0xf7a5, 0x20, 0x6, 0x7, 0x4, 0x478, 0x4, 0x10001, 0x6, 0xffffffff, 0x4, 0x8, 0x10001, 0xfff, 0x3, 0x3, 0x9, 0x9, 0x1, 0x0, 0x3874, 0x1000, 0x7, 0x2653, 0x7, 0x1898, 0x3, 0xf0a9, 0x1, 0xd7, 0x6, 0x1, 0xff, 0x7, 0x40, 0x3ff, 0x5, 0x0, 0x1, 0x6, 0xf9, 0x101, 0x7e, 0x1, 0x20, 0x7ff, 0x2, 0x6, 0x7, 0x3, 0x8, 0x101, 0xfc, 0x1, 0x1, 0x40, 0x4, 0xfffffffc, 0x80000000, 0x800, 0x775, 0x0, 0x40, 0x3f, 0x7, 0x6, 0x1, 0x400, 0x8001, 0x2, 0x5, 0x100, 0x8, 0x5411, 0x100, 0x8, 0x7, 0x1, 0xfffff801, 0x8, 0x5, 0xffa, 0x1, 0x2, 0x1, 0x4, 0x100, 0x3, 0x578a, 0x80000001, 0x7, 0x20, 0xce, 0x6c, 0x2, 0x4, 0xffffffc1, 0x3, 0x6, 0x27091784, 0x2, 0x70260000, 0xd5, 0x2, 0x1, 0x8001, 0x3e5b4de4, 0xb885, 0x6, 0x4, 0x8001, 0x800, 0x8, 0x5, 0x6, 0x5, 0x5, 0x9, 0x75, 0xf8d, 0x8, 0x8, 0xffff7fff, 0x5, 0x7, 0x7f, 0xfffffffb, 0x800, 0x3, 0x4, 0x3, 0x5, 0x1, 0x1f, 0x81, 0x8, 0x7, 0x9, 0xffffffff, 0x78d700a4, 0x8001, 0x9, 0x5, 0x7fffffff, 0x1, 0x800, 0xfff, 0x5, 0x9, 0x7, 0xba4fc565, 0xca0, 0x20, 0x6, 0x1, 0x7058, 0x4b30, 0x1ff, 0xf1, 0x8, 0xcd12, 0x5, 0x40, 0x8, 0x1ff, 0x18, 0x38b418d2, 0xfff, 0x9, 0x80000001, 0x7, 0x7, 0x81, 0x8, 0x3, 0x9, 0x0, 0xbbc, 0x19ec2475, 0x8, 0x9, 0x8, 0x5, 0xfff, 0x5, 0x140, 0x8, 0x10000, 0x2, 0x4, 0x6, 0x3, 0x7, 0x3, 0x8, 0x40, 0xfffffffc, 0x10000, 0xf8, 0x7, 0x0, 0x5, 0xff, 0x7fff, 0x3cd4, 0xfffffffd, 0xfffffffb, 0xffff, 0x0, 0x6, 0x1, 0x8, 0xffffffff, 0x9, 0x3, 0x1, 0xffff, 0xffffffc1, 0x4, 0xfffffffa, 0x80, 0x774, 0xff, 0x6, 0x1, 0x4, 0x5, 0x5, 0x1ff, 0x0, 0x6, 0x4, 0x101, 0x7, 0x970c, 0x2cb7, 0xffffffff, 0x40, 0x0, 0x4, 0x8000, 0x3f, 0x20b, 0x3, 0x4a, 0x2, 0x6, 0x1, 0x7fff, 0x8001, 0x7, 0x800, 0x2, 0xffff, 0x6be, 0x7, 0x7, 0x3, 0x2, 0x1c72, 0x6, 0x8, 0xffffff1f, 0x0, 0x8, 0x2000000, 0x3, 0x2, 0xf3, 0x54a3, 0x7fffffff, 0x7314, 0x6, 0x2, 0x8001, 0x9, 0x5c, 0x0, 0x5, 0x53, 0x1, 0x0, 0x10000, 0xc2c, 0x81, 0xf3, 0x6, 0x7, 0x4, 0x7, 0x1c000, 0x8, 0x8, 0x7, 0x7, 0x0, 0x5, 0x2, 0x5, 0x904, 0x2, 0x6, 0x6, 0x9, 0x3, 0x5, 0x3, 0x590, 0x9, 0x3, 0x2, 0x5, 0x5, 0x20, 0x2, 0x101, 0x7f, 0x400, 0x0, 0x75, 0x3, 0x65b, 0xffffffff, 0xe441, 0x40, 0x3, 0x1ff, 0x7, 0x6e, 0x5, 0x8e1, 0xbfb, 0x9, 0x7fffffff, 0x10000, 0x8, 0xfffffff9, 0x5, 0x1, 0x7, 0x401, 0x3, 0x4f4d8480, 0xda68, 0x3c, 0x8, 0x30, 0x0, 0x3, 0x1, 0xcf85, 0x5, 0x1, 0x0, 0xffffff7f, 0x9, 0xfe, 0x0, 0x1, 0x400, 0x7fffffff, 0x9, 0x0, 0x80000001, 0x0, 0x1000, 0x8, 0x2, 0x2d, 0x7, 0x5, 0x9, 0x3, 0x21, 0x0, 0x5, 0xffff, 0x9a5b, 0x3, 0x1, 0x2, 0x6, 0x5, 0x80000, 0x8, 0x800, 0x5, 0x9, 0x7, 0x10000, 0xfffffffc, 0x2, 0x1, 0x8001, 0x4b2e, 0x0, 0x5, 0x2, 0x2, 0x4, 0x3, 0x7fffffff, 0xb6a, 0x1ff, 0x3, 0xfffffff8, 0x200, 0x1, 0x400, 0x5, 0x1, 0x746, 0x6, 0x0, 0x5, 0xe88, 0x2, 0x9, 0x3, 0x8, 0x800, 0x9, 0x2, 0x22, 0x6, 0x80000001, 0xfffffeb0, 0x5, 0xffffffff, 0x9, 0x3, 0x1, 0x4, 0x80000001, 0x8, 0x5, 0x4, 0x3, 0xfffffffd, 0x9, 0x7ff, 0x8, 0x7, 0x7, 0x4, 0xfffff500, 0x80000000, 0x3cd, 0x7fff, 0x2, 0x1, 0x20b07784, 0x7, 0x9, 0x8001, 0x7, 0x3, 0x3ff, 0x1, 0x7, 0x7fffffff, 0x2, 0xffff, 0x3f, 0xfff, 0xe, 0x0, 0x4, 0x0, 0x10001, 0x200, 0x3ff, 0x40, 0x3, 0x7fff, 0x3ff, 0x7b, 0x100, 0x2, 0x8, 0x3, 0x3ff, 0x7ff, 0x7, 0x1, 0xdb4cced6, 0x6e3e6582, 0xbd3, 0x1000, 0x1ff, 0x90c9, 0x4, 0x3f, 0x71f, 0x7ff, 0x3, 0x1, 0x9b, 0x4, 0x85, 0xffffffff, 0x1, 0x4, 0x4, 0x0, 0x9, 0x10000, 0x0, 0x1, 0x4, 0x7fff, 0x2, 0x101, 0x5, 0x5, 0x0, 0xfff, 0xffffffff, 0x3, 0x4, 0x400, 0x4, 0x3, 0x7, 0x7fff, 0x7ff, 0xfffffffa, 0x7, 0x0, 0xf3, 0x6, 0xc5, 0xd765, 0x6, 0x10001, 0x81, 0x7, 0x7ff, 0x4, 0x8001, 0x4, 0x2, 0x7ff, 0x2, 0x8, 0x496, 0x7, 0xffffff8f, 0x0, 0xed5, 0xffff421f, 0x3, 0x3, 0x2, 0xfffffff9, 0x9, 0x3, 0x100, 0x1b, 0x4, 0xff, 0x3f, 0x8d, 0x1, 0xfffffffe, 0x7, 0x0, 0x7fffffff, 0xfffffffb, 0x5b2, 0x9, 0x6, 0x7ff, 0x31a49ed4, 0x1ef, 0x8, 0x9, 0x101, 0xa61, 0x7f, 0x2, 0x2, 0x0, 0x0, 0xffffffd7, 0x7, 0x9083, 0x8dbb, 0x200, 0x2, 0xffffffc0, 0x7, 0x5, 0x7, 0x10000, 0x3, 0x2, 0x7fffffff, 0x7fff, 0x2, 0x1, 0x3, 0x0, 0x7, 0xffffffff, 0x81, 0x0, 0x9, 0x5, 0x101, 0x8000, 0xfffffff9, 0x4, 0x1, 0x49, 0x62f9, 0x6, 0x7, 0x1000, 0x4a, 0x3f, 0x4, 0x8000, 0x20, 0x7ff, 0x3, 0x2, 0x81, 0x40d6, 0x8, 0x20, 0x7ff, 0x20, 0x9, 0x4, 0x0, 0x9a, 0xffffa599, 0x5, 0x82, 0x1, 0xb000, 0x7, 0x200, 0x10000, 0x10001, 0x66, 0x1, 0x1000, 0x0, 0x10000, 0x401, 0x9, 0xcc, 0x43a38c87, 0x80000001, 0x8, 0x0, 0x5, 0x7, 0x200, 0x7, 0xff, 0x3, 0x81, 0x10000, 0x7, 0x4, 0x0, 0xba5, 0x3, 0x6, 0x8, 0x9, 0x3, 0x8, 0x70, 0x80000000, 0x3ff, 0x0, 0x4e9b, 0x9, 0x40, 0xfffffffd, 0x6, 0x5, 0x59, 0x7, 0x9, 0x8, 0x2, 0x81, 0x7, 0x6, 0x5, 0x5, 0x0, 0x6, 0x81, 0x7fff, 0x8, 0x7f, 0x3, 0x1ff, 0x1f, 0x7fff, 0x800, 0x20, 0x5, 0x8, 0x100, 0xffffffff, 0x5, 0x800, 0x3, 0x10, 0x60dd7af0, 0xffffff01, 0xbf8f, 0x543a, 0x1ff, 0xd6b, 0x93, 0x9, 0x6, 0x1f, 0x8, 0xa65c, 0xcd, 0x1000, 0x918f, 0x3, 0x7, 0x20, 0x9, 0xf109, 0x7, 0x4, 0x9, 0x6, 0x6, 0x80, 0x101, 0xf95c, 0x7ff, 0x8001, 0x7, 0x6, 0x8, 0x1, 0xfffffffe, 0x0, 0xffffa42a, 0x200, 0x400, 0x80000000, 0x2, 0x9, 0xfffffffc, 0x100, 0x4, 0x6, 0x3, 0x6, 0x4, 0x8, 0x0, 0x8, 0x401, 0x4, 0x7ff, 0x3, 0x7, 0x1, 0x3, 0x7, 0x3f, 0x800, 0x8001, 0xfff, 0xc0, 0x4, 0x9, 0x100, 0x8, 0x401, 0x1, 0x81, 0x400, 0x5fa, 0x0, 0x4, 0xa47, 0x6, 0x3, 0x1, 0x200, 0x5, 0x8, 0xffff, 0x3ff, 0x53, 0x800, 0x9, 0x256, 0x5, 0x8001, 0x8, 0xb96, 0x1, 0x1ff, 0xcc67, 0xc36, 0x9c7, 0x7, 0x0, 0x3cdd, 0x0, 0x5c9, 0x3, 0x101, 0xd3f7, 0x43da2b96, 0x401, 0x2, 0x6, 0x1ff, 0x7e4e, 0xfff, 0x1, 0xfffffffc, 0x401, 0x800, 0x5, 0x5, 0x7fffffff, 0x2f, 0x3f, 0x20, 0x41a3, 0x6, 0xfffff800, 0x6, 0x7, 0x7ff, 0x1, 0xfff, 0x401, 0x4, 0xff, 0x200, 0x2, 0x0, 0xfffffffb, 0x2, 0x7fffffff, 0x80, 0x1ff, 0x20, 0x600000, 0xee3d, 0x99bb, 0xb108, 0x7, 0x17, 0x8, 0x80000000, 0x240000, 0x1, 0xfff]}) r3 = syz_open_dev$hiddev(&(0x7f0000001140)='/dev/usb/hiddev#\x00', 0x0, 0x444040) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000001180)={0x3, 0x3, 0x8, 0x434, 0x5, 0x8}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x6) r4 = syz_open_dev$evdev(&(0x7f00000011c0)='/dev/input/event#\x00', 0x7f, 0xc0180) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000001200)=""/216) r5 = syz_open_dev$evdev(&(0x7f0000001300)='/dev/input/event#\x00', 0xfffffffffffffff7, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000001340)=""/180) r6 = syz_open_dev$hiddev(&(0x7f0000001400)='/dev/usb/hiddev#\x00', 0x3, 0x80) ioctl$HIDIOCGREPORT(r6, 0x400c4807, &(0x7f0000001440)={0x2, 0x3, 0x80}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000001500)='/dev/usb/hiddev#\x00', 0x6, 0x50800) ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x27b0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000001580)=""/39) 06:03:31 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x2, 0x280001) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000040)={0x3, 0x1, 0x6, 0xa3, 0x40, 0x6, 0x0, 0x80, 0x7, 0x1, 0x4941, 0x9, 0x40}) r1 = syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x8, 0x8000) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x2, 0x100, 0x1}) r2 = syz_usb_connect$cdc_ncm(0x1, 0x70, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x4, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '}.'}, {0x5, 0x24, 0x0, 0xfd56}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x20, 0x2, 0xd9}, {0x6, 0x24, 0x1a, 0x7}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x0, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x8, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xcd, 0x5, 0xfb}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x9, 0x5b, 0x5, 0x20, 0x2}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x1, [{0x7, &(0x7f0000000200)=@string={0x7, 0x3, "e5e7863597"}}]}) syz_usb_ep_write(r2, 0x5, 0x8a, &(0x7f0000000280)="900e8ff4d4928d7db4b27b471756169103b466c252d2f5bd769cb7cf1c9da164df8cd2d0a036686191bdb5b5e2d184e865435b4dcba6eb8372bb7f2c2c003b68166b1fec4bc81f9d6bf0ba0325404ba72accda2b8a8b873a0200e58b51b049afa7de647e3fb6ab052cbf64ac5a5f998f00d5881de0182f7ee8b786a94ed6de5b32acf2299b76702e3e0b") ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000340)={0x3c, "ea1f3c0fdcd9d4aaa925c5d86e95c6efffafde76bb42008bb7bd528d25dbcf8dc7bca26cd17bc5250566fa6f978428ca95e56384c3b705a7d1a28cf2"}) r3 = syz_open_dev$hiddev(&(0x7f0000000380)='/dev/usb/hiddev#\x00', 0xb01, 0x8000) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0xfff) r4 = syz_open_dev$hiddev(&(0x7f00000003c0)='/dev/usb/hiddev#\x00', 0xfffffffffffffffb, 0x200) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x1) syz_open_dev$hiddev(&(0x7f0000000400)='/dev/usb/hiddev#\x00', 0x0, 0x4c802) r5 = syz_open_dev$hiddev(&(0x7f0000000440)='/dev/usb/hiddev#\x00', 0x774a, 0xc0) ioctl$HIDIOCGVERSION(r5, 0x80044801, &(0x7f0000000480)) r6 = syz_open_dev$hiddev(&(0x7f00000004c0)='/dev/usb/hiddev#\x00', 0x3f, 0x2) ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0x5) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000500)={0x1, 0xffffffff, 0x5, 0x20, 0x8001, 0x6, 0x626b, 0x1, 0x2, 0x2, 0x3, 0x0, 0x20, 0x7}) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000540)={0x3, 0x2, 0x40, 0x1}) r7 = syz_open_dev$hiddev(&(0x7f0000000580)='/dev/usb/hiddev#\x00', 0x75fe9dfd, 0x101800) ioctl$HIDIOCGCOLLECTIONINFO(r7, 0xc0104811, &(0x7f00000005c0)={0x9, 0x81, 0x9, 0x10000}) 06:03:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7fff, 0x400) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x5) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x10, 0x2, 0x970, "1232de29a5e62b29865e5eae9c591bda6350ff775cc9d8db44d0bc7030a896c5"}) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x8040) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x6416, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000140)=""/28) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x100, 0x2000) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000001c0)=""/149) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000280)) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000002c0)=""/251) syz_open_dev$char_usb(0xc, 0xb4, 0x4) r3 = syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x30400) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000400)=""/109) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x51, 0x7, 0x2, {0x8000, 0x495}, {0x46d2, 0x8000}, @rumble={0x5, 0x2}}) r4 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000500)=0x8) r5 = syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x6, 0x8402) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000580)=0x7) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x22c, &(0x7f00000005c0)={[{0xdf, 0x4e00, "b28ffacaa79e88674a494b93fd5ecaf5b240be6304091242d038b8c9453745e89a37db9e62d7478959be5601e531f89ee4f78282195e09cca910cc68bf140583b5c7ab42fc9f9de9f740a81a871125d901c4f3e18e53f959771dd6806407de51b9b5fd4def06cc811ce871d0df456b0ac13a7f9d3899decd1bbcb1b3831733c2e60437a9264692d53bfd3ea91f488adc0f2bf1e5fff6fe8665d122484ac64412d449688c196fb065815dd328b07c87bf34849c2f2ed3085d753abae06e3702adb6ee1ca8980e0d2161f0d6f6230f502ceaefda6f99ee13fc046996030672b9"}, {0x6b, 0x4e00, "a413dba62f16299442b778d54f47467ed7339d9eb9096a5207f902bc105ec0d906534a31c130c3bed943c2ebea9f750051fb7de0a96f36b7613a02d0ea84101d0ed77d98a23a002ea6d388b32872975296ae98040db504b2d3eb8dec1255b6e11ae349bacae5f54d5be8ff"}, {0xd1, 0x4e00, "46e4ac5aadd66c83fdfb98939ac3f5ea6224505e8eccbcd323b5caa7c66c454e5496f624032be65705edce47909667ccd97347b869d6ca898a7eeec3e9702edb802ec1450be7c53a279e2dcee6edaf5d7390443296bc1cb0e2b226ac3b75cbdfee9ad18f2faf77eb7b026d71c6ce966ba71de417113b47a83b1381af91585e99809bd542d850b532f60ef5192d0d2fb5d8a06f687bbfb706875dd115d0cf8da6194b4dc849bdd29c62d5e7e0d017dffa3c14a9fe186391a63af11850824197ddcb17e149df095d74301fffb92d89151097"}]}) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000800)=[0x4, 0x5]) 06:03:31 executing program 2: ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000000)=""/133) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000000c0)=""/92) r0 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x6, 0x84947becdb0437f7) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000180)) r1 = syz_open_dev$hidraw(&(0x7f00000001c0)='/dev/hidraw#\x00', 0xdef, 0x10000) read$hidraw(r1, &(0x7f0000000200)=""/58, 0x3a) r2 = syz_usb_connect(0x6, 0x8ea, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xd0, 0x16, 0x1d, 0x40, 0x5ac, 0x821f, 0xa8b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d8, 0x3, 0x5, 0x2, 0x10, 0x5f, [{{0x9, 0x4, 0x2f, 0x99, 0x5, 0x1e, 0xc7, 0xff, 0x1f, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'l'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x2910, 0x3, 0x689, 0x1}, {0x6, 0x24, 0x1a, 0xf8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x3f, 0x7}, @obex={0x5, 0x24, 0x15, 0x4}, @dmm={0x7, 0x24, 0x14, 0xffff, 0x6}, @dmm={0x7, 0x24, 0x14, 0x7, 0xfff7}]}], [{{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x0, 0x8, 0x2, [@generic={0xda, 0xd, "6d76e66e28be552690962fdef0a5a3f244eabe89bf5a8f22d863c000d15588feac4190018d65579c35e8adef5e5584915784ef0bdbdf79206e1649bed2121e336dc689b4569c61abb1773b91b7b3987be9e42376bc7cea6de606c2ebe01647fd70cac536c439637eff9a7eab1c29434ea3499494b5d0ce53f11a0d65eca189e48b3dd0e51f5eaf4f5eeaecf9b9cc4082340bb1e2e4028b5973582648a18e85e76a243001423cfffd4bfad910bd25c3833a74ebe7966c2afaad93883e0db90716492fe769aa887cbd87a7fd5c16204a1ab8289ebb4637cc00"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x2}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x1, 0x5, 0x9, [@generic={0xca, 0x21, "726637a221340ebffaffaa9d70f193d084a385481459188000736a1cfc5fde5ad000b16886c817ff9dcac52cdbed07f924f080f64a55e21e7f70585e17d0ec5fc29338fae19d858855eb4e767b26943f04d4dcbb7c3ae67cbfc0eb25798cd0048663b68eee5cf4a5e0c9e55239607a73af6c5d8e7ae7074912c629fad2ae4be8717812be5173cbb7ad2aae79fa7a23793a2aaa545e81037b2a43183dc16e845dceab7f7fc659b30ab0e34d4f9a0ab53fc022325c8e725a314a5d815c26b67b2ee4417a5313dd7d06"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x6, 0x0, 0x3, [@generic={0xb2, 0x9, "99f62f4037ffd58e269b620dbf8e666077414c0c769c8337b3704d8f1e3ace4ab5efe542b578346134bdd447b788db2d0247f62ff894304179939c49a04a2596cc5906ad3e91f91c240a695aa29fb01898f5e3020e5b7de093183f4b71e5784e5d60fd010914d71d4b53928a0475e94855bca3fe7ad2d5d006614113186fcf2aaf1f41aa0ae354f4913f95080fca0bef9e9bf7716ccd40fc63c2f9ef26997f85a37edc924e972f0ce7348fa9be59d27a"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x0, 0x0, 0x1, [@generic={0xb0, 0x6, "d87f95f20fa642900bded1441e44164d9da9ea86dfc7267ddf6c51d52cf955cc230b24892c29c6ebf9630ff68c1aefaf805be15c8653302a9c0e88afe226a7b03657802ebdf8d124decb463664bc8d6297262ec521f2f9a719902704fc766dbb371238011c4c978ae7a29d187e7b25cd5c3b9f60517f21f26d5066db41f084cbf911685765297a341ccb3dccf4bef614a138a4b5c369e05771182b2010c58b427c629c873d55ed74c798c370e8f3"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x9, 0xe9, 0x5}}]}}, {{0x9, 0x4, 0xaa, 0xab, 0x7, 0xf3, 0x11, 0x21, 0x7, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "ac7e"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x8, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x20, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x3f, 0xfffa}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "fbe9925cfe"}, {0x5, 0x24, 0x0, 0x63e9}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x8, 0x146, 0xd9}, {0x6, 0x24, 0x1a, 0xfaf, 0x27}, [@network_terminal={0x7, 0x24, 0xa, 0xfe, 0x81, 0x6, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x9, 0x8, 0x5, 0x3, 0x2}, @country_functional={0x12, 0x24, 0x7, 0xe1, 0x3, [0x0, 0x5, 0xff, 0x5, 0x4, 0xabf4]}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x6f, 0x6, 0x81}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x3, [0x7, 0xfff8]}]}], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x4, 0xf2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb7, 0x1}, @generic={0x20, 0x3, "774eaec934f4d9741d93eea8216524e31092ae888924d13792199e433381"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x1f, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6d, 0x8fd}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x986}]}}, {{0x9, 0x5, 0x6, 0x10, 0x618, 0xe0, 0xff, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x4, 0x0, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x100}, @generic={0xcc, 0xb, "aa545b58019257663b499320928b9e06dd130082f8a701a04c16a35d4599f86c1dfeb218bc99c72e4966fbae23389d1a6fdf256394aada51da10c46c032fb4f62829818c8a1ed14fe4ecdce32649ad5f7dfa3b66a7928c897e20f7e1fc0dd9d55c2ff7bd0c74b52ad6c8055505b90464d0fab72db76a70a0b3943d121b50f874674d886314932da0ef5f982661a40bd19cd46c9d455f4c7f21f8da120770223b3f98158718ead4be1207a9643122bddd5d8ecabeeb5ea242b3c3789244afbda250cc747b7484b0b57fcd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, [@generic={0x10, 0x23, "d751430efbf2fa6b76c1065eec65"}, @generic={0xd5, 0x11, "ce8b4cfd38058f49c8b7ee7acf85306c1bcd2a62d8e6af4fddb0ddbd4d3a4eb334f4fab0ca3f5abd78a09cea97e0f0fb62301b4720960d28a9aee941ba9ed2678ebd93a5af90f3bb946350780cffb5d3b6944bb385161b3e3c916844e02075e3b25967d0dff27894ff197cb37fc4eb2290df8e34a23d5f784034090615d51287e5cbc0ba8ea3cca892da564f3a6c783e78a67db4e6c77cce3d7311d518a8b16df1ac0492be1b13bc52338cfc8ddc2dde391ff22059ab0c12a5ee26206ba21ead2be2b34fb4a835943ce735d25a487a25386fca"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x2f, 0x0, 0x3f}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6, 0x1f, 0x7, [@generic={0xee, 0x9, "8259155ba080556d3c1e2db17993b475e4d7aeafc72d9e506dfbb647beb884977592ede8984666af7dd8d134675a1100d0fdae5668593d9c139f64bff4f8dc39cf237f5a9a4163788ff75cd456e06156e25cb537a8ae66f6f8dc0eabe0a2cecb8d16b0321a885cd8e35996fce2ba9ef80e418e2d365c3288a25f315835afac9771c91556f257508aa1140acb02259eacc7c38aa813d041cdd5b526231b83cc981320cdc0b70386b4ba93974edad2875e6cc65d0a195573a9cfb7b1daccd113e8da0ad99f0e840a3ff88ed972b791c2813b2038570cf3cce79749d5861e01d2d5f860d11968c8afebdf2cb154"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7ff}]}}]}}, {{0x9, 0x4, 0x99, 0x0, 0x7, 0xbf, 0x4c, 0x83, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x3d}, [@extension_unit={0x7, 0x24, 0x8, 0x3, 0x7, 0x5}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x5, 0x5, [0x2, 0x7, 0x4, 0x5, 0xc], 0x1}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x1, 0x38, ')'}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0xfe, "db5f3d8a2d"}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}}], [{{0x9, 0x5, 0xb, 0x10, 0x6d4536b065efcc0e, 0x2, 0x0, 0x1}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x80, 0x2, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x20, 0xf1, 0xff}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0xf8, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3f, 0x9, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4}, @generic={0x88, 0xd, "28543e05f66225c73730b46baa79bd9a86d40ffe1dac4fa2b33bde758cb79e834c07d6ae8dbeb32e9d20b4e00193b3b6699cfcf3d0bc2a28e39f1333279735b49d159b1322212929ab32b38e539654142a70bfc9e2e7c8142e600a87f8ba0ae3f4479c49207f790c8d117d3da8c9764ea83e5164472258b7f0d5c0d93a6f994366a436d90632"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x9, 0x1f, 0x2, [@generic={0x7b, 0xe, "4d88b2717caaaee02abe2755045749d30eb6756a082c191020b00c3fa3ce571c2397c4ad4c660dbaeafcea09180b8332a4924c379a66aec0014a41fc40d68f0186bebcef50eb0a756ac6a161a53c3d3cf5b80cd5324aa35d66d8201b79bfb5e90def5b901bcaa5343ab882509955a8e0245fdb0718a3b44394"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xf9, 0x9, 0xe7}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x250, 0x3, 0x8, 0x2, 0x40, 0x1f}, 0x93, &(0x7f0000000b80)={0x5, 0xf, 0x93, 0x1, [@generic={0x8e, 0x10, 0xb, "c41894544f540ad89066dd3a6411a83f8fd60d455ffdf12f0eb00cbaf18a29b60516021797dc9bae8b84a8ffde4380f9709627d554601abe4f43e1444da3c3c92c0cf19a913db24167165a7b2e9db2d58b77b9ed4428e84e189315012a29d8cdb7afc8108778869077c137b54147429459dd65f708ca3168b8608d0ce46a25d15c60a27aa5472c12652a26"}]}, 0x2, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x38e6}}, {0x94, &(0x7f0000000c80)=@string={0x94, 0x3, "4d753876e0172612d9c46b737f5e9337aa43e8ea39c99607715ee25280b7d2baeb89c931dac6ae9c59412c4f424e9f38ddaac46be44afe9e13de3be414bbcaca4cb0f17dfd97901c3efc5b2476cde5bcbdd9f86f9017fa639ee885fc07d5e2c7a04d7705c62db49147201035017306f16e8ba9ddf32deba859821f1b58b9e3c04845207dcb2f87c2e17ac364c2bae5b287d6"}}]}) syz_usb_control_io(r2, &(0x7f0000000f00)={0x2c, &(0x7f0000000d80)={0x40, 0xe, 0x47, {0x47, 0xf, "18d54a42ffd9600bf957ec1b54680d4c18f21bf0c74a5a64549b99621368181e75c459b5c05aa5cdad4941028ecf53887cba6727f9116fbf82f6ae16bf56e6d0803c8a60a2"}}, &(0x7f0000000e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000e40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x0, 0x2c, 0x3f, "856e2394", "109f24a1"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x4, 0x8, 0x4, 0x400, 0x2}}}, &(0x7f0000001380)={0x84, &(0x7f0000000f40)={0x20, 0x11, 0x6e, "c68e101984b6206378908cf4df2aa553c89532412ba475a4b654324994cb868435a0147d46b5da8925a9e7cd5301f618aa038d9644d2af0e1f40eeaa03147b619dcb87533bd38118cea3b56e9ae83808a83139d7706671b74edd0fa00232f357e4c97d6856388b664e1855de9ca0"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x0, 0x5}}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x0, 0x84}}, &(0x7f00000010c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001100)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001140)={0x40, 0xb, 0x2, "1ea4"}, &(0x7f0000001180)={0x40, 0xf, 0x2, 0xfffa}, &(0x7f00000011c0)={0x40, 0x13, 0x6, @dev={[], 0x30}}, &(0x7f0000001200)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001240)={0x40, 0x19, 0x2, 'gz'}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f00000012c0)={0x40, 0x1c, 0x1, 0x89}, &(0x7f0000001300)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001340)={0x40, 0x21, 0x1, 0x1f}}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000001680)={0x2c, &(0x7f00000014c0)={0x0, 0x4, 0x80, {0x80, 0x3, "e407f5cdfe75e262cd8d005efcb49b4e6981ee822ca0ddc9a9ad58530469e01836b3c5803f0f6f6f6e6aab84b814bcdba560ba873f8abf4985ca3c339e14dc5e618f8de3e0be3fcd811585f14eb1bcfde25e8038e7992a85a5c8caf4af62cddcc5aaf55cc00cebc775e077cbf421116356ed37a63ceeb9dacb60073e71ba"}}, &(0x7f0000001580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, &(0x7f00000015c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8a, "22f7209ed00dbaea4dbc3abe6a55c0cb"}]}}, &(0x7f0000001600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x7f, 0x8, "bd37e727", "fe60350b"}}, &(0x7f0000001640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x1e, 0x1, 0x4, 0x9, 0x1}}}, &(0x7f0000001ac0)={0x84, &(0x7f00000016c0)={0x40, 0x0, 0x2b, "b350a74d20a1eaeb2dbef6ccd4f15941a3819316680c5750dee2fe7b037d5cf32a467d344ea795648f75ed"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f00000017c0)={0x20, 0x0, 0x8, {0x100, 0x1, [0xff00]}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001840)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001880)={0x40, 0xb, 0x2, "dd9a"}, &(0x7f00000018c0)={0x40, 0xf, 0x2, 0x8a9}, &(0x7f0000001900)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001940)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001980)={0x40, 0x19, 0x2, 'iS'}, &(0x7f00000019c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001a00)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000001a40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0xd4}}) write$hidraw(r0, &(0x7f0000001b80)="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", 0x1000) r4 = syz_open_dev$hiddev(&(0x7f0000002b80)='/dev/usb/hiddev#\x00', 0x3, 0x40001) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000002bc0)) r5 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002c00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc70a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x231}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x35, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x5}}]}}}]}}]}}, &(0x7f0000002e80)={0xa, &(0x7f0000002c40)={0xa, 0x6, 0x110, 0xce, 0x5, 0x7f, 0x40, 0x87}, 0x2e, &(0x7f0000002c80)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1b, 0x6, 0xf7, 0x8, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x9, 0xf000, 0x4, [0xc000, 0xffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x8, 0xfa, 0x7fff}]}, 0x4, [{0x8e, &(0x7f0000002cc0)=@string={0x8e, 0x3, "b7f1e3bb8deb286b73e102b94b209cc8919952ed85d9ca9ca79bbd74f1ab141604bff2d95bc3c16b248851f245df7e431d2e3e426584f22dfd17e44e8ebda39b8c17f274ddf367e38a7c44f620b43bfc28fd7df1987c466687667c33aeab48bd77e631d1d5877449499a552bc91d694708f3351ea1f04461c5152f78e787b066487d9013c0a12af3b6847448"}}, {0x4, &(0x7f0000002d80)=@lang_id={0x4, 0x3, 0x459}}, {0x5e, &(0x7f0000002dc0)=@string={0x5e, 0x3, "3678c912e1302fe469e4ad8543c7edaedbff4c68e9a1482264f24b394e658157d87acdfbd0caa58a9b7dfe60df47ce61e4f6f8b8051dbe07567e8fd4e9fc14faa1df1eb8d994877cc8c0d3ebdaeebbaf5893d5b841ad88f31efd402d"}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io(r5, &(0x7f0000003180)={0x2c, &(0x7f0000002f00)={0x40, 0xa, 0xb8, {0xb8, 0x18, "a6cbf6cca9103159ed32d5bdad814c43d84ceb1e3ef94c0de8b9bfbebcc94ba3989d6578aa69c3a2a116fab12c557fa04118ca160265f1a30bf004871488ca6b3389bc7dc65c20d85765a32ad425374499ac96014ecb3c2a03162b4aecb729dbcb232e843125b5a2aa624e26250d8b67d6989ea2bf88613dcca7b3c1bb059c1712ee56e086e6f123fc3eac92162ac6aedddc5645cac5c900e67fb7215354400e1649e40f53ba632dfa48666566c68d33ffdbf7deb930"}}, &(0x7f0000002fc0)={0x0, 0x3, 0xde, @string={0xde, 0x3, "e18d9f3e78a709009f87a30140da1a571d40dbdce2b66842751b63b3bab9bedc8ba58123a26b373a175c365ba46dcd82b638c015a4511584c0a91162ea06913fffe38a595e9bccae30a4b8cb4abbb9150b3bb49651fd382d85a4c69e21eedc02b9f89b77771ec00a51232e34013e750c1fbe74a90f6a22bca568d4647d4f5907dd6dba41a80bb4f9cdcf4d868e6c9c8a577599629408da247af2b80734ef5b25960430e9f8afbd34e8f393aaba6d2044698c523c1b09c93b13d3c0e2583e3779419a0301f24b6015e299e03c9d3af4a430b25382e37e9a55d2133591"}}, &(0x7f00000030c0)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2a939eddffcfb09f, 0xd5, 0x0, 0x8, 0xff81, 0x5}]}}, &(0x7f0000003100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0xbf, 0x40, "6007c88a", "aa5fbcac"}}, &(0x7f0000003140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1d, 0x60, 0x80, 0x0, 0x0, 0x6d, 0x5}}}, &(0x7f0000003680)={0x84, &(0x7f00000031c0)={0x40, 0x12, 0xe0, "8c00e5296f45a9900ee5c6524f913feb1d2f2429cb46530d767161a6fcfb50ad9fd61bc3a3e31dc0d477a13681a3ed9dc2aaa68b51f2be193a2878bfd001ce71aeb9cd758e085fffa7ce8a2411f566c418d2175073c1449bdc73e140a093742cdf0132d8f5d4b96f41e67c9662836e38e8a6971aa3420a167718478b83478d3f7cb9b97dbfb56c3b181b2f330de9a0849ef9039a314be78e27c577acbfe64874385fa569d111a89e6190393dddeb75e368eb04048d3e50c4581ff388acbf27af87b05822ff7b9e040059f973dccf245650de0727b6a66715fa7f7028bc9256d6"}, &(0x7f00000032c0)={0x0, 0xa, 0x1}, &(0x7f0000003300)={0x0, 0x8, 0x1}, &(0x7f0000003340)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000003380)={0x20, 0x0, 0x4, {0x120, 0x20}}, &(0x7f00000033c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000003400)={0x40, 0x9, 0x1}, &(0x7f0000003440)={0x40, 0xb, 0x2, '\f&'}, &(0x7f0000003480)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f00000034c0)={0x40, 0x13, 0x6, @random="b147cc377d8d"}, &(0x7f0000003500)={0x40, 0x17, 0x6, @dev={[], 0x10}}, &(0x7f0000003540)={0x40, 0x19, 0x2, "f4f9"}, &(0x7f0000003580)={0x40, 0x1a, 0x2, 0x20}, &(0x7f00000035c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000003600)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000003640)={0x40, 0x21, 0x1, 0x2}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000003740)=@ready={0x0, 0x0, 0x8, "2845ffd1", {0x1, 0x7, 0x8, 0x20, 0xda}}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000003780)=""/97) r6 = syz_usb_connect(0x1, 0x3f5, &(0x7f0000003800)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0x40, 0x1222, 0xe443, 0xa921, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e3, 0x3, 0x2, 0xd7, 0x60, 0x0, [{{0x9, 0x4, 0x8c, 0x6, 0x2, 0xa8, 0x7d, 0x20, 0x3, [@generic={0x22, 0x3, "e6b4ccdf3a04da057d15f4d7138e8baebc434934b3cbb962afcddfc16b13535a"}], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0x4, 0xa1, 0xdc}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x9, 0x4, 0x97}}]}}, {{0x9, 0x4, 0x98, 0x22, 0xc, 0xff, 0xcd, 0xa4, 0xf8, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, 'DXna'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x4, 0x2, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x2000, 0x6d62}, @obex={0x5, 0x24, 0x15, 0x74a8}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x400, [0x80, 0x2]}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x1, 0xffff}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x5, 0x1, 0x9f, 0xe14, 0xf9}, @country_functional={0x8, 0x24, 0x7, 0xff, 0xa825, [0x400]}]}], [{{0x9, 0x5, 0x7, 0x1, 0x20, 0x3, 0x9a, 0x7f}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x80, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}, @generic={0x3d, 0x30, "094f218b4ab3e0d6e2078ea287a70181b69b69e4cf85a713d8b2564f59d131a5c65f1b0cb3f97062ce4d45dd4ba8377204f4adde1ab2eb821ddf5f"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x8, 0x5e}}, {{0x9, 0x5, 0x12, 0x0, 0x40, 0x9, 0x5e, 0x7f}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0xb5, 0xc1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x80}]}}, {{0x9, 0x5, 0x57709a2f85e1940c, 0x0, 0x3ff, 0x9, 0xff, 0x4, [@generic={0x44, 0xe, "227ae35b1313ad6ae27a189abdc3f15eafdcd509843a1792a141f55be8a70771c48e084b076cc5a81b916be3b53972c5ce6d1e71f5e6f6ab5caf04adc37104d75f5e"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x14, 0x80, 0x7, [@generic={0xa8, 0xe, "d46bcec6ecae7b5b6d18e9da1340b849c088eb8ece2962d00f6f72cc2912b60835c1662b2f2b2cc8d2af42911c71a08ab5709720d823f9cfecd2e2aa3f98d7cd2ae8b88dce7f2d6466b40de31dac8c2979a116a7c093e0b41d9d2743ab5f610a71332f641c8c7ed5ef9d208bbbd93a535663ad67c9687f5c17ac8e7709d5b85bf4f70d6bf8115a5926bd671c83003b48b7f20456b76a57de4a5aafa361f0c5ad070e350b5686"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x0, 0x3f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0xfe5c}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xb50f}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x4f, 0x1, 0xb8}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0xf4, 0x0, 0x80, [@generic={0xae, 0x3, "2e2b5ecbc52d9a319d1cccb2b0ec7f91f650c37ed5589155e7a2a6ab2b6635ccc317d1a8844d0ea163f3e50e4bea4f1d8341ce74de174ab46cdce8ba283f38a0d85816dbad66b89c86b251333807e0c5db287b08d0cfb7fea9c154a28badefa77d7613351ce7d349ac524384a32fcb8065f3f3a1cae27bab28d170fb34098a39135e25714fc91f61570e0e0bb01c362e1c3636d8c8d6ba773f76770129a77769a961939f643f4ef9797419fe"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x80, 0xff, 0x1, [@generic={0x92, 0x22, "00a83f319bb123b923ce93da11331801db4fb8457b6e52eafacdbde6845c9383f4dd1ea8f8a1ae73a591c3a7a2a89b5e15747e338101d0d3d89c0085f1368ddc76a067926ce41a1c78003ec0eb60bd3c72f930c6aa3ec2b6e6637426beb851e5fb0a555c7e13301cf7c4531f1183ae71f9a0a7e9f9f6fef95a5ab2f5a838f93139d47d528a7e31f2ea0a0631c87d68f6"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x1, 0x5, 0x40}}]}}, {{0x9, 0x4, 0x5f, 0xf3, 0x3, 0xff, 0xff, 0xff, 0x7f, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "f1abe0ccf0cf"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x1000, 0x8}}], [{{0x9, 0x5, 0x1, 0xc, 0x10, 0x3, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x40, 0xc1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x57, 0x2}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x7, 0xc3, 0xfa}}]}}]}}]}}, &(0x7f0000003e80)={0xa, &(0x7f0000003c00)={0xa, 0x6, 0x110, 0x3, 0x3, 0x0, 0x20, 0x1}, 0x22, &(0x7f0000003c40)={0x5, 0xf, 0x22, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x5, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x101, 0xf00, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x9, 0xc546}]}, 0x6, [{0x2c, &(0x7f0000003c80)=@string={0x2c, 0x3, "fd85262c19dce0813635e6c98c36fceca17a398ff120b1f5cd71b4ad4acea303ed762f9148433fe1958a"}}, {0x8d, &(0x7f0000003cc0)=@string={0x8d, 0x3, "d94f7b524357f1257e2923c14641404241b9796ce8ca5a986e215740b450265f06a71a60c81f70b40b6429f1376824f9138e226f06540d9b5abffd284088d54fc5fbf54ab5d4afb5434d365368123cd095234b7e840813870a61233b37229f4d0c3d763b06117d4917de9a1d769c3a1e55d86d236408850d105ee15b47d511a03d374d1aa94996b1b00d65"}}, {0xc, &(0x7f0000003d80)=@string={0xc, 0x3, "c2c3e4e09775f7e655b3"}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000003e40)=@lang_id={0x4, 0x3, 0x147b}}]}) syz_usb_control_io$hid(r6, &(0x7f0000004040)={0x24, &(0x7f0000003f00)={0x0, 0xc, 0x42, {0x42, 0x1, "2b534633c699712c0c561d6d4e554bb1c6344d552c3419362c3a4dbdd70118274c07eb3afd26fa908728da8ea1e9c275ed1186c51782304d22fe8f7f2fbf676f"}}, &(0x7f0000003f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f0000003fc0)={0x0, 0x22, 0x2a, {[@main=@item_4={0x3, 0x0, 0x8, "44bebe20"}, @global=@item_4={0x3, 0x1, 0xb, "b16c179b"}, @local=@item_4={0x3, 0x2, 0xa, "86219b5a"}, @local=@item_4={0x3, 0x2, 0x7, "94319fe6"}, @global=@item_4={0x3, 0x1, 0xa, "1a1afa08"}, @global=@item_012={0x1, 0x1, 0x1, 'T'}, @local=@item_4={0x3, 0x2, 0x2, "e3957a0b"}, @main=@item_4={0x3, 0x0, 0x0, "ba57c98b"}, @global=@item_012={0x1, 0x1, 0x8, 'u'}, @global=@item_012={0x2, 0x1, 0xa, "f7da"}]}}, &(0x7f0000004000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x1, 0x1, {0x22, 0xe54}}}}, &(0x7f0000004240)={0x2c, &(0x7f0000004080)={0x40, 0x31, 0x1d, "a5872d14950c8841bb29a045b524fa8c587ca9c085b975de09297920f7"}, &(0x7f00000040c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000004100)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000004140)={0x20, 0x1, 0xb8, "a4eaf7f76f9e990335da117c130296ee4686903c17058ebe6b63e06d249f8fbc376567ced31b7179539d5224431fbcf3ffcf1f27b10c5866c5bacbf0e5d89027c8c62c153d64307dc961ad5adca9b95851c64a0a53de466465f85599c1df2205a733b990e753e128005ae6e5b049fb7c3c381668cc91421365adfe03b2682579e326f1c76194cb91e31b2c6a954c4c7510cb9b2a34f11f4094761cac99c77d77895451b6d24b7ac90f8215f0be1b1fe8fb1fddc4ed597494"}, &(0x7f0000004200)={0x20, 0x3, 0x1, 0x90}}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000004280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x4d9, 0xa081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xd0, 0xa8, [{{0x9, 0x4, 0x0, 0xac, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x401, 0x2, 0x1, {0x22, 0x281}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7f, 0x3f, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x2, 0x7d}}]}}}]}}]}}, &(0x7f0000004600)={0xa, &(0x7f00000042c0)={0xa, 0x6, 0x300, 0x4, 0x3, 0x6d, 0x40, 0x7}, 0x89, &(0x7f0000004300)={0x5, 0xf, 0x89, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x4e, 0xf, 0xfe12, [0x3f00, 0x171b79b29b919ac2, 0xffc000, 0xc000, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "f92a90a78192a80b766ce0c81897a74b"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "57fcffb816065ca0c8072d0d7e52353f"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "d1d0e8ec5925e3d0a900717b86d7cc15"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "38b63e2c2ac64b423cb59f8a63e6b5e9"}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x7fffff9, 0xf00, 0x3, [0xff0000, 0xffc00f]}]}, 0x5, [{0x4, &(0x7f00000043c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000004400)=@lang_id={0x4, 0x3, 0xf4b9}}, {0x9b, &(0x7f0000004440)=@string={0x9b, 0x3, "4e6792b9784b989528cc235a3c4dab97af44dcc3f6d8c324b6d9bf6bd4b8cbc67e15c00fa99683933876018453937240cdde15d6b7c973b5c58a3a046874ed11af961633a938686e57c673df21ff464c9cc9562b8dc0be2b90c9638c45d44dbc9c9d40dc8f719d821e6f3a5b43abc7992ab70057e5c5306fc9f7e5021820d9e120200b81ce07c577c0b0024cea423f8eb355d2731802fb2d89"}}, {0x4, &(0x7f0000004500)=@lang_id={0x4, 0x3, 0xc0c}}, {0x92, &(0x7f0000004540)=@string={0x92, 0x3, "b54eb2d7007b752a19760c75f426dbb578e1997634208a2c1442c3c9c64e109537ddd2e4f76e6201351e0328183c720c764a44fe1842581b02cf33f8f63da6cf963b2bd4eb4676512a834e7b99502b21dc2b40db760908398a7b003e205fcee226ec10da5907afd937361e046863677fd7183278632a0ef6dbd452f3256cf6df6cd193117c5c60baa938f95d71e25a23"}}]}) 06:03:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xb8, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/11) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/249) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000180)=""/69) r1 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x7, 0x10000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000240)=[0x8000, 0x5]) r2 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x7ff, 0x60100) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000002c0)=""/33) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000300)=""/4096) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000001300)) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001340)=""/66) r3 = syz_open_dev$hiddev(&(0x7f00000013c0)='/dev/usb/hiddev#\x00', 0xcda, 0x42801) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001400)) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000001440)=0x9) r4 = syz_open_dev$evdev(&(0x7f0000001480)='/dev/input/event#\x00', 0x80, 0x244a02) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000014c0)={0x1, 0x1, 0x0, {0x1, 0x6}, {0x2, 0x1}, @const={0x7, {0xad, 0xfffd, 0x6, 0x8000}}}) r5 = syz_open_dev$evdev(&(0x7f0000001500)='/dev/input/event#\x00', 0x5, 0x70000) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000001540)=""/202) syz_open_dev$evdev(&(0x7f0000001640)='/dev/input/event#\x00', 0x200, 0x80000) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f00000016c0)) [ 37.982922][ T386] cgroup: Unknown subsys name 'perf_event' [ 38.014154][ T386] cgroup: Unknown subsys name 'net_cls' [ 38.045489][ T388] cgroup: Unknown subsys name 'perf_event' [ 38.051990][ T388] cgroup: Unknown subsys name 'net_cls' [ 38.073503][ T389] cgroup: Unknown subsys name 'perf_event' [ 38.076684][ T391] cgroup: Unknown subsys name 'perf_event' [ 38.079570][ T389] cgroup: Unknown subsys name 'net_cls' [ 38.086660][ T392] cgroup: Unknown subsys name 'perf_event' [ 38.099359][ T391] cgroup: Unknown subsys name 'net_cls' [ 38.106445][ T394] cgroup: Unknown subsys name 'perf_event' [ 38.112463][ T394] cgroup: Unknown subsys name 'net_cls' [ 38.118787][ T392] cgroup: Unknown subsys name 'net_cls' 06:03:40 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0xc3, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc0c, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3097]) syz_open_dev$hidraw(0x0, 0x0, 0x180041) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) write$hidraw(r1, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x800000) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x2) syz_open_dev$hidraw(&(0x7f00000012c0)='/dev/hidraw#\x00', 0x3, 0x81082) read$hidraw(r3, &(0x7f0000001080)=""/228, 0xe4) write$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(r3, &(0x7f0000000080)=""/4096, 0x20001080) r4 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x9, 0xe01) read$hiddev(r4, &(0x7f0000001180)=""/134, 0x86) write$hidraw(r2, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x800000) 06:03:40 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_usb_connect$uac1(0x4, 0xa1, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xcc, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x63, 0x3, 0x80, 0x3, "4ce9"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x6, 0x1f, {0x7, 0x25, 0x1, 0x3, 0x0, 0x3f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x2, 0x3, 0x7, 'Cy', "159b70"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0xff, 0x8, "a0"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x40, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x5, 0x7, {0x7, 0x25, 0x1, 0x0, 0xd0, 0x400}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x1, 0x2, 0x3f, 0x40, 0xff}, 0x122, &(0x7f0000000340)={0x5, 0xf, 0x122, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xa, 0xc, 0x895}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "a3f721e6feea089934493af8c0a442dc"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "4d58a0942a194ef2326e0fcf59d151cc"}, @generic={0xeb, 0x10, 0x1, "e04cd6ca0f82266f4e9848349ad95f67564fa41ba85dfe02fcab7a21f3a8eb26125b4991d248f8e63aa295a36611841f01d6246fd8e642ef7ec5184ce6a15bbaf147a4faea5c3e39fbef117f6041a58c6eacf57cf9bf7678b54348b8785fb2b2f12e0b4b5f974fb2e9e072d9ff40e8682e7e8f8fa53ad787cec622b8b5c1e7d7376305b3bb580e014aec896a3466aa0dde016b65bf2fb8a2227a215d66678e6038c8584de85ce8850fbd57efc094d277842edfa674602f1ebdc032914d691d33eed53b59b542a32bfab882ef5ed0a1e60deb19225730185234d1506db9475c9ec7b808a4ee3255b6"}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x198, &(0x7f0000000540)={[{0xca, 0x4e00, "60791ad0c9841e43857c0fc75e3f28b00d8acce5d2a0f3cbb94c8918d1518c0f4352ac8bcbf7fa1cba3d12c91b3845b60cb7e37ad745984f2bc19daeff25b2fb6e65ba085869863d748289912125095b3ee2357397a28b72f8e40382bc5fd5a2645d0ca4520f636fd394c809f749f7f8566780c8b10f0b75b6b3fde15b344d1420b303b5a335b5a15106df1c6f2f8568cf26f19fa03c15d4178f0e2eeb9577dfe0bbb11607d6b3c484a4c9816c1c0bcd2934b5c4de543772885dff4aeeaa96a342411a47d603ee7d72af"}, {0xad, 0x4e00, "d0b30d10198814446a1ce5ee6a78b87290dee84ade4bae5a1944affd264f0505fe6918c6c52d0688b312409700def403606da5dda849b8d9fd51b8c3f2fb46d32d285832b3252e7787556c4aaa12e4b89a9ddd1e8e1b0fc678e101306b1170676a7c2a2f076438ab76d3912f66f535d36d5d1472d8623e2855647eb79d836132d81973a42ddd758a622aba535c520a0e20f0be463c8bb800821ac9fac0902d371d96bf3cf8b301274caf0e656c"}, {0xf, 0x4e00, "eafc9f351d0bb1b0119afa08f1b058"}]}) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x4, 0x188, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0xdb, 0x4d, 0x91, 0x20, 0x13b1, 0x41, 0x57ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x176, 0x2, 0x80, 0xea, 0x0, 0xff, [{{0x9, 0x4, 0xde, 0x80, 0x4, 0x2, 0x6, 0x0, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x80}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x9, 0x1, "23a6f6"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x2, 0x5, 0x45}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x7f, "8c2189"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x3, 0x5, [0x4, 0x5, 0x3, 0xa, 0xa], 0x3c}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x6, 0x1, 0x49}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0xff, 0xe1, 0x6, [@generic={0x4f, 0x1e1b9cef7bc0a913, "4a33b34d0649c6fa6727d2d00030db14c7ec27a9a740510c6cca228f8a618f15707333d2895eed64cf9f615a30023d733520c042d1e5cbf0c525243f20f2102feb5a9d594a2a0d9743b3b1d676"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x800}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3f7, 0xc2, 0x3, 0x1}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x80, 0x6e, 0x7}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x2, 0x3, 0x1f}}]}}, {{0x9, 0x4, 0x44, 0x5, 0x1, 0x22, 0x59, 0x6b, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xf8, 0xd, 0x1, [@generic={0x9a, 0x8, "137ab2d8ad67c850b59fb07633bfd952b48837b52fa4131881ecd4eae7b61580df623a9f9505485b625b9668243f31b7c7311052a955da900c7b58103103610aa6f4aca0c75362827db24cd9a19fd02dce85010ed0d7d550baec18219cb3e6fb9297c60459ab894804fd5747d3419c58595364285581d525a62d7f65664918d51319f42224f46306068438f98649e46a1baa4e34f279edb5"}]}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x111, 0x1, 0x5, 0x40, 0xff, 0x81}, 0x58, &(0x7f00000008c0)={0x5, 0xf, 0x58, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0xd, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x7, 0x2}, @ptm_cap={0x3}, @generic={0x28, 0x10, 0x4, "9366f60c8ef796d3c4547bcf6dd4a5ea5fc8f8a4ed33bdc086012fee5b2086b9639f0fcf68"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b3876ae2c8d63990599a0510d3dc23b1"}]}, 0x6, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xed, &(0x7f0000000a00)=@string={0xed, 0x3, "e6fb5011db43e3c0035da7ed364bd4eaba2fc18dfeeed72aabb92419c5436e7ce9dda966c02e4ae50c37b5bc9df39839d376c277e893847f2566447aba58bac91ac9360c6f74593299e0c6a5c7a82e38361e8de997d60a41baa105adc5682f54849bf4ab8d911f28f8d302e524136f373cfed99af2a2a7b6f384d9bca2f614afe2f34c24fc61602b7fe2fb61b36fc48ff08294dc63148d8c156ab28fb23ab898b86490a59d293b7bf0257bfeb7ee220d510c3939d461ff6d80698bbb3a859976d058de0d3cf372cdb6f596c4a0f21ec6aa090ed3342270df60984a13084445fbbd49f45af4de080b9ce91b"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000d80)={0x14, &(0x7f0000000c00)={0x20, 0x10, 0xfd, {0xfd, 0xe, "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"}}, &(0x7f0000000d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x0, 0x15, 0xa4, "832fc0f9b5ea9da7a8974ade9f0913332285b7b466087d91e8e88ba786eb5a2b6ad80bea71a8a7eff0dd92bb79dc3a39c1e196dc1b4b8ba69b15e8244aa35ad6ca051d481d7915a26798a6d17dde8547fa2a7afe004f8b2a41022a9b4d1644f656b443c51b2c4dafd964a0631593a85544ae871ec81f2d035b9d75e2c430fecec600604195bc700174c26a6ff35ac2500a0e0fb221732fa89a85f121cb92d69c2b6d8d40"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000f00)={0x20, 0x80, 0x1c, {0x616b, 0x81, 0x2f0f, 0x8b80, 0x6, 0x1ff, 0x40, 0x8, 0x5, 0x8de, 0x6, 0x4}}, &(0x7f0000000f40)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000f80)={0x20, 0x83, 0x2}, &(0x7f0000000fc0)={0x20, 0x87, 0x2, 0xfbff}, &(0x7f0000001000)={0x20, 0x89, 0x2}}) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b1c2d300cb043b012cd6ffe40203010902120001000000000904000000ea5eefb0502118a3ec1826300000a862de8d413b16704559c94ed3830000"], 0x0) [ 47.182389][ T160] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 47.202784][ T17] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.332312][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 47.352360][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.402350][ T298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.562335][ T160] usb 4-1: No LPM exit latency info found, disabling LPM. [ 47.642652][ T160] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 47.653613][ T160] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 47.663762][ T160] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 47.673833][ T160] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 47.722499][ T83] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.732962][ T17] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.741982][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.750164][ T17] usb 6-1: Product: syz [ 47.754394][ T17] usb 6-1: Manufacturer: syz [ 47.758987][ T17] usb 6-1: SerialNumber: syz [ 47.772411][ T298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.803630][ T17] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.882493][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.893173][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.901327][ T21] usb 3-1: Product: syz [ 47.905766][ T21] usb 3-1: Manufacturer: syz [ 47.910377][ T21] usb 3-1: SerialNumber: syz [ 47.942429][ T298] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.951716][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.952803][ T83] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.960860][ T298] usb 5-1: Product: syz [ 47.969736][ T83] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.973909][ T298] usb 5-1: Manufacturer: syz [ 47.981870][ T83] usb 1-1: Product: syz [ 47.986473][ T298] usb 5-1: SerialNumber: syz [ 47.990602][ T83] usb 1-1: Manufacturer: syz [ 47.999782][ T83] usb 1-1: SerialNumber: syz [ 48.005469][ T21] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 48.063484][ T83] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 06:03:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x33, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x64, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x4b, &(0x7f0000000380)="95a45a01eeea37247d10e62573f9896a32db9524fcbb7bf08b2753b5ddc0ae7cf9ca5504cb1be67950b0d13b93c332f32edf5f00009ae567a81ad7264dca72fd97e7327ef8910500003161") [ 48.482243][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 48.522378][ T17] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.582411][ T21] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.632296][ T83] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.727787][ T12] usb 6-1: USB disconnect, device number 2 [ 48.882441][ T5] usb 2-1: config index 0 descriptor too short (expected 36, got 33) [ 48.890574][ T5] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 48.901152][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.914188][ T5] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.40 [ 48.923285][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.932785][ T5] usb 2-1: config 0 descriptor?? [ 48.974732][ T5] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 49.092277][ T298] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 49.099684][ T298] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 49.107155][ T298] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 49.131062][ T3109] udc-core: couldn't find an available UDC or it's busy [ 49.138239][ T3109] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.231545][ T5] usb 1-1: USB disconnect, device number 2 [ 49.315587][ T298] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 49.349094][ T3109] udc-core: couldn't find an available UDC or it's busy [ 49.356245][ T3109] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.366158][ T3109] udc-core: couldn't find an available UDC or it's busy [ 49.373268][ T3109] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.514946][ T3098] udc-core: couldn't find an available UDC or it's busy [ 49.522263][ T3098] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.602103][ T17] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 49.609274][ T17] ath9k_htc: Failed to initialize the device [ 49.617057][ T12] usb 6-1: ath9k_htc: USB layer deinitialized [ 49.682282][ T83] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 49.689431][ T83] ath9k_htc: Failed to initialize the device [ 49.696528][ T5] usb 1-1: ath9k_htc: USB layer deinitialized 06:03:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xec, 0x2e, 0x1, 0x8, 0x1d19, 0x1104, 0x5ef7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0xa5, 0x3c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x1cf, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006ff94610b4070a010201000000010902240001000000000904c00002a6db5d000905091e000000000009058f02"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, &(0x7f0000000100)={0x0, 0x8, 0xcf, {0xcf, 0x10, "19bf9d068be39e1486d4a22e71e7f0de4fc67accc3c8b91b220ebbf079ed2dfeec5e0b430caf8280957ec5d6da61406be7f571e9a10a7afeb3c0421991064f01882613cee1b6a78a205ba14c85d61fc2adc8c60d748d0bba96ddf008b466e365729aa979dc77cac52fbf35766146d576e41770e88e58169508f8d1e3b0e97083f40d768c98bf28af0f858c354b321ebc2137ffc8c5a6f2aec718d673745c16a5df0700544fd7cc705c49fa97c94a6210ae6837c073bd1cce55a2d0a498f85bfcda1636760597590814576552b4"}}, &(0x7f0000000300)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "c9dd6ce6cfb4fdd8e8800594bcb9da7f5143c66aa5fb15f2d8ed9b31eb06680bebbb4c726cf744db6931daf49c32b5d628cfbad2c870e9fd1f154d3b9b32c8d32e5d0b2c33f0018766d9f3e878fbcfeda14399f793731cd961a3733b2074b5206a7a7de6a12d989e01080dfcc134a7125f463c4f8fa667f855b3264fab507c4453748ae49b4707846fa88736e8b52c8bb2fe3485bde2a6eb2f12f75e29ccdbe955166d709f62e196da5bc023d0938a1ea9c1caa920418b26689699fff4bae84eb177443cc1c0e0e01f7f64fbdf820859b6501784edda4c8dd34dc4a31640a3a0a1"}}, &(0x7f0000000000)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0xa, "41bd"}]}}, &(0x7f0000000040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xfa1}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x20, 0x26, 0xa7, "382a30b35690bfd960ff86940a2c089a93eca0d39912cf919aecced547be5b081c328ba02bf304b6227caee99392ee68d3ccb199407d184f9737f1337206a9014385afca5f3ce57863ecb13379ca9d734e5a1d5d20439d0362da4547e2812e66b70bcb6265ce4d4045c7d6e81e94f0b3deedd87b7765c9ff79c510194adf5729f8211ba9b3e1907815387ba75876c6eea1e0f161dba900245c162be62d61c6eff035e1a76db4bc"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xc0}, &(0x7f00000004c0)={0x20, 0x1, 0xb3, "007ce1fc1d932eebc6e21c812da45583bd8d4bce662ade223f84b83c9588b4a70988da4d1a7d49055db9d9dd277a16446326d5810dab405ce8fee2cdcc455401ecb2f24b57cdbba44920d7f0e77a14ec2b612b7f5f6072747f00420727cbedd57f3f0787e95a03d40af0359a6b625c32a249550595bb7b78d771d45c45c3eb60b3fd92e560982a4771e82317ecf4588e90519bbb11deec79b6415d974b65d0a1313e6b02763f34426f644cf64bbb758809cbe6"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xfc}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:03:43 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/102) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x69, 0x9, 0x40, 0x403, 0xda72, 0x99dc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xd7, 0x9b}}]}}]}}, 0x0) [ 49.931347][ T3098] udc-core: couldn't find an available UDC or it's busy [ 49.938426][ T3098] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.952106][ T298] usb 5-1: USB disconnect, device number 2 [ 49.960261][ T298] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 49.973989][ T160] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.983160][ T160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.022290][ T160] usb 4-1: can't set config #1, error -71 [ 50.031149][ T160] usb 4-1: USB disconnect, device number 2 [ 50.112170][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.252151][ T21] usb 3-1: Service connection timeout for: 256 [ 50.258435][ T21] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 50.276182][ T21] ath9k_htc: Failed to initialize the device [ 50.292585][ T12] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.302241][ C1] ================================================================== [ 50.310650][ C1] BUG: KASAN: use-after-free in kfree_skb+0x32/0x3d0 [ 50.317429][ C1] Read of size 4 at addr ffff8881d4aacd54 by task swapper/1/0 [ 50.324867][ C1] [ 50.327248][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.7.0-rc6-syzkaller #0 [ 50.335145][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.345191][ C1] Call Trace: [ 50.348462][ C1] [ 50.351305][ C1] dump_stack+0xef/0x16e [ 50.355535][ C1] print_address_description.constprop.0.cold+0xd3/0x415 [ 50.362876][ C1] ? find_held_lock+0x2d/0x110 [ 50.367649][ C1] ? vprintk_func+0x7d/0x113 [ 50.372319][ C1] ? kfree_skb+0x32/0x3d0 [ 50.376666][ C1] __kasan_report.cold+0x37/0x7d [ 50.381614][ C1] ? kfree_skb+0x32/0x3d0 [ 50.385958][ C1] ? kfree_skb+0x32/0x3d0 [ 50.390294][ C1] kasan_report+0x33/0x50 [ 50.394641][ C1] check_memory_region+0x173/0x1d0 06:03:44 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf1203009270200000000e5010902120001070000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180), 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_usb_connect(0x0, 0x1cf, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006ff94610b4070a010201000000010902240001000000000904c00002a6db5d000905091e000000000009058f02"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000640)={0x24, &(0x7f0000000540)={0x20, 0xb, 0x52, {0x52, 0x9, "e07ede5616806069b7690e4c902c834857c993f6ecd74640fa5d8fa910d1fddb75826ee37995448abace94c72889b8ecd781b6fc45a589c6d3ed3fd80151e784378b4c2f564926c950c81a7256ba4679"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, &(0x7f00000005c0)={0x0, 0x22, 0x17, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x1, 0x2, 0x5, '\a'}, @local=@item_4={0x3, 0x2, 0x1, "d68cd513"}, @local=@item_012={0x2, 0x2, 0x4, "1a3f"}, @global=@item_4={0x3, 0x1, 0x6, '\"\x00c<'}, @local=@item_4={0x3, 0x2, 0x7, "92c91c05"}, @global=@item_012={0x1, 0x1, 0x0, '#'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x58a, 0x1, 0x1, {0x22, 0x1dc}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x0, 0xc, 0x97, "a74df70c3080885a2876e7e08df7f405f4d13e07029c6bc40e6a2f24e90b758dca71c3ed339e5c19e68ae10cc888e275a6440461a2e5181686de8c502ae9919b9cecb5ecff162b2a4e0d07fe5c2df8978b6e444cd1a3b6c57c74a682eba39489b20a9ca8176751c1731df241b12acb6b97bb08afd2b0a38de0eb68933bcfde1e148abdfdf8912e499d9ffe7c2b0048d5f3e83e6606e446"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xdb}, &(0x7f00000007c0)={0x20, 0x1, 0x72, "2718789849ad88c9a89985e661831c1c73e3497563affcf06e13eb60126dfbf29c11cf7eed646ada8b9a45526613f07117d3c3582fa8e87b295208d9bff4f403aaf9b429eb65a06124e2054b301dfa05a2a0f2e0a7297ff9e7a3f41bddfc5813220b6b722b5c247ed67ea3b983f39f0a7c14"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x40}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x24, {0x24, 0x10, "dae9826052d5dee5c6300929c230c84f433a0a2f3cf09746fb2839ff814c729abb84"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000000c0)={0x20, 0x3, 0x5, "4bc731cb4e"}, &(0x7f0000000100)={0x0, 0xa, 0x1}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x7fff, 0x20, 0x9, 0x40, 0x2a46, 0x8, 0x9, 0xf49, 0x6, 0x6, 0x3, 0x4}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) [ 50.398210][ T3130] usb 3-1: USB disconnect, device number 2 [ 50.399759][ C1] kfree_skb+0x32/0x3d0 [ 50.399789][ C1] hif_usb_regout_cb+0x156/0x1c0 [ 50.399811][ C1] __usb_hcd_giveback_urb+0x29a/0x550 [ 50.420186][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 50.425410][ C1] dummy_timer+0x125e/0x32b4 [ 50.430017][ C1] ? __lock_acquire+0x2248/0x6650 [ 50.435061][ C1] ? dummy_udc_probe+0x980/0x980 [ 50.440049][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 50.445611][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 50.450901][ C1] call_timer_fn+0x1ac/0x700 [ 50.455583][ C1] ? dummy_udc_probe+0x980/0x980 [ 50.460644][ C1] ? timer_fixup_init+0x60/0x60 [ 50.466558][ C1] ? lock_downgrade+0x720/0x720 [ 50.471429][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 50.472205][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.476976][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 50.492295][ C1] ? _raw_spin_unlock_irq+0x1f/0x30 [ 50.497492][ C1] ? dummy_udc_probe+0x980/0x980 [ 50.502467][ C1] run_timer_softirq+0x5f9/0x1500 [ 50.507604][ C1] ? add_timer+0x7a0/0x7a0 [ 50.512153][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 50.517705][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 50.523006][ C1] __do_softirq+0x21e/0x9aa [ 50.527533][ C1] irq_exit+0x178/0x1a0 [ 50.531713][ C1] smp_apic_timer_interrupt+0x141/0x540 [ 50.537241][ C1] apic_timer_interrupt+0xf/0x20 [ 50.542161][ C1] [ 50.545098][ C1] RIP: 0010:default_idle+0x28/0x300 [ 50.550421][ C1] Code: cc cc 41 56 41 55 65 44 8b 2d 94 3f 6b 7a 41 54 55 53 0f 1f 44 00 00 e8 16 28 af fb e9 07 00 00 00 0f 00 2d 7a e1 4b 00 fb f4 <65> 44 8b 2d 70 3f 6b 7a 0f 1f 44 00 00 5b 5d 41 5c 41 5d 41 5e c3 [ 50.570106][ C1] RSP: 0018:ffff8881da227da8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 50.578534][ C1] RAX: 0000000000000007 RBX: ffff8881da20b180 RCX: 0000000000000000 [ 50.586491][ C1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffff8881da20b9fc [ 50.594500][ C1] RBP: ffffed103b441630 R08: ffff8881da20b180 R09: 0000000000000000 [ 50.602459][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 50.610413][ C1] R13: 0000000000000001 R14: ffffffff87e88c40 R15: 0000000000000000 [ 50.618402][ C1] ? default_idle+0x1a/0x300 [ 50.623038][ C1] do_idle+0x3e0/0x500 [ 50.627143][ C1] ? arch_cpu_idle_exit+0x40/0x40 [ 50.632190][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 50.637987][ C1] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 50.642317][ T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 50.643410][ C1] cpu_startup_entry+0x14/0x20 [ 50.652500][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.657199][ C1] start_secondary+0x2ae/0x390 [ 50.665313][ T5] usb 1-1: Product: syz [ 50.669907][ C1] ? set_cpu_sibling_map+0x1e90/0x1e90 [ 50.674069][ T5] usb 1-1: Manufacturer: syz [ 50.679497][ C1] secondary_startup_64+0xb6/0xc0 [ 50.684089][ T5] usb 1-1: SerialNumber: syz [ 50.689088][ C1] [ 50.695969][ C1] Allocated by task 21: [ 50.700137][ C1] save_stack+0x1b/0x40 [ 50.702805][ T12] usb 6-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=99.dc [ 50.704290][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 50.704310][ C1] kmem_cache_alloc_node+0xdc/0x330 [ 50.713391][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.718942][ C1] __alloc_skb+0xba/0x5a0 [ 50.718965][ C1] htc_connect_service+0x2cc/0x840 [ 50.733061][ T12] usb 6-1: config 0 descriptor?? [ 50.736545][ C1] ath9k_wmi_connect+0xd2/0x1a0 [ 50.736561][ C1] ath9k_init_htc_services.constprop.0+0xb4/0x650 [ 50.736581][ C1] ath9k_htc_probe_device+0x25a/0x1da0 [ 50.763471][ C1] ath9k_htc_hw_init+0x31/0x60 [ 50.768356][ C1] ath9k_hif_usb_firmware_cb+0x274/0x510 [ 50.773574][ T12] usb 6-1: NDI device with a latency value of 1 [ 50.774089][ C1] request_firmware_work_func+0x126/0x242 [ 50.785110][ T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 50.785999][ C1] process_one_work+0x965/0x1630 [ 50.786020][ C1] worker_thread+0x96/0xe20 [ 50.803551][ C1] kthread+0x326/0x430 [ 50.807639][ C1] ret_from_fork+0x24/0x30 [ 50.812041][ C1] [ 50.814347][ C1] Freed by task 21: [ 50.818137][ C1] save_stack+0x1b/0x40 [ 50.822402][ C1] __kasan_slab_free+0x117/0x160 [ 50.827329][ C1] kmem_cache_free+0x9b/0x360 [ 50.832000][ C1] kfree_skbmem+0xef/0x1b0 [ 50.836703][ C1] kfree_skb+0x102/0x3d0 [ 50.840947][ C1] htc_connect_service.cold+0xa9/0x109 [ 50.847369][ C1] ath9k_wmi_connect+0xd2/0x1a0 [ 50.852217][ C1] ath9k_init_htc_services.constprop.0+0xb4/0x650 [ 50.858632][ C1] ath9k_htc_probe_device+0x25a/0x1da0 [ 50.864092][ C1] ath9k_htc_hw_init+0x31/0x60 [ 50.868853][ C1] ath9k_hif_usb_firmware_cb+0x274/0x510 [ 50.874467][ C1] request_firmware_work_func+0x126/0x242 [ 50.880187][ C1] process_one_work+0x965/0x1630 [ 50.885122][ C1] worker_thread+0x96/0xe20 [ 50.889605][ C1] kthread+0x326/0x430 [ 50.893651][ C1] ret_from_fork+0x24/0x30 [ 50.898914][ C1] [ 50.901235][ C1] The buggy address belongs to the object at ffff8881d4aacc80 [ 50.901235][ C1] which belongs to the cache skbuff_head_cache of size 224 [ 50.915791][ C1] The buggy address is located 212 bytes inside of [ 50.915791][ C1] 224-byte region [ffff8881d4aacc80, ffff8881d4aacd60) [ 50.929037][ C1] The buggy address belongs to the page: [ 50.934651][ C1] page:ffffea000752ab00 refcount:1 mapcount:0 mapping:00000000b64eb1b5 index:0x0 [ 50.943818][ C1] flags: 0x200000000000200(slab) [ 50.948753][ C1] raw: 0200000000000200 dead000000000100 dead000000000122 ffff8881da175400 [ 50.957342][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 50.965900][ C1] page dumped because: kasan: bad access detected [ 50.972383][ C1] [ 50.974705][ C1] Memory state around the buggy address: [ 50.980326][ C1] ffff8881d4aacc00: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 50.988388][ C1] ffff8881d4aacc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.992117][ T12] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 50.996443][ C1] >ffff8881d4aacd00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 50.996450][ C1] ^ [ 50.996462][ C1] ffff8881d4aacd80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 50.996475][ C1] ffff8881d4aace00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.996488][ C1] ================================================================== [ 51.005230][ T12] usb 6-1: Detected FT-X [ 51.012007][ C1] Disabling lock debugging due to kernel taint [ 51.012015][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 51.012031][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.7.0-rc6-syzkaller #0 [ 51.012038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 51.012042][ C1] Call Trace: [ 51.012048][ C1] [ 51.012065][ C1] dump_stack+0xef/0x16e [ 51.012083][ C1] panic+0x2aa/0x6e1 [ 51.042103][ T12] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 51.043364][ C1] ? add_taint.cold+0x16/0x16 [ 51.043384][ C1] ? trace_hardirqs_off+0x50/0x200 [ 51.062169][ T12] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 51.070912][ C1] ? kfree_skb+0x32/0x3d0 [ 51.070926][ C1] end_report+0x4d/0x53 [ 51.070945][ C1] __kasan_report.cold+0x72/0x7d [ 51.092068][ T12] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 51.095473][ C1] ? kfree_skb+0x32/0x3d0 [ 51.095490][ C1] ? kfree_skb+0x32/0x3d0 [ 51.102967][ T12] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 51.106976][ C1] kasan_report+0x33/0x50 [ 51.106997][ C1] check_memory_region+0x173/0x1d0 [ 51.117357][ T12] usb 6-1: USB disconnect, device number 3 [ 51.119451][ C1] kfree_skb+0x32/0x3d0 [ 51.119474][ C1] hif_usb_regout_cb+0x156/0x1c0 [ 51.126714][ T12] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 51.127945][ C1] __usb_hcd_giveback_urb+0x29a/0x550 [ 51.127963][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 51.134717][ T12] ftdi_sio 6-1:0.0: device disconnected [ 51.139738][ C1] dummy_timer+0x125e/0x32b4 [ 51.139761][ C1] ? __lock_acquire+0x2248/0x6650 [ 51.217793][ C1] ? dummy_udc_probe+0x980/0x980 [ 51.223589][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.229172][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 51.234441][ C1] call_timer_fn+0x1ac/0x700 [ 51.240356][ C1] ? dummy_udc_probe+0x980/0x980 [ 51.245378][ C1] ? timer_fixup_init+0x60/0x60 [ 51.250220][ C1] ? lock_downgrade+0x720/0x720 [ 51.255063][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.260583][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 51.266769][ C1] ? _raw_spin_unlock_irq+0x1f/0x30 [ 51.272327][ C1] ? dummy_udc_probe+0x980/0x980 [ 51.277255][ C1] run_timer_softirq+0x5f9/0x1500 [ 51.282271][ C1] ? add_timer+0x7a0/0x7a0 [ 51.286770][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 51.292814][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 51.299253][ C1] __do_softirq+0x21e/0x9aa [ 51.303739][ C1] irq_exit+0x178/0x1a0 [ 51.307898][ C1] smp_apic_timer_interrupt+0x141/0x540 [ 51.313428][ C1] apic_timer_interrupt+0xf/0x20 [ 51.318589][ C1] [ 51.321903][ C1] RIP: 0010:default_idle+0x28/0x300 [ 51.327180][ C1] Code: cc cc 41 56 41 55 65 44 8b 2d 94 3f 6b 7a 41 54 55 53 0f 1f 44 00 00 e8 16 28 af fb e9 07 00 00 00 0f 00 2d 7a e1 4b 00 fb f4 <65> 44 8b 2d 70 3f 6b 7a 0f 1f 44 00 00 5b 5d 41 5c 41 5d 41 5e c3 [ 51.347468][ C1] RSP: 0018:ffff8881da227da8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 51.356694][ C1] RAX: 0000000000000007 RBX: ffff8881da20b180 RCX: 0000000000000000 [ 51.362060][ T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.365178][ C1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffff8881da20b9fc [ 51.365187][ C1] RBP: ffffed103b441630 R08: ffff8881da20b180 R09: 0000000000000000 [ 51.365201][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 51.399689][ C1] R13: 0000000000000001 R14: ffffffff87e88c40 R15: 0000000000000000 [ 51.407883][ C1] ? default_idle+0x1a/0x300 [ 51.412456][ C1] do_idle+0x3e0/0x500 [ 51.416527][ C1] ? arch_cpu_idle_exit+0x40/0x40 [ 51.421548][ C1] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 51.429483][ C1] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 51.435276][ C1] cpu_startup_entry+0x14/0x20 [ 51.440157][ C1] start_secondary+0x2ae/0x390 [ 51.444901][ C1] ? set_cpu_sibling_map+0x1e90/0x1e90 [ 51.450516][ C1] secondary_startup_64+0xb6/0xc0 [ 51.456294][ C1] Kernel Offset: disabled [ 51.460607][ C1] Rebooting in 86400 seconds..