(async) 10:38:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 10:38:43 executing program 0: r0 = syz_io_uring_setup(0x5d66, &(0x7f00000002c0), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) epoll_create1(0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) [ 1881.513049][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:38:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a09ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x0) 10:38:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a68ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x0) [ 1881.598431][T30410] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1881.613532][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.619446][T30410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:38:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 1881.664136][T30410] usb 5-1: Product: syz [ 1881.683252][T30410] usb 5-1: Manufacturer: syz [ 1881.702971][T30410] usb 5-1: SerialNumber: syz 10:38:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca68", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x0) [ 1881.713594][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.778496][T30410] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1881.814933][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1881.827728][T30303] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1881.877533][T21699] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1882.077535][T30303] usb 3-1: Using ep0 maxpacket: 32 [ 1882.357650][T30303] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1882.368131][T30303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.376211][T30303] usb 3-1: Product: syz [ 1882.380797][T30303] usb 3-1: Manufacturer: syz [ 1882.385444][T30303] usb 3-1: SerialNumber: syz [ 1882.391898][T30303] usb 3-1: config 0 descriptor?? [ 1882.430175][T30303] pwc: Samsung MPC-C10 USB webcam detected. [ 1882.447743][T30410] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1882.456859][T21699] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1882.467513][T21699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.476495][T21699] usb 2-1: Product: syz [ 1882.480906][T21699] usb 2-1: Manufacturer: syz [ 1882.485604][T21699] usb 2-1: SerialNumber: syz [ 1882.538348][T21699] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1882.881540][T30410] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1882.887242][T30410] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1883.083038][T30304] usb 5-1: USB disconnect, device number 82 [ 1883.089110][T30303] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1883.101391][T30410] ath9k_htc: Failed to initialize the device [ 1883.107791][T30304] usb 5-1: ath9k_htc: USB layer deinitialized [ 1883.127587][T30303] pwc: recv_control_msg error -32 req 02 val 2700 [ 1883.157719][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1883.167803][T30303] pwc: recv_control_msg error -32 req 04 val 1700 [ 1883.207693][T30303] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1883.247595][T30303] pwc: recv_control_msg error -32 req 04 val 1000 [ 1883.287545][T30303] pwc: recv_control_msg error -32 req 04 val 1300 [ 1883.327568][T30303] pwc: recv_control_msg error -32 req 04 val 1400 [ 1883.367597][T30303] pwc: recv_control_msg error -32 req 02 val 2000 [ 1883.407643][T30303] pwc: recv_control_msg error -32 req 02 val 2100 [ 1883.454143][T30303] pwc: recv_control_msg error -32 req 02 val 2200 [ 1883.497620][T30303] pwc: recv_control_msg error -32 req 06 val 0600 [ 1883.537645][T30303] pwc: recv_control_msg error -32 req 04 val 1500 10:38:45 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c, &(0x7f0000000240)={[{0x15, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e48a"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:38:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$bsg(0xffffff9c, &(0x7f0000000080), 0x672200, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x80000001, @loopback, 0x5}, 0x1c) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca249435, &(0x7f0000000940)={0x2, 0x9, @status={[0x6, 0x6, 0xa2, 0x0, 0x1, 0x5]}, [0xffa, 0x5, 0xf08b, 0x1, 0x3, 0xc183, 0x80000000, 0x7f, 0x0, 0x1, 0x3, 0xbaae, 0x5, 0x7f, 0x25, 0x2, 0x5, 0xad7, 0x4, 0x95, 0x0, 0x3, 0x2, 0x1, 0xffffffffffffa77a, 0x8, 0x3, 0x4, 0x1, 0xdaa6, 0x80000001, 0x800, 0x80, 0x5, 0x2, 0x8, 0x3ff, 0x332, 0xe, 0x81, 0xd1, 0xffff, 0x0, 0x0, 0xfff, 0xcbb, 0x7, 0x9, 0x5, 0x1ff, 0x5, 0xff, 0x8001, 0x20, 0x7, 0x9, 0x5, 0x5, 0xd2, 0xffffffff, 0x67, 0x7, 0x6, 0x5f5]}) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf, 0x4}, 0x8) [ 1883.577679][T30303] pwc: recv_control_msg error -32 req 02 val 2500 [ 1883.581007][T21699] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1883.601836][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1883.618491][T30303] pwc: recv_control_msg error -71 req 02 val 2400 [ 1883.647838][T30303] pwc: recv_control_msg error -71 req 02 val 2600 [ 1883.686191][T30303] pwc: recv_control_msg error -71 req 02 val 2900 [ 1883.738431][T30303] pwc: recv_control_msg error -71 req 02 val 2800 [ 1883.757971][T30303] pwc: recv_control_msg error -71 req 04 val 1100 [ 1883.777639][T30303] pwc: recv_control_msg error -71 req 04 val 1200 [ 1883.784758][T12716] UDC core: couldn't find an available UDC or it's busy: -16 [ 1883.794365][T30303] pwc: Registered as video71. [ 1883.800183][T30303] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 1883.802634][T12716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1883.830747][T12716] UDC core: couldn't find an available UDC or it's busy: -16 [ 1883.841559][T12939] UDC core: couldn't find an available UDC or it's busy: -16 [ 1883.850254][T12939] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1883.868451][T30303] usb 3-1: USB disconnect, device number 104 [ 1883.871141][T12716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1883.897708][T19272] usb 5-1: new high-speed USB device number 83 using dummy_hcd 10:38:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1884.075061][T30410] usb 2-1: USB disconnect, device number 73 [ 1884.084549][T21699] ath9k_htc: Failed to initialize the device [ 1884.092316][T30410] usb 2-1: ath9k_htc: USB layer deinitialized [ 1884.407584][T30303] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1884.437671][T19272] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1884.446768][T19272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.455197][T19272] usb 5-1: Product: syz [ 1884.459715][T19272] usb 5-1: Manufacturer: syz [ 1884.464383][T19272] usb 5-1: SerialNumber: syz [ 1884.508543][T19272] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:38:46 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "8811f1d2", {0x3, 0x102, 0x0, 0x1, 0x2, 0x1f, 0x7}}) 10:38:46 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000240)=""/4096) 10:38:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="03000800f7ffffff"], 0x30}}, 0x0) 10:38:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b4}, 0x0, 0x0, 0xb6dba7f0c28a613b}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18) copy_file_range(r4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r4, 0x0, &(0x7f0000000100)='./file0\x00', 0x10, 0x400000, 0x12345}, 0x6) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x8) 10:38:46 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x2a, 0x0, 0x0, &(0x7f0000003840)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) syz_io_uring_setup(0x3a3a, &(0x7f0000003980), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003a00), &(0x7f0000003a40)) syz_genetlink_get_family_id$ipvs(&(0x7f0000004000), 0xffffffffffffffff) [ 1884.599092][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:38:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="04000800f7ffffff"], 0x30}}, 0x0) [ 1884.667986][T30303] usb 3-1: Using ep0 maxpacket: 32 10:38:46 executing program 0: syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "253ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "3afe0000005e4400000000000000"}, @exp_fastopen={0xfe, 0x30, 0xf989, "85eb87818d7639ec10339ac7aa9c89de"}, @exp_fastopen={0xfe, 0xd, 0xf989, "8f5a00000000000000"}]}}, {"c834bce3583bbe48d311c4a3473df0fa189a4d565e5eba24a7dc4feb34f3e280152b2a356f0ac65e261d4b8893ff7247904358f9ae3ef3ba22acbbbd742c6893bdc0ac5859e98d824d3a699d3af41ce7a0b840c6e733df22fb714316357269f11a7a73651740a9971af96543ebc4431319c1ee7c03676ac859308de8969e0f420f1d58120687fa82cbeaec088c2d31e9a87dcb08abbe6500f0583d4883dfabb880341c1d8f46184b98d52c27fb794cf0c38fb980cd39584743f5e002787a647b2a7414bcb2c2b55994d9e6c74b5e2301762e6ececdac1a74ab000000000000"}}}}}}}, 0x0) 10:38:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) (async) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b4}, 0x0, 0x0, 0xb6dba7f0c28a613b}, 0x0) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18) (async) copy_file_range(r4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x8000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r4, 0x0, &(0x7f0000000100)='./file0\x00', 0x10, 0x400000, 0x12345}, 0x6) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x8) 10:38:46 executing program 0: syz_emit_ethernet(0x8a, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "253ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x4, 0x2}, @exp_fastopen={0xfe, 0x12, 0xf989, "3afe0000005e4400000000000000"}, @exp_fastopen={0xfe, 0x14, 0xf989, "85eb87818d7639ec10339ac7aa9c89de"}, @exp_fastopen={0xfe, 0xd, 0xf989, "8f5a00000000000000"}]}}}}}}}}, 0x0) [ 1884.744756][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1884.907637][T30410] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1885.008531][T30303] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1885.017657][T30303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.025987][T30303] usb 3-1: Product: syz [ 1885.030897][T30303] usb 3-1: Manufacturer: syz [ 1885.035492][T30303] usb 3-1: SerialNumber: syz [ 1885.044411][T30303] usb 3-1: config 0 descriptor?? [ 1885.087594][T19272] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1885.089779][T30303] pwc: Samsung MPC-C10 USB webcam detected. [ 1885.437751][T30410] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1885.446833][T30410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.455236][T30410] usb 2-1: Product: syz [ 1885.459815][T30410] usb 2-1: Manufacturer: syz [ 1885.464428][T30410] usb 2-1: SerialNumber: syz [ 1885.510344][T19272] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1885.516024][T19272] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1885.525186][T30410] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1885.711735][T30301] usb 5-1: USB disconnect, device number 83 [ 1885.721205][T19272] ath9k_htc: Failed to initialize the device [ 1885.727293][T30301] usb 5-1: ath9k_htc: USB layer deinitialized [ 1885.747585][T30303] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1885.787656][T30303] pwc: recv_control_msg error -32 req 02 val 2700 [ 1885.827586][T30303] pwc: recv_control_msg error -32 req 04 val 1700 [ 1885.867651][T30303] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1885.907657][T30303] pwc: recv_control_msg error -32 req 04 val 1000 [ 1885.947588][T30303] pwc: recv_control_msg error -32 req 04 val 1300 [ 1885.987730][T30303] pwc: recv_control_msg error -32 req 04 val 1400 [ 1886.027659][T30303] pwc: recv_control_msg error -32 req 02 val 2000 [ 1886.067666][T30303] pwc: recv_control_msg error -32 req 02 val 2100 [ 1886.107600][T30303] pwc: recv_control_msg error -32 req 02 val 2200 [ 1886.147645][T30303] pwc: recv_control_msg error -32 req 06 val 0600 [ 1886.157907][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1886.187624][T30303] pwc: recv_control_msg error -32 req 04 val 1500 10:38:48 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000240)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:38:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="02010800f7ffffff"], 0x30}}, 0x0) [ 1886.229886][T30303] pwc: recv_control_msg error -71 req 02 val 2500 [ 1886.249718][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1886.260942][T30303] pwc: recv_control_msg error -71 req 02 val 2400 [ 1886.287675][T30303] pwc: recv_control_msg error -71 req 02 val 2600 [ 1886.307682][T30303] pwc: recv_control_msg error -71 req 02 val 2900 [ 1886.327950][T30303] pwc: recv_control_msg error -71 req 02 val 2800 [ 1886.348044][T30303] pwc: recv_control_msg error -71 req 04 val 1100 [ 1886.360782][T13170] UDC core: couldn't find an available UDC or it's busy: -16 [ 1886.368386][T30303] pwc: recv_control_msg error -71 req 04 val 1200 [ 1886.375031][T13170] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1886.383856][T30303] pwc: Registered as video71. [ 1886.390600][T30303] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 1886.391320][T21699] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1886.413915][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1886.422630][T30303] usb 3-1: USB disconnect, device number 105 [ 1886.547855][T21700] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1886.624066][T30301] usb 2-1: USB disconnect, device number 74 [ 1886.640045][T21699] ath9k_htc: Failed to initialize the device [ 1886.646284][T30301] usb 2-1: ath9k_htc: USB layer deinitialized 10:38:48 executing program 0: perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f56}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) 10:38:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="03010800f7ffffff"], 0x30}}, 0x0) 10:38:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) (async) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f00006d3000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b4}, 0x0, 0x0, 0xb6dba7f0c28a613b}, 0x0) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18) copy_file_range(r4, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x8000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r4, 0x0, &(0x7f0000000100)='./file0\x00', 0x10, 0x400000, 0x12345}, 0x6) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x8) 10:38:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:38:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000340), 0x4) 10:38:49 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "805b9e8b", {0x1, 0x81ca, 0x400, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect(0x3, 0x5eb, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x9e, 0x4, 0x0, 0x40, 0x7}, 0x71, &(0x7f0000000840)={0x5, 0xf, 0x71, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x120, 0x1f, 0x0, 0x3ff, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0x5, 0x1, 0x3}, @generic={0x34, 0x10, 0xa, "cdb7c8342096e44f11aaeb8194ff8813bb1d429cd1448083825fa8cb562d0e2e102ed7d78bd13359560dc0d2bd9b533edc"}, @generic={0xc, 0x10, 0xa, "5dde7d4749a221512f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe1, 0x77, 0x1f}, @ssp_cap={0x10, 0x10, 0xa, 0x5a, 0x1, 0x7, 0xf, 0x3, [0x7f8000]}]}, 0x5, [{0x7, &(0x7f00000008c0)=@string={0x7, 0x3, "504801b52e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1004}}, {0x30, &(0x7f0000000940)=@string={0x30, 0x3, "36ab8f92676e5e614e39492072ee26bc9fcc40d8c2573204878924148be8b0026d93f3d324a3a235d0f63e6dc26a"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x746f}}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10cc, &(0x7f0000000a40)={[{0x1000, 0x4e00, "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"}, {0x5b, 0x4e00, "db95d070a22f705c29466312aee34d632a55dda31dffa33e3bd6b279f7595c39e5bdbc5ca853c385c4f0739085f48b11242e1e64b0ba1aee3ebeaf2366d6cc368fa7ea5b7228cbf1538d1103c4c64a96556c8b7bc1bfd73e4ef00b"}, {0x61, 0x4e00, "2e14a849a86a374dbc242b9ae7784a78930499c5debd99b248541e95c3fce452ee2a6d08fc1c9d2799afee36bac22f23cdfe956bf33b908ed13ff3061e8841f2e060455c11c626fb4c6bfb6230318ced64ccc336bcf912fb0a6689c6d14169bd14"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x103, &(0x7f0000001b40)=@generic={0x5, 0x0, 0xfb, "39877f1f", "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"}) [ 1887.122109][T21700] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1887.131388][T21700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.140196][T21700] usb 5-1: Product: syz [ 1887.144389][T21700] usb 5-1: Manufacturer: syz 10:38:49 executing program 0: unshare(0x4000800) 10:38:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="04010800f7ffffff"], 0x30}}, 0x0) [ 1887.170659][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1887.184873][T21700] usb 5-1: SerialNumber: syz [ 1887.238856][T21700] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:38:49 executing program 0: syz_emit_ethernet(0x40, &(0x7f0000000000)={@random="ef50cca0377b", @remote, @val, {@ipv6}}, 0x0) 10:38:49 executing program 0: mknod$loop(&(0x7f0000000600)='./file0\x00', 0x2000, 0x1) [ 1887.331752][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1887.457537][T21699] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1887.498668][T19272] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1887.727655][T21699] usb 3-1: Using ep0 maxpacket: 32 [ 1887.867861][T30410] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1888.007718][T21699] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1888.016795][T21699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.025294][T21699] usb 3-1: Product: syz [ 1888.029679][T21699] usb 3-1: Manufacturer: syz [ 1888.034395][T21699] usb 3-1: SerialNumber: syz [ 1888.054737][T21699] usb 3-1: config 0 descriptor?? [ 1888.059951][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1888.075768][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.084186][T19272] usb 2-1: Product: syz [ 1888.088792][T19272] usb 2-1: Manufacturer: syz [ 1888.093756][T19272] usb 2-1: SerialNumber: syz [ 1888.120010][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 1888.138470][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1888.291448][T30410] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1888.297154][T30410] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1888.500070][T30303] usb 5-1: USB disconnect, device number 84 [ 1888.510691][T30410] ath9k_htc: Failed to initialize the device [ 1888.516799][T30303] usb 5-1: ath9k_htc: USB layer deinitialized [ 1888.707625][T19272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1888.777578][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1888.817580][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 1888.857551][T21699] pwc: recv_control_msg error -32 req 04 val 1700 [ 1888.897593][T21699] pwc: recv_control_msg error -32 req 02 val 2c00 10:38:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000240)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001180)="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", 0x1000}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xae}}], 0x10}}, {{&(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="2275ad561061d04c62678033b5441867ca2465c89ae134a61cf728bfbc01718942ae63d047c74d9569cfe7350db0028791eef098ae4fee2ab2f701258cb48750b4a003b051d7365ab7091cd9c52d2732527aec25b00c8b", 0x57}, {&(0x7f0000000400)='\t', 0x1}, {&(0x7f0000000440)="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", 0xff}], 0x3, &(0x7f0000002c40)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @loopback, @broadcast}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffff8}}], 0x90}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002d40)="0cf6cd63c45663adf5e892189dee4a7072ca6100dfa9e8a5f243e029b5e82aae913529276a4591410e08ee0f936c9cc6578b251ecafab9f7014b0396020f3cbe4d1f52808bc74126a2e128ea1fe69611985b024a29b4e250e44e83def19e3bc2c7fc3db7ff0337ae3f559034a911af7b21df2b7c35d21925bc31469f21f37cf878d67ebd194a37f323b8fed3d93d96de758693cc71fefbe8b87da3631ab5e8f2d5ecc804a241ce0ca47d12e83a1b", 0xae}], 0x1, &(0x7f0000002ec0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xd6}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@cipso={0x86, 0x6c, 0x3, [{0x2, 0x10, "bf6f25a7238aa7576de4dca1190c"}, {0x5, 0x2}, {0x5, 0x11, "9eccb98b1dddadb4036f06183a0bf2"}, {0x7, 0x2}, {0x0, 0xf, "452c03341a64077f3602e32a05"}, {0x2, 0xe, "0738ad91e763259eb39e5e15"}, {0x2, 0x3, '-'}, {0x6, 0xf, "15ca76be41209a6eaeedf4a43c"}, {0x0, 0xb, "814ff5e28f414fc44f"}, {0x0, 0x7, "7adfa5dc7d"}]}, @timestamp_addr={0x44, 0x2c, 0xff, 0x1, 0x6, [{@broadcast, 0x1}, {@rand_addr=0x64010102, 0xff}, {@broadcast, 0x5}, {@loopback, 0x1000}, {@empty}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x9e, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x25}, 0xe4}, {@empty, 0x5}, {@empty, 0x4}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}], 0x10c}}], 0x3, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x94, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa}, {0xa, 0x4, @remote}, {0xfffffffffffffd9d, 0x4, @remote}, {0xa, 0x4, @multicast}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_IFNAME={0x0, 0x3, 'veth1_macvtap\x00'}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3461aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) [ 1888.937606][T21699] pwc: recv_control_msg error -32 req 04 val 1000 [ 1888.977759][T21699] pwc: recv_control_msg error -32 req 04 val 1300 10:38:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="05010800f7ffffff"], 0x30}}, 0x0) 10:38:51 executing program 0: r0 = semget(0x1, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/211) [ 1889.018211][T21699] pwc: recv_control_msg error -32 req 04 val 1400 [ 1889.049584][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1889.067718][T21699] pwc: recv_control_msg error -32 req 02 val 2000 [ 1889.079859][T13294] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1889.107633][T21699] pwc: recv_control_msg error -32 req 02 val 2100 [ 1889.147658][T21699] pwc: recv_control_msg error -32 req 02 val 2200 [ 1889.187743][T21699] pwc: recv_control_msg error -32 req 06 val 0600 [ 1889.227728][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 1889.251046][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 1889.278041][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 1889.297622][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 1889.317581][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 1889.331692][T19272] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1889.337380][T19272] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1889.345508][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 1889.367676][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 1889.389986][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 1889.397623][T21699] pwc: Registered as video71. [ 1889.403359][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 1889.420096][T21699] usb 3-1: USB disconnect, device number 106 [ 1889.532242][T13228] UDC core: couldn't find an available UDC or it's busy: -16 [ 1889.540606][T13228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1889.770787][T30303] usb 2-1: USB disconnect, device number 75 [ 1889.790468][T19272] ath9k_htc: Failed to initialize the device [ 1889.796715][T30303] usb 2-1: ath9k_htc: USB layer deinitialized 10:38:52 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "805b9e8b", {0x1, 0x81ca, 0x400, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async, rerun: 64) r1 = syz_usb_connect(0x3, 0x5eb, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x9e, 0x4, 0x0, 0x40, 0x7}, 0x71, &(0x7f0000000840)={0x5, 0xf, 0x71, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x120, 0x1f, 0x0, 0x3ff, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0x5, 0x1, 0x3}, @generic={0x34, 0x10, 0xa, "cdb7c8342096e44f11aaeb8194ff8813bb1d429cd1448083825fa8cb562d0e2e102ed7d78bd13359560dc0d2bd9b533edc"}, @generic={0xc, 0x10, 0xa, "5dde7d4749a221512f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe1, 0x77, 0x1f}, @ssp_cap={0x10, 0x10, 0xa, 0x5a, 0x1, 0x7, 0xf, 0x3, [0x7f8000]}]}, 0x5, [{0x7, &(0x7f00000008c0)=@string={0x7, 0x3, "504801b52e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1004}}, {0x30, &(0x7f0000000940)=@string={0x30, 0x3, "36ab8f92676e5e614e39492072ee26bc9fcc40d8c2573204878924148be8b0026d93f3d324a3a235d0f63e6dc26a"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x746f}}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10cc, &(0x7f0000000a40)={[{0x1000, 0x4e00, "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"}, {0x5b, 0x4e00, "db95d070a22f705c29466312aee34d632a55dda31dffa33e3bd6b279f7595c39e5bdbc5ca853c385c4f0739085f48b11242e1e64b0ba1aee3ebeaf2366d6cc368fa7ea5b7228cbf1538d1103c4c64a96556c8b7bc1bfd73e4ef00b"}, {0x61, 0x4e00, "2e14a849a86a374dbc242b9ae7784a78930499c5debd99b248541e95c3fce452ee2a6d08fc1c9d2799afee36bac22f23cdfe956bf33b908ed13ff3061e8841f2e060455c11c626fb4c6bfb6230318ced64ccc336bcf912fb0a6689c6d14169bd14"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x103, &(0x7f0000001b40)=@generic={0x5, 0x0, 0xfb, "39877f1f", "0fedef6729f1db0236811f38cc424568314951e0fee3511ff23b14607e93844a832cfd78d617bb99a7e5901dfbd6d422a2817290ce2fceee3b1cfc84d06102ccf8183c4d7570cb4041c066837e8881ad42c5f7a7b794bcb47adfa1e4c21afe7da8fee1c6c35b42c73e47c98e5e71077c1e6839798d27fdc51e65038fe7f0dc6321fa9f27ab65f7fe11daa9083761bc9f882332bb1ba8cc2081251882c089030e373df50d5104e5e606ff0935c163f7d0197f8a5c7c7f35ace513ba61ed3de102142209457ec2f786dec3cf0927adc2515bca50a4e66e7f69898abd1e5586d082fdcd14ce259aaa86deaf583302f89b51f2df669d5575183196fd5c"}) 10:38:52 executing program 0: select(0x40, &(0x7f0000000240)={0x3}, 0x0, 0x0, &(0x7f0000000300)) 10:38:52 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000240)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:38:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="06010800f7ffffff"], 0x30}}, 0x0) 10:38:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000240)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001180)="5633c63cfcf372a09cf05a0376aea98dffa801225cd2900d3fced93d545397b4bf8d3e624c4fa775fb7e9330d4d5dccbea703ec602de06bcc9cb49fdfa6825178a2c3fc86161ad2c82c1e1a0ba7c8db3b91481fc5a493fec1c825c0277e97c781e63c11332c6deae5a4d2bd65e3aae66b4895358f44f745aadcba88f1ecf9af1f0dd4a0cb62ea65a69c0a4d6dea9a05af7abdd5fcc69b9823f1f0d4766baad439f7d3c991f97123a0823cdc13b2bee2882cee5379824f33d488c7c90608a682210a1b8f72d6be2e4c625dc7b485caa0b78a2193769bba8e9a7d4277471a64afd2a982b38ed544d99b8b24454d850ceedda1ac9b22155ed9f357bb5c69d09be126101e13db650d2b45c6e4cffaefc1f6c17a0f29e454bd4365d4e8f270ad42e9ec4bfa2d00ec7efc473b19ebdc463ed3797b98d2501696ad7560f048f3ca36ea3ed09c2760b1fae6e02557bfb2be441a9c2733add3a7204ec3861dc030628ae9a334335a3d375778812024f1339fea886c397940b87c13e55bbd3094e538d9db7b61c6a21c11701f072f56b5082e19e9b2d5e5aef4ff836b466a682b5f36d3cca6b7f9e0033888db7520c4657b2ee054ddbc433383f2588ab25f0058c20bc7dec61c884342a49af172e1f6a2c5d7ffd332cef62eb9fd7aa095a81cac32790da77f8515fed0231a4eb7c8d0dcd07cdf2ea5de6924a62ce0a3111d6ad1f1f749455d59f80cdd6aa0c3a53011ba4fe1c3c61198ed60e3eaa48f0f62b15c6cd6666238b528ed231b1fa9977d178775a5af1c1bc0b7bd78f6bf610e433de2321a59426fe990ba48b5a7c309ab43556f85bd039ef75f0afd2e2b2857bb88e527ef73897dc88af37d1ad12a0dc926552b1afb6ae42356691766483b757eb40a467d1b3681301fae15b2f363ad44f03dd2430598727f4e36dffc7d4cbbcbbf365b9a8f929c86c27bb50fc24b97548463d328121f6deec7cf94a7274aa3aaf0fbe412e6723b09dd866fe1ed3e2f850c664c6cf233176b42078839fa35de2d6af88fcf870ee1177fb181a453114caff57a96dc7ead123d5b02c56bcb3e40b89d57487b4119268997fb1e274091354df97e94b0d9d1723bad718f2c9e755c7cf927c2f663f4d02d1860479218e0f15d2a65d237772dfc5a589f78dd99aa16e9e46e91da4571c5ae843682bdd05aec32887b774ef926f41c74c2cf978fab1ac4f7ad260b66d313bd1b2a6ffa5960ef3c8b73c4f9d634f37cf26f583a6e370ef6cb96f27e04e7a6ee50674596528f668f5a9050854084a21a027fc4bc5068d4ad8df408192d34690ea6aee8cad36d72038b71e4afa52bb9c024a622d54e85d1b524b4d66e11b553a13904f6fc1fb87ac8ac248bdeab52abb45a860273c738fb6029f1af26387d94ee0d5e290848f15524d26316a9a939e4d6b664b1051f998ba4db54b16aa925550c1d6e4b4e47405f151e187628c02ed579cd2bfd76b202e035a6bb8a5c8fafedfa8ee0162a1e0167431fceffb2c9a6c3c64bd25dc242be990df96ceedfdef6a3025928c2832c5172f7c6b4db7108eb503ec33a537360e17847048a72c0844670fc29522d705b24db3c7f379ef9c1786bf12dff15148958c39088e85a3b6c1eea2c6a158a67d405a4167e314ca19a20a86e9bd96e04f760c2a4719caaa9c7b06e32d44b257c7f6a0417f2fd79b52ccc3bc80993dd13e32b18faf8a351583912f444c3a1c0f40f5c5ef81a5fdfc1c905e8ba0a506b4f2785273ed2e29197053c82cb626048f5d7747dfb9e0c34a4beaafce314dd4aa65504bd146b3dfda63c35b0b7427b747350b6fe1018ae7cc38a07142ccbb2056298eaeb5001023b6c9b0b28a3002d0ddaa4e197fcabe3187c9fa70b2002072a005ffc3ed23baf8e76c1aace4387dd86a0d38f5e8e8880395d7ce123fe151e948dc17d0a104f0f302c8a3f74f839e151a404a62f71c5994b4c91f6821e6db87ebbf5a7a1d454423e02eea1a5846165912df57aa5fe066b1fc159586932bbd2f32411faff9875001b82236fcf2c952e873e5fd3a35b1fe8db93d0cbdce2f5a3e2a5178a2efbc518f8e088307946f2798e3684d257946ecdad379d3c9fe6b42bec3f3b0e431a9f1cdde4a97fe449115ff6cdce9e1481cf2367e21ba746953b271c995ebc120befa61561e927b993920da81e03c70848864feda2c1f605e55d6550b309226c22d4ff1c8e88dda85d21c2ae252b13b397848cd0e6bf46bf832902a0d513a041b1ee4b1950fa3495187e2b1f72f1b5111145524937a0a67184a838e2a64a6f3429d349fad282d1fd416c506cdbce20922838c537f04b5fa93214275803b6e4dbc62d4ff5cafc7ff1010e73d29ccd5cfab1934404f7b9b277f166bf27d3ec9e88af6ae53afeb7fc6ab26b7e662f7594e2c64d5081147d739e9256f891f82fd81aa7d582a96fea51b7f64523143dd9e2b6ae336402ca68f431a746078e178f5872e08cb8f909467758fa0c3e93c034ef24b15bdbbe781551de70128f54ee2e9132861e79dd3fa289ea2ae050938c0362d404f9695b422e14ffc3276f119b492cb200ebe7a816b5b63ad9972e69501f582a7672b4b0e5846187b2bd9d01d5ba5242867a1623d613320211e361f88849919befbe22ffc7fbe727a9f5c8d16477bec97c4f4308856d615dc3f01cbc335d387f5cd8501d74e996fec8f361c305c6b970933a6421d30b7402a96f12020ce54ee187b945cc957207aff318287432890c2f366121cac6a277f5ffceed600b633b2d113fa442b7dfebfa7fc0f00c27ac8fa531c58d7d0b43e26bd883b89ca69e5f49e04110df3b667c6025beb3ef09e57bc71af06176f16c0e78930cd72583923546794bac8a5261bfba04dd0f52b5bb3477a9c1676dd1d7e48e739ea9cdb4b1c1ec526efa1dadfb7f7cefcec2f5ab16326e991de249e372a76be24cb595966da0c120de892f354355aceef5735da46e6262b98350a96a5568aaa902a45ac063ded411b9e2084f8d69d73d49000b57345b9d8b85c384d8ffb57ab9b79dd6d53b8ff75fcc3ce5ca7b7346bb3940dfb565b95b544be4de965281e4208b9196ee197a40f5200b5ae119baf73bac0fe725bd36f0dfd2d2a6b6da07102e2e379b75e7aa1d7488ba597b6d240c9e38a193aa6aa765005b3a86c589dd2d56d03ddbda483ea7ee06fd7db86afd24800fdbcc539b7a25773046ebdbbb578d6e999150ac66d03d6a6ef56920a3d3ffdf5234bb12221ae4b15e769b425ecc621583433ed84aadfac4fa427bdb557676e56c3091ed9cdc79c1e5185a07ffb375b202d300cf9ddcd0920d20aca2d7b44ea1e9cacd24eee0814de9d79265acac5fb92d893392838323be9541c8becc23e8cd28678289619654f28b8721bad96784b78ddc9c1eba085096e4d105b2fdef789228c9392ff1ed80e34764539b80a64cddd9a2a0ff0d803fde090cca6307ea4491bd9d7741305c00cb1b43e16e231bdcea9da48820b74916aef2c29a92adf1a115e6ff9c0334b1266cb7813fc6dccae7fcbae4e4e0e2e9f43d5068af605c889610c8a3339293c8c1d25238c0892c6da6839201e8b1927cf1decd0cec5dd36b4a95971dc3e9a896169e8c29bc1ba899d3beccb2302e4d4f2c2465913e7b2e494c33059f7adb57ffefc042775dcfcdc14efa9e08d7203cd6bccae2b453b0746fd93475e1ece63b64e7c103741218a140475b891f5e5f6a3559ccea7429f42566b12cb8703eeed70b3ce525f313a0934aa78766e62c345b4de8c3ec99252d3a4647437a7387a24118a17e892eb4885a69d1b547ce6fa6c0c31e5f7c6699a6f13d95324137471f517049c32eb2672fdba2934736186ddb10147dbabd13837ec7fa4915eaa8fbbc8c54d49c7287ab9a5818bb68b3cdd4c7832c10f2999d5bbb3a1376114d9aaa4aaa4e4e30223f0f01f240b911b26f814d1cd4bdf1edad19ea4423995293892795e8834cd4a163c3b664f38978cd2283ab93c60a9f58e5a5293fa5381c50505caac5a24f875eec66b8485ba01c70d169b319ffdde6bdc02fc8cce2415ed65a5c62aa525ded11de901f17f1de62c5d68e43c668cf46c67ca4c5eca12f99803421706a4ef6b84385b678b0877c347fe748899cc1c02737a1ce79171a3003b7f8d3b900c51fdddc469124d0a0084a167b43257f21baaeaf25c19c3ca90bbb8004f35e874200f8370edc464340e6b2cb84c9daa2753edf04f7613353b46fcbaec891cf717506f941dede5cd64ca1d6f286b7b5c4ecebb97d883aa989c0aad421ecedd6b5141f5856ed38ec6186f15fb3fe89a7daea1c574cec9206ec36e276bf29b0c1a92dafd935df0b4cf6110e36f71bb9eeeeff224f974c0661b8160960686935c86cba22b22098ac71f417a1f30145413f94b9ef9fe00e5cb340ee6c78bfa473fd8bebd2302f8e495c366375d350bf1beeefac311aea0e3c637a5297658089b036d9dd075b7082885d6fb05fec5bb0527ecf96635c4971f0e4c1fcca81d3eac290797c8202ae95618c3a6604ce1c9f29109fcd9ff2922ff71584a9e47e3c03617e9a66f2ce22b13e72ec83f494daee645d83e11efb6c5102f1acf47d9f32fa7390d5df6a54c21898048dfb3bd6b1cafced1d6a38f39276fc08a32d802c5a8a2908de665b64d8320095035b85f2a29193ae99c3739bbef0842a19f6b932870b0deb2814ad4b09a40c6da97f8e288f1d04d0e616e85cfcc95dd3374f36f8eff2d83633b39ba4c742e65e7a637ebd3e3d30c8f47daccc4f8c43e6956a38ef8dab8ffb8dd2fa01deef004f03fa002ed840e180d239ddcfdd49688d7fdfb6196c8844f4722c70e27eadb4916703db5498143543fce47c503115bbb7f297dcb04cb86b28210f1dc238a03a494072193b633daddc9057634fd2ce5e3e7e7bb4db286901d362edbab1d1224f0f07531caa44ca4737e759bdb93ac7872b140c2d84d90c5edeac7a99628122d9b3892938ed868b8400629606a1f68091bf1ebdfef3df85840db22d38153a339bdcb8ab77a6979dbfa82a89150a9aa9ce4d4e1f17060795e01af0aabbaaaa8b36d76af0b984b750d5a06056f3a2327ae75022194b3ce120dc7645fd102a3bcb26341fe916397fa7b8ad131f6d092d01ec601f2547a0aa1c03e5ed03c603a97868a56d86b9fcee17536ad59a2a36fe70f5fc85e660bf5899129aae8203139ee8866eae8e16bd35167733e3a47c183e751f7ca7607433cddddca20e2f96ace8ed97afdfa49addf58df7ffd200af0dc095637b27acead8efd73b29b8628782de1c2a9491f45f159a3457e17fa3f8a4b00d85b961aec89d3404f12104eea53e3bc314e6eb73f879453b7b1e651fd6d2e472179bb053bb0cc8592bfd8ce4a8a547681ccc15238c1b92f89613db522fca45314920769d29a3aa091c4a1f1d4737bbd92caad142a3e1e46be363fc1f96280bad8ce3cbd89fec8f2af1ab7fdaabb5cada8f655b6dfffd07ee0de9d08ee0a29137c3d951a00560c3a8a087037e84453b3da6efcba527ea323dcaadb9509f84f43da282ac26c940f7ebf27b8f72e533eb0adeaf7c140eefcc5d6a08a186eeffdcecbbbdadd576f6a00d5caae78f49335b14c389d0162da270fe96c11fbaebe6293cc42d0a18941879858975d2dc127dfcc0e4777527dbc329d1680d63962264dc4699aa64580dbbadef38da0df0866752749eecbd4d0350b16958fe05814ee653f77b178eb8243521a0539c2d82d21f831ebb581dd99f1e4a7635bc54f0347b73a5968b37da0eb48494dc08f18603f0ec84405083934", 0x1000}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xae}}], 0x10}}, {{&(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="2275ad561061d04c62678033b5441867ca2465c89ae134a61cf728bfbc01718942ae63d047c74d9569cfe7350db0028791eef098ae4fee2ab2f701258cb48750b4a003b051d7365ab7091cd9c52d2732527aec25b00c8b", 0x57}, {&(0x7f0000000400)='\t', 0x1}, {&(0x7f0000000440)="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", 0xff}], 0x3, &(0x7f0000002c40)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @loopback, @broadcast}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffff8}}], 0x90}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002d40)="0cf6cd63c45663adf5e892189dee4a7072ca6100dfa9e8a5f243e029b5e82aae913529276a4591410e08ee0f936c9cc6578b251ecafab9f7014b0396020f3cbe4d1f52808bc74126a2e128ea1fe69611985b024a29b4e250e44e83def19e3bc2c7fc3db7ff0337ae3f559034a911af7b21df2b7c35d21925bc31469f21f37cf878d67ebd194a37f323b8fed3d93d96de758693cc71fefbe8b87da3631ab5e8f2d5ecc804a241ce0ca47d12e83a1b", 0xae}], 0x1, &(0x7f0000002ec0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xd6}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@cipso={0x86, 0x6c, 0x3, [{0x2, 0x10, "bf6f25a7238aa7576de4dca1190c"}, {0x5, 0x2}, {0x5, 0x11, "9eccb98b1dddadb4036f06183a0bf2"}, {0x7, 0x2}, {0x0, 0xf, "452c03341a64077f3602e32a05"}, {0x2, 0xe, "0738ad91e763259eb39e5e15"}, {0x2, 0x3, '-'}, {0x6, 0xf, "15ca76be41209a6eaeedf4a43c"}, {0x0, 0xb, "814ff5e28f414fc44f"}, {0x0, 0x7, "7adfa5dc7d"}]}, @timestamp_addr={0x44, 0x2c, 0xff, 0x1, 0x6, [{@broadcast, 0x1}, {@rand_addr=0x64010102, 0xff}, {@broadcast, 0x5}, {@loopback, 0x1000}, {@empty}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x9e, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x25}, 0xe4}, {@empty, 0x5}, {@empty, 0x4}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}], 0x10c}}], 0x3, 0x8000) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x94, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa}, {0xa, 0x4, @remote}, {0xfffffffffffffd9d, 0x4, @remote}, {0xa, 0x4, @multicast}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_IFNAME={0x0, 0x3, 'veth1_macvtap\x00'}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3461aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) (rerun: 64) 10:38:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:38:52 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@in6={0x18, 0x2}, 0xc) [ 1890.316563][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:38:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="07010800f7ffffff"], 0x30}}, 0x0) 10:38:52 executing program 0: semctl$SETVAL(0xffffffffffffffff, 0x0, 0x8, 0x0) 10:38:52 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) 10:38:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000240)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001180)="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", 0x1000}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xae}}], 0x10}}, {{&(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="2275ad561061d04c62678033b5441867ca2465c89ae134a61cf728bfbc01718942ae63d047c74d9569cfe7350db0028791eef098ae4fee2ab2f701258cb48750b4a003b051d7365ab7091cd9c52d2732527aec25b00c8b", 0x57}, {&(0x7f0000000400)='\t', 0x1}, {&(0x7f0000000440)="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", 0xff}], 0x3, &(0x7f0000002c40)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r4, @loopback, @broadcast}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xfffffff8}}], 0x90}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002d40)="0cf6cd63c45663adf5e892189dee4a7072ca6100dfa9e8a5f243e029b5e82aae913529276a4591410e08ee0f936c9cc6578b251ecafab9f7014b0396020f3cbe4d1f52808bc74126a2e128ea1fe69611985b024a29b4e250e44e83def19e3bc2c7fc3db7ff0337ae3f559034a911af7b21df2b7c35d21925bc31469f21f37cf878d67ebd194a37f323b8fed3d93d96de758693cc71fefbe8b87da3631ab5e8f2d5ecc804a241ce0ca47d12e83a1b", 0xae}], 0x1, &(0x7f0000002ec0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xd6}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@cipso={0x86, 0x6c, 0x3, [{0x2, 0x10, "bf6f25a7238aa7576de4dca1190c"}, {0x5, 0x2}, {0x5, 0x11, "9eccb98b1dddadb4036f06183a0bf2"}, {0x7, 0x2}, {0x0, 0xf, "452c03341a64077f3602e32a05"}, {0x2, 0xe, "0738ad91e763259eb39e5e15"}, {0x2, 0x3, '-'}, {0x6, 0xf, "15ca76be41209a6eaeedf4a43c"}, {0x0, 0xb, "814ff5e28f414fc44f"}, {0x0, 0x7, "7adfa5dc7d"}]}, @timestamp_addr={0x44, 0x2c, 0xff, 0x1, 0x6, [{@broadcast, 0x1}, {@rand_addr=0x64010102, 0xff}, {@broadcast, 0x5}, {@loopback, 0x1000}, {@empty}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x9e, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x25}, 0xe4}, {@empty, 0x5}, {@empty, 0x4}]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}], 0x10c}}], 0x3, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x94, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x54, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa}, {0xa, 0x4, @remote}, {0xfffffffffffffd9d, 0x4, @remote}, {0xa, 0x4, @multicast}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_IFNAME={0x0, 0x3, 'veth1_macvtap\x00'}, @IFLA_MASTER={0x8}]}, 0x94}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3461aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) (rerun: 64) 10:38:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="08010800f7ffffff"], 0x30}}, 0x0) [ 1890.450980][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1890.530775][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1890.587756][T19272] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1890.588482][T30303] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1890.627658][ T4237] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1890.827563][T19272] usb 3-1: Using ep0 maxpacket: 32 [ 1891.107608][T19272] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1891.116789][T19272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.132347][T19272] usb 3-1: Product: syz [ 1891.136965][T19272] usb 3-1: Manufacturer: syz [ 1891.144116][T19272] usb 3-1: SerialNumber: syz [ 1891.155278][T19272] usb 3-1: config 0 descriptor?? [ 1891.199488][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1891.227760][T30303] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1891.236854][T30303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.245140][ T4237] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1891.260121][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.269211][T30303] usb 5-1: Product: syz [ 1891.273385][T30303] usb 5-1: Manufacturer: syz [ 1891.278378][ T4237] usb 2-1: Product: syz [ 1891.282546][ T4237] usb 2-1: Manufacturer: syz [ 1891.287129][ T4237] usb 2-1: SerialNumber: syz [ 1891.291971][T30303] usb 5-1: SerialNumber: syz [ 1891.339590][T30303] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1891.348621][ T4237] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1891.857625][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1891.897625][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1891.937640][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1891.977672][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1891.977806][T30303] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1891.993587][T30304] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1892.017641][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1892.057609][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1892.097536][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1892.139903][T19272] pwc: recv_control_msg error -32 req 02 val 2000 [ 1892.177542][T19272] pwc: recv_control_msg error -32 req 02 val 2100 [ 1892.217587][T19272] pwc: recv_control_msg error -32 req 02 val 2200 [ 1892.262066][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 1892.287604][T19272] pwc: recv_control_msg error -71 req 04 val 1500 [ 1892.307583][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 1892.327627][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1892.347664][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1892.367651][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1892.387553][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1892.396077][T13526] UDC core: couldn't find an available UDC or it's busy: -16 [ 1892.407576][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1892.415008][T30304] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1892.417595][T13526] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1892.420709][T30304] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1892.436037][T30303] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1892.441997][T30303] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1892.447726][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1892.462750][T19272] pwc: Registered as video71. [ 1892.469437][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 1892.492864][T19272] usb 3-1: USB disconnect, device number 107 [ 1892.617933][T30410] usb 5-1: USB disconnect, device number 85 [ 1892.631799][T30303] ath9k_htc: Failed to initialize the device [ 1892.638556][T30410] usb 5-1: ath9k_htc: USB layer deinitialized [ 1892.650511][ C0] usb 2-1: ath: unknown panic pattern! [ 1892.897779][ C0] usb 2-1: ath: unknown panic pattern! [ 1893.128647][ C0] usb 2-1: ath: unknown panic pattern! [ 1893.387846][ C0] usb 2-1: ath: unknown panic pattern! 10:38:55 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "805b9e8b", {0x1, 0x81ca, 0x400, 0xff, 0x2}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect(0x3, 0x5eb, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x9e, 0x4, 0x0, 0x40, 0x7}, 0x71, &(0x7f0000000840)={0x5, 0xf, 0x71, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x120, 0x1f, 0x0, 0x3ff, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0x5, 0x1, 0x3}, @generic={0x34, 0x10, 0xa, "cdb7c8342096e44f11aaeb8194ff8813bb1d429cd1448083825fa8cb562d0e2e102ed7d78bd13359560dc0d2bd9b533edc"}, @generic={0xc, 0x10, 0xa, "5dde7d4749a221512f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe1, 0x77, 0x1f}, @ssp_cap={0x10, 0x10, 0xa, 0x5a, 0x1, 0x7, 0xf, 0x3, [0x7f8000]}]}, 0x5, [{0x7, &(0x7f00000008c0)=@string={0x7, 0x3, "504801b52e"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1004}}, {0x30, &(0x7f0000000940)=@string={0x30, 0x3, "36ab8f92676e5e614e39492072ee26bc9fcc40d8c2573204878924148be8b0026d93f3d324a3a235d0f63e6dc26a"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x746f}}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10cc, &(0x7f0000000a40)={[{0x1000, 0x4e00, "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"}, {0x5b, 0x4e00, "db95d070a22f705c29466312aee34d632a55dda31dffa33e3bd6b279f7595c39e5bdbc5ca853c385c4f0739085f48b11242e1e64b0ba1aee3ebeaf2366d6cc368fa7ea5b7228cbf1538d1103c4c64a96556c8b7bc1bfd73e4ef00b"}, {0x61, 0x4e00, "2e14a849a86a374dbc242b9ae7784a78930499c5debd99b248541e95c3fce452ee2a6d08fc1c9d2799afee36bac22f23cdfe956bf33b908ed13ff3061e8841f2e060455c11c626fb4c6bfb6230318ced64ccc336bcf912fb0a6689c6d14169bd14"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x103, &(0x7f0000001b40)=@generic={0x5, 0x0, 0xfb, "39877f1f", "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"}) 10:38:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000005f40)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005f00)={&(0x7f0000005e80)={0x14}, 0x14}}, 0x0) 10:38:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="09010800f7ffffff"], 0x30}}, 0x0) 10:38:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@any, 0xffffffff}, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x40001) 10:38:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:38:55 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000240)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 1893.447586][T31433] usb 2-1: USB disconnect, device number 76 [ 1893.449521][T30304] ath9k_htc: Failed to initialize the device [ 1893.472886][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:38:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@any, 0xffffffff}, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x40001) [ 1893.496634][T31433] usb 2-1: ath9k_htc: USB layer deinitialized 10:38:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0a010800f7ffffff"], 0x30}}, 0x0) 10:38:55 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 10:38:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0c010800f7ffffff"], 0x30}}, 0x0) [ 1893.565139][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:38:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0e010800f7ffffff"], 0x30}}, 0x0) 10:38:55 executing program 0: getresuid(&(0x7f0000000300), &(0x7f0000000340), 0x0) [ 1893.626974][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1893.686116][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1893.767823][T30303] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1893.777566][T30301] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1893.929284][T31433] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1894.017526][T30301] usb 3-1: Using ep0 maxpacket: 32 [ 1894.287771][T30303] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1894.296839][T30303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.310640][T30301] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1894.321253][T30303] usb 5-1: Product: syz [ 1894.325416][T30303] usb 5-1: Manufacturer: syz [ 1894.333277][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.341964][T30303] usb 5-1: SerialNumber: syz [ 1894.347126][T30301] usb 3-1: Product: syz [ 1894.352609][T30301] usb 3-1: Manufacturer: syz [ 1894.357231][T30301] usb 3-1: SerialNumber: syz [ 1894.374521][T30301] usb 3-1: config 0 descriptor?? [ 1894.388523][T30303] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1894.420163][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1894.507752][T31433] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1894.516953][T31433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.525121][T31433] usb 2-1: Product: syz [ 1894.529341][T31433] usb 2-1: Manufacturer: syz [ 1894.533953][T31433] usb 2-1: SerialNumber: syz [ 1894.598472][T31433] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1894.957610][T12111] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1895.077752][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1895.118064][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1895.157631][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1895.197678][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1895.237617][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1895.257615][T31433] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1895.277685][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1895.317655][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1895.357672][T30301] pwc: recv_control_msg error -32 req 02 val 2000 [ 1895.382217][T12111] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1895.387971][T12111] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1895.398179][T30301] pwc: recv_control_msg error -32 req 02 val 2100 [ 1895.442606][T30301] pwc: recv_control_msg error -32 req 02 val 2200 [ 1895.464676][T13653] UDC core: couldn't find an available UDC or it's busy: -16 [ 1895.472447][T13653] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1895.487583][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1895.507606][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1895.527693][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1895.547595][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1895.577783][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1895.590373][T30304] usb 5-1: USB disconnect, device number 86 [ 1895.603568][T12111] ath9k_htc: Failed to initialize the device [ 1895.609740][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1895.616704][T30304] usb 5-1: ath9k_htc: USB layer deinitialized [ 1895.627659][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1895.647603][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1895.667695][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1895.675530][T30301] pwc: Registered as video71. [ 1895.681972][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 1895.695444][T30301] usb 3-1: USB disconnect, device number 108 [ 1895.710370][T30410] usb 2-1: USB disconnect, device number 77 10:38:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0xffffffffffffff50, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)=0x8) 10:38:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0f010800f7ffffff"], 0x30}}, 0x0) 10:38:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@any, 0xffffffff}, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x40001) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@any, 0xffffffff}, 0x0, 0x2}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x40001) (async) 10:38:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:38:58 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000240)={[{}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:38:58 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x19c, &(0x7f0000000240)={[{0x71, 0x4e00, "0dfe37fd977e9acc5181deb9762cc516df4607eac3d47bf6ab4248114cedc027bbeff665b3483e1b433172e5ba2e4985f61f6153b625cdc9a6f20a2149a1c28596ddb59a7bd71ca2e269ef93e81b475d38ddea213529b66b6f3b40d8fafe0aea2f566d2248ab66a295d429c64c4f7ccac8"}, {0x9a, 0x4e00, "3d4cb05b812eba19d96de1ef18c4fb90a546158b12467e8e1f5c6b147102bfffd445beb9582739c407a82774b8eea7019d39a0cb64b2032b986a8e95c14081cfc42cb3db4888dcd6f9a573bbdc332ba39524723568ce1ad41cc2acd268d8e2fea57372541854e7c6bffadb823a7c0fc71fcdb71e03ebd10bf90229e3a16dd9063f7af3fefc62eddad3943189b6a7a0331bd43dc151517efa0410"}, {0x37, 0x4e00, "906d1864c1c368bf048a65d5f7cf52ebc9ae0e570403123f7dc06d2df096c737cc7c83712fec326825fec04160d522573b61f955e273ee"}, {0x10, 0x4e00, "0f0e23537329a0a5d6b6d0f1afdb55af"}, {0x2d, 0x4e00, "ed1b9060f25f19d185cfb152248c4092ddc14a8acd39b81d928a1ecc7cc8a561cd42029ac4ed9609a65aa3d02f"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f01040203ab142010400000c090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x19, &(0x7f0000000100)=@generic={0x8, 0x2, 0x11, "05c8a71c", "f546fbadc0353c4e676d668f2430c26c9b"}) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "02e338a9", {0x1, 0x401, 0x3, 0x40}}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000480)=@conn_svc_rsp={0x0, 0x0, 0xa, 'k4tm', {0x3, 0x106, 0x0, 0x5, 0x800, 0x3, 0x9}}) 10:38:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="10010800f7ffffff"], 0x30}}, 0x0) [ 1896.279940][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:38:58 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10410a02}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, 0x2, 0x2, 0xf053563c5c591bd, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0xe8, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008010}, 0x802) 10:38:58 executing program 0: getresuid(&(0x7f0000000300), 0x0, 0x0) 10:38:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1896.391200][T13772] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:38:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="48010800f7ffffff"], 0x30}}, 0x0) 10:38:58 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10410a02}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, 0x2, 0x2, 0xf053563c5c591bd, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0xe8, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008010}, 0x802) 10:38:58 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={0x0}}, 0x40) [ 1896.512629][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1896.527715][T30304] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1896.527726][T21700] usb 3-1: new high-speed USB device number 109 using dummy_hcd 10:38:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xbdb09071f85b888f, 0x0) 10:38:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="4c010800f7ffffff"], 0x30}}, 0x0) [ 1896.558287][T31433] usb 2-1: Service connection timeout for: 256 [ 1896.564483][T31433] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1896.593183][T31433] ath9k_htc: Failed to initialize the device [ 1896.612078][T30410] usb 2-1: ath9k_htc: USB layer deinitialized [ 1896.625831][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1896.807536][T21700] usb 3-1: Using ep0 maxpacket: 32 [ 1897.017575][T30410] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1897.077711][T30304] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1897.086783][T30304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.099832][T30304] usb 5-1: Product: syz [ 1897.104003][T30304] usb 5-1: Manufacturer: syz [ 1897.111561][T30304] usb 5-1: SerialNumber: syz [ 1897.157789][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1897.158639][T30304] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1897.171473][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.193355][T21700] usb 3-1: Product: syz [ 1897.201519][T21700] usb 3-1: Manufacturer: syz [ 1897.206234][T21700] usb 3-1: SerialNumber: syz [ 1897.217824][T21700] usb 3-1: config 0 descriptor?? [ 1897.280577][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1897.577813][T30410] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1897.586949][T30410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.601191][T30410] usb 2-1: Product: syz [ 1897.605377][T30410] usb 2-1: Manufacturer: syz [ 1897.611968][T30410] usb 2-1: SerialNumber: syz [ 1897.659641][T30410] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1897.777682][T30304] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1897.937560][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1897.977692][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1898.017564][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1898.057651][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1898.097752][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 1898.137590][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 1898.177624][T21700] pwc: recv_control_msg error -32 req 04 val 1400 [ 1898.201789][T30304] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1898.207641][T30304] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1898.217638][T21700] pwc: recv_control_msg error -32 req 02 val 2000 [ 1898.227797][T30410] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1898.257570][T21700] pwc: recv_control_msg error -32 req 02 val 2100 [ 1898.297563][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 1898.318476][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 1898.337553][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 1898.357571][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 1898.377582][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1898.397565][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 1898.405511][T31433] usb 5-1: USB disconnect, device number 87 [ 1898.420796][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1898.421510][T30304] ath9k_htc: Failed to initialize the device [ 1898.441811][T31433] usb 5-1: ath9k_htc: USB layer deinitialized [ 1898.448685][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1898.467625][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1898.487725][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1898.494848][T21700] pwc: Registered as video71. [ 1898.506033][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 1898.547105][T21700] usb 3-1: USB disconnect, device number 109 10:39:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x5) 10:39:01 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000240)={[{}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 1898.869847][T30410] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1898.875519][T30410] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1899.071446][T13668] UDC core: couldn't find an available UDC or it's busy: -16 [ 1899.079022][T13668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1899.088565][T13668] UDC core: couldn't find an available UDC or it's busy: -16 [ 1899.095974][T13668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1899.104909][T30301] usb 2-1: USB disconnect, device number 78 [ 1899.110707][T30410] ath9k_htc: Failed to initialize the device [ 1899.117155][T30301] usb 2-1: ath9k_htc: USB layer deinitialized [ 1899.197640][T31433] usb 5-1: new high-speed USB device number 88 using dummy_hcd 10:39:01 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x19c, &(0x7f0000000240)={[{0x71, 0x4e00, "0dfe37fd977e9acc5181deb9762cc516df4607eac3d47bf6ab4248114cedc027bbeff665b3483e1b433172e5ba2e4985f61f6153b625cdc9a6f20a2149a1c28596ddb59a7bd71ca2e269ef93e81b475d38ddea213529b66b6f3b40d8fafe0aea2f566d2248ab66a295d429c64c4f7ccac8"}, {0x9a, 0x4e00, "3d4cb05b812eba19d96de1ef18c4fb90a546158b12467e8e1f5c6b147102bfffd445beb9582739c407a82774b8eea7019d39a0cb64b2032b986a8e95c14081cfc42cb3db4888dcd6f9a573bbdc332ba39524723568ce1ad41cc2acd268d8e2fea57372541854e7c6bffadb823a7c0fc71fcdb71e03ebd10bf90229e3a16dd9063f7af3fefc62eddad3943189b6a7a0331bd43dc151517efa0410"}, {0x37, 0x4e00, "906d1864c1c368bf048a65d5f7cf52ebc9ae0e570403123f7dc06d2df096c737cc7c83712fec326825fec04160d522573b61f955e273ee"}, {0x10, 0x4e00, "0f0e23537329a0a5d6b6d0f1afdb55af"}, {0x2d, 0x4e00, "ed1b9060f25f19d185cfb152248c4092ddc14a8acd39b81d928a1ecc7cc8a561cd42029ac4ed9609a65aa3d02f"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f01040203ab142010400000c090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x19, &(0x7f0000000100)=@generic={0x8, 0x2, 0x11, "05c8a71c", "f546fbadc0353c4e676d668f2430c26c9b"}) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "02e338a9", {0x1, 0x401, 0x3, 0x40}}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000480)=@conn_svc_rsp={0x0, 0x0, 0xa, 'k4tm', {0x3, 0x106, 0x0, 0x5, 0x800, 0x3, 0x9}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x19c, &(0x7f0000000240)={[{0x71, 0x4e00, "0dfe37fd977e9acc5181deb9762cc516df4607eac3d47bf6ab4248114cedc027bbeff665b3483e1b433172e5ba2e4985f61f6153b625cdc9a6f20a2149a1c28596ddb59a7bd71ca2e269ef93e81b475d38ddea213529b66b6f3b40d8fafe0aea2f566d2248ab66a295d429c64c4f7ccac8"}, {0x9a, 0x4e00, "3d4cb05b812eba19d96de1ef18c4fb90a546158b12467e8e1f5c6b147102bfffd445beb9582739c407a82774b8eea7019d39a0cb64b2032b986a8e95c14081cfc42cb3db4888dcd6f9a573bbdc332ba39524723568ce1ad41cc2acd268d8e2fea57372541854e7c6bffadb823a7c0fc71fcdb71e03ebd10bf90229e3a16dd9063f7af3fefc62eddad3943189b6a7a0331bd43dc151517efa0410"}, {0x37, 0x4e00, "906d1864c1c368bf048a65d5f7cf52ebc9ae0e570403123f7dc06d2df096c737cc7c83712fec326825fec04160d522573b61f955e273ee"}, {0x10, 0x4e00, "0f0e23537329a0a5d6b6d0f1afdb55af"}, {0x2d, 0x4e00, "ed1b9060f25f19d185cfb152248c4092ddc14a8acd39b81d928a1ecc7cc8a561cd42029ac4ed9609a65aa3d02f"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f01040203ab142010400000c090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x19, &(0x7f0000000100)=@generic={0x8, 0x2, 0x11, "05c8a71c", "f546fbadc0353c4e676d668f2430c26c9b"}) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "02e338a9", {0x1, 0x401, 0x3, 0x40}}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000480)=@conn_svc_rsp={0x0, 0x0, 0xa, 'k4tm', {0x3, 0x106, 0x0, 0x5, 0x800, 0x3, 0x9}}) (async) 10:39:01 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}}, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 32) copy_file_range(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x1d7, 0xfffffdef, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0x9}, {0xfff2, 0xffe0}, {0x2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x26a7}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10410a02}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, 0x2, 0x2, 0xf053563c5c591bd, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_MASK={0xe8, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008010}, 0x802) 10:39:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="60010800f7ffffff"], 0x30}}, 0x0) 10:39:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0x0) 10:39:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1899.661420][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="68010800f7ffffff"], 0x30}}, 0x0) 10:39:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) read(r0, 0x0, 0x0) [ 1899.727908][T31433] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1899.761727][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="6c010800f7ffffff"], 0x30}}, 0x0) [ 1899.767887][T31433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.790880][T31433] usb 5-1: Product: syz [ 1899.806160][T31433] usb 5-1: Manufacturer: syz [ 1899.820635][T31433] usb 5-1: SerialNumber: syz 10:39:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) 10:39:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="74010800f7ffffff"], 0x30}}, 0x0) [ 1899.824372][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1899.908695][T31433] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1899.930427][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1899.937606][T30301] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1899.987618][T19272] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1900.237763][T30301] usb 3-1: Using ep0 maxpacket: 32 [ 1900.497576][T31433] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1900.507867][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1900.516921][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.526304][T19272] usb 2-1: Product: syz [ 1900.530678][T19272] usb 2-1: Manufacturer: syz [ 1900.535290][T19272] usb 2-1: SerialNumber: syz [ 1900.537755][T30301] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1900.550407][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.558785][T30301] usb 3-1: Product: syz [ 1900.563139][T30301] usb 3-1: Manufacturer: syz [ 1900.568159][T30301] usb 3-1: SerialNumber: syz [ 1900.575224][T30301] usb 3-1: config 0 descriptor?? [ 1900.598646][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1900.621356][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1900.920903][T31433] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1900.926618][T31433] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1901.128634][ T4237] usb 5-1: USB disconnect, device number 88 [ 1901.141278][T31433] ath9k_htc: Failed to initialize the device [ 1901.147354][ T4237] usb 5-1: ath9k_htc: USB layer deinitialized [ 1901.167585][T30410] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1901.277727][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1901.318644][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1901.357731][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1901.397673][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1901.438025][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1901.477856][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1901.518624][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1901.567600][T30301] pwc: recv_control_msg error -32 req 02 val 2000 10:39:03 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000240)={[{}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 1901.618499][T30301] pwc: recv_control_msg error -32 req 02 val 2100 [ 1901.657802][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 1901.677770][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1901.697663][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1901.717610][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1901.737643][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1901.757753][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1901.777653][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1901.797685][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1901.811226][T30410] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1901.817017][T30410] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1901.827610][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1901.848708][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1901.855890][T30301] pwc: Registered as video71. [ 1901.863108][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 1901.893918][T30301] usb 3-1: USB disconnect, device number 110 [ 1901.928038][T31433] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1902.011709][T13907] UDC core: couldn't find an available UDC or it's busy: -16 [ 1902.019194][T13907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1902.028326][T13907] UDC core: couldn't find an available UDC or it's busy: -16 [ 1902.035719][T13907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1902.044272][T13907] UDC core: couldn't find an available UDC or it's busy: -16 10:39:04 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x19c, &(0x7f0000000240)={[{0x71, 0x4e00, "0dfe37fd977e9acc5181deb9762cc516df4607eac3d47bf6ab4248114cedc027bbeff665b3483e1b433172e5ba2e4985f61f6153b625cdc9a6f20a2149a1c28596ddb59a7bd71ca2e269ef93e81b475d38ddea213529b66b6f3b40d8fafe0aea2f566d2248ab66a295d429c64c4f7ccac8"}, {0x9a, 0x4e00, "3d4cb05b812eba19d96de1ef18c4fb90a546158b12467e8e1f5c6b147102bfffd445beb9582739c407a82774b8eea7019d39a0cb64b2032b986a8e95c14081cfc42cb3db4888dcd6f9a573bbdc332ba39524723568ce1ad41cc2acd268d8e2fea57372541854e7c6bffadb823a7c0fc71fcdb71e03ebd10bf90229e3a16dd9063f7af3fefc62eddad3943189b6a7a0331bd43dc151517efa0410"}, {0x37, 0x4e00, "906d1864c1c368bf048a65d5f7cf52ebc9ae0e570403123f7dc06d2df096c737cc7c83712fec326825fec04160d522573b61f955e273ee"}, {0x10, 0x4e00, "0f0e23537329a0a5d6b6d0f1afdb55af"}, {0x2d, 0x4e00, "ed1b9060f25f19d185cfb152248c4092ddc14a8acd39b81d928a1ecc7cc8a561cd42029ac4ed9609a65aa3d02f"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f01040203ab142010400000c090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x19, &(0x7f0000000100)=@generic={0x8, 0x2, 0x11, "05c8a71c", "f546fbadc0353c4e676d668f2430c26c9b"}) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "02e338a9", {0x1, 0x401, 0x3, 0x40}}) (async) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000480)=@conn_svc_rsp={0x0, 0x0, 0xa, 'k4tm', {0x3, 0x106, 0x0, 0x5, 0x800, 0x3, 0x9}}) 10:39:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, 0x0, 0x0, 0x0) 10:39:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) [ 1902.056160][T13907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1902.075487][T21699] usb 2-1: USB disconnect, device number 79 [ 1902.090975][T30410] ath9k_htc: Failed to initialize the device [ 1902.102837][T21699] usb 2-1: ath9k_htc: USB layer deinitialized 10:39:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="7a010800f7ffffff"], 0x30}}, 0x0) 10:39:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) 10:39:04 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/cgroup', 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) 10:39:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00070800f7ffffff"], 0x30}}, 0x0) [ 1902.201454][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b0001"], 0x30}, 0x1, 0x0, 0x0, 0x200040d5}, 0x0) 10:39:04 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r0, 0x0, 0x0) 10:39:04 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x200000, 0x60) [ 1902.316134][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1902.468203][T31433] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1902.477291][T31433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.492698][T19272] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1902.500453][T21699] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1902.508123][T31433] usb 5-1: Product: syz [ 1902.512276][T31433] usb 5-1: Manufacturer: syz [ 1902.516863][T31433] usb 5-1: SerialNumber: syz [ 1902.568366][T31433] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1902.757586][T19272] usb 3-1: Using ep0 maxpacket: 32 [ 1903.037770][T21699] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1903.047270][T19272] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1903.056436][T19272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.065269][T21699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.073698][T19272] usb 3-1: Product: syz [ 1903.078254][T21699] usb 2-1: Product: syz [ 1903.082410][T21699] usb 2-1: Manufacturer: syz [ 1903.086990][T21699] usb 2-1: SerialNumber: syz [ 1903.092139][T19272] usb 3-1: Manufacturer: syz [ 1903.096753][T19272] usb 3-1: SerialNumber: syz [ 1903.106182][T19272] usb 3-1: config 0 descriptor?? [ 1903.137725][T31433] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1903.148304][T21699] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1903.162183][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1903.561530][T31433] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1903.567236][T31433] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1903.727611][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1903.766476][T30301] usb 5-1: USB disconnect, device number 89 [ 1903.779612][T31433] ath9k_htc: Failed to initialize the device [ 1903.785702][T30301] usb 5-1: ath9k_htc: USB layer deinitialized [ 1903.787865][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1903.837940][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1903.877849][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1903.917602][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1903.957559][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1903.997960][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1904.037593][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1904.077730][T19272] pwc: recv_control_msg error -32 req 02 val 2000 [ 1904.117601][T19272] pwc: recv_control_msg error -71 req 02 val 2100 [ 1904.137581][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 1904.149965][T21699] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1904.155657][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1904.163711][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 1904.187738][T19272] pwc: recv_control_msg error -71 req 04 val 1500 [ 1904.207723][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 1904.230713][T19272] pwc: recv_control_msg error -71 req 02 val 2400 10:39:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00250800f7ffffff"], 0x30}}, 0x0) [ 1904.247851][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1904.267738][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1904.287900][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1904.296713][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1904.307795][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1904.327743][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1904.337850][T19272] pwc: Registered as video71. [ 1904.343293][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 1904.350626][T14054] UDC core: couldn't find an available UDC or it's busy: -16 [ 1904.361454][T14054] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1904.371559][T14152] UDC core: couldn't find an available UDC or it's busy: -16 [ 1904.382646][T19272] usb 3-1: USB disconnect, device number 111 [ 1904.391570][T14152] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1904.411677][T30301] usb 2-1: USB disconnect, device number 80 [ 1904.431433][T21699] ath9k_htc: Failed to initialize the device [ 1904.439355][T30301] usb 2-1: ath9k_htc: USB layer deinitialized 10:39:07 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0xffffffffffffffd0, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000080)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da235e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80277c0804a4af5ce0f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de91806152594d55ce9f9acb8000000"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "33f226cb", {0x3, 0x107, 0x0, 0x27, 0xff, 0x2, 0x1}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:07 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000240)={[{0xb, 0x4e00, "c7dc6b1a4669337a9e7be6"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000680)=@in={0x2, 0x4e21, @remote}, 0x80) 10:39:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @local, 0x7fff}, 0x1c, 0x0}}], 0x1, 0x0) 10:39:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00680800f7ffffff"], 0x30}}, 0x0) 10:39:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:07 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="013f04302b91", @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @multicast2, @dev, @empty}}}}, 0x0) 10:39:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002800)=@RTM_DELMDB={0x38, 0x55, 0x23, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@multicast1}}}]}, 0x38}}, 0x0) [ 1904.973280][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00020800f7ffffff"], 0x30}}, 0x0) 10:39:07 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 10:39:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'lo\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 10:39:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f05", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@typedef, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x3a}, 0x20) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1905.090164][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1905.237605][T19272] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1905.237619][T30301] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1905.267624][ T4237] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1905.477672][T30301] usb 3-1: Using ep0 maxpacket: 32 [ 1905.547695][ T4237] usb 2-1: no configurations [ 1905.552704][ T4237] usb 2-1: can't read configurations, error -22 [ 1905.711989][ T4237] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1905.757759][T30301] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1905.766845][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.782872][T30301] usb 3-1: Product: syz [ 1905.787052][T30301] usb 3-1: Manufacturer: syz [ 1905.791945][T30301] usb 3-1: SerialNumber: syz [ 1905.804688][T30301] usb 3-1: config 0 descriptor?? [ 1905.849165][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1905.867648][T19272] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1905.876734][T19272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.885284][T19272] usb 5-1: Product: syz [ 1905.890031][T19272] usb 5-1: Manufacturer: syz [ 1905.894626][T19272] usb 5-1: SerialNumber: syz [ 1905.958251][T19272] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1906.017714][ T4237] usb 2-1: no configurations [ 1906.022410][ T4237] usb 2-1: can't read configurations, error -22 [ 1906.029411][ T4237] usb usb2-port1: attempt power cycle [ 1906.437521][ T4237] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1906.507640][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1906.547747][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1906.567846][ T4237] usb 2-1: no configurations [ 1906.572488][ T4237] usb 2-1: can't read configurations, error -22 [ 1906.587618][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1906.628192][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1906.647791][T19272] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1906.667646][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1906.707655][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1906.727540][ T4237] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1906.747613][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1906.787571][T30301] pwc: recv_control_msg error -32 req 02 val 2000 [ 1906.827745][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 1906.847589][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 1906.862044][ T4237] usb 2-1: no configurations [ 1906.866654][ T4237] usb 2-1: can't read configurations, error -22 [ 1906.873063][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1906.880086][ T4237] usb usb2-port1: unable to enumerate USB device [ 1906.897559][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1906.917579][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1906.937602][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1906.957878][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1906.977608][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1906.997660][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1907.018529][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1907.038095][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1907.045305][T30301] pwc: Registered as video71. [ 1907.051472][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 1907.063778][T30301] usb 3-1: USB disconnect, device number 112 [ 1907.081488][T19272] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1907.087186][T19272] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1907.296435][T21699] usb 5-1: USB disconnect, device number 90 [ 1907.304932][T19272] ath9k_htc: Failed to initialize the device [ 1907.318758][T21699] usb 5-1: ath9k_htc: USB layer deinitialized 10:39:10 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0xffffffffffffffd0, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000080)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da235e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80277c0804a4af5ce0f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de91806152594d55ce9f9acb8000000"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "33f226cb", {0x3, 0x107, 0x0, 0x27, 0xff, 0x2, 0x1}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0xffffffffffffffd0, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000080)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da235e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80277c0804a4af5ce0f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de91806152594d55ce9f9acb8000000"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "33f226cb", {0x3, 0x107, 0x0, 0x27, 0xff, 0x2, 0x1}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) 10:39:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00070800f7ffffff"], 0x30}}, 0x0) 10:39:10 executing program 0: shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shmget(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, &(0x7f00000004c0)=0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)=ANY=[@ANYBLOB="f1dad4ff88f0784088a0acb374d7bef98e0c27a94145840b37055da22aebee5b066f5af05400b4e6925d81354fce630244343ac61de03c4adb7eebffc44cd7c6ea4ca0553c61ec04673794677ae65e967a907a70428299dc08f34d4acb4dc431063eddcbec10bc38b359ce5fe9937a977f52643908a350a2538d73754a27a445c5ffc114ca2cf36d018074f43efe9f878d2119ceeb0d416535937599", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) r3 = shmget(0x1, 0x3000, 0x2f1c2143a7cf67d2, &(0x7f0000ffb000/0x3000)=nil) shmat(r3, &(0x7f0000ffb000/0x1000)=nil, 0xb000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x5, 0x3a8, 0x0, 0x98, 0xffffffff, 0x98, 0x98, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @multicast1, 0x0, 0x0, 'team0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x2}, {0x0, 0x2, 0x4}}}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0xffffffffffffffff}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1, @icmp_id, @gre_key}}}}, {{@ip={@multicast1, @multicast1, 0xff000000, 0xff, 'tunl0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x11}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @empty, @local, @port, @icmp_id=0x4}}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0xe, "28fe"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @broadcast, @gre_key, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 10:39:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x4f8, 0x2e8, 0x0, 0xffffffff, 0x0, 0x240, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, 0x0, {[{{@uncond, 0x0, 0x208, 0x240, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv6=@private0}, {@ipv4=@multicast2, [], @ipv4=@remote}, {@ipv4=@remote, [], @ipv4=@local}, {@ipv6=@local, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}], 0xa}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key}}}}, {{@ip={@remote, @private, 0x0, 0x0, 'wg2\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) 10:39:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:10 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000240)={[{0xb, 0x4e00, "c7dc6b1a4669337a9e7be6"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000a00)={&(0x7f0000000040), 0xc, &(0x7f00000009c0)={0x0}}, 0x0) 10:39:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1908.046185][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:10 executing program 0: timer_create(0x1, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f0000000180)) 10:39:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00080800f7ffffff"], 0x30}}, 0x0) 10:39:10 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000001180)=""/4096) 10:39:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00250800f7ffffff"], 0x30}}, 0x0) [ 1908.153936][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1908.226663][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1908.328277][ T4237] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1908.336042][T30301] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1908.487649][T12111] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1908.567585][ T4237] usb 3-1: Using ep0 maxpacket: 32 [ 1908.767842][T12111] usb 2-1: no configurations [ 1908.772524][T12111] usb 2-1: can't read configurations, error -22 [ 1908.847652][ T4237] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1908.856808][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.865234][T30301] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1908.874773][ T4237] usb 3-1: Product: syz [ 1908.879327][T30301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.887920][ T4237] usb 3-1: Manufacturer: syz [ 1908.892537][ T4237] usb 3-1: SerialNumber: syz [ 1908.897474][T30301] usb 5-1: Product: syz [ 1908.901693][T30301] usb 5-1: Manufacturer: syz [ 1908.906313][T30301] usb 5-1: SerialNumber: syz [ 1908.912331][ T4237] usb 3-1: config 0 descriptor?? [ 1908.937652][T12111] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1908.949947][ T4237] pwc: Samsung MPC-C10 USB webcam detected. [ 1908.958514][T30301] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1909.237878][T12111] usb 2-1: no configurations [ 1909.242522][T12111] usb 2-1: can't read configurations, error -22 [ 1909.254168][T12111] usb usb2-port1: attempt power cycle [ 1909.547672][T30303] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1909.607569][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1909.647630][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1909.667585][T12111] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1909.687654][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 1909.727669][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1909.767741][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1909.798053][T12111] usb 2-1: no configurations [ 1909.803610][T12111] usb 2-1: can't read configurations, error -22 [ 1909.810606][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 1909.847697][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 1909.887771][ T4237] pwc: recv_control_msg error -71 req 02 val 2000 [ 1909.907643][ T4237] pwc: recv_control_msg error -71 req 02 val 2100 [ 1909.928186][ T4237] pwc: recv_control_msg error -71 req 02 val 2200 [ 1909.947627][ T4237] pwc: recv_control_msg error -71 req 06 val 0600 [ 1909.960120][T30303] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1909.965822][T30303] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1909.973961][ T4237] pwc: recv_control_msg error -71 req 04 val 1500 [ 1909.980619][T12111] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1910.007653][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 1910.027585][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 1910.047598][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 1910.067605][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 1910.087700][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1910.107589][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1910.117899][T12111] usb 2-1: no configurations [ 1910.122576][T12111] usb 2-1: can't read configurations, error -22 [ 1910.129359][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1910.136521][T12111] usb usb2-port1: unable to enumerate USB device [ 1910.143681][ T4237] pwc: Registered as video71. [ 1910.151243][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 1910.164435][T31433] usb 5-1: USB disconnect, device number 91 [ 1910.171057][ T4237] usb 3-1: USB disconnect, device number 113 [ 1910.180958][T30303] ath9k_htc: Failed to initialize the device [ 1910.187242][T31433] usb 5-1: ath9k_htc: USB layer deinitialized 10:39:13 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0xffffffffffffffd0, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000080)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da235e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80277c0804a4af5ce0f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de91806152594d55ce9f9acb8000000"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "33f226cb", {0x3, 0x107, 0x0, 0x27, 0xff, 0x2, 0x1}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 10:39:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00680800f7ffffff"], 0x30}}, 0x0) 10:39:13 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) unlink(&(0x7f0000000000)='./file0\x00') 10:39:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:13 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000240)={[{0xb, 0x4e00, "c7dc6b1a4669337a9e7be6"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 10:39:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010b00f7ffffff"], 0x30}}, 0x0) 10:39:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) select(0x40, &(0x7f0000000040)={0x8}, 0x0, 0x0, &(0x7f0000000140)) [ 1911.099915][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 10:39:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00012f00f7ffffff"], 0x30}}, 0x0) [ 1911.208915][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000134c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000012180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000016240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="eb", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18}}], 0x1, 0x0) [ 1911.296771][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1911.357915][T12111] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1911.377879][T30303] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1911.537627][ T4237] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1911.597715][T12111] usb 3-1: Using ep0 maxpacket: 32 [ 1911.818023][ T4237] usb 2-1: no configurations [ 1911.822648][ T4237] usb 2-1: can't read configurations, error -22 [ 1911.877703][T12111] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1911.886771][T12111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.895395][T12111] usb 3-1: Product: syz [ 1911.900020][T30303] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1911.909360][T12111] usb 3-1: Manufacturer: syz [ 1911.913983][T12111] usb 3-1: SerialNumber: syz [ 1911.919157][T30303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.927278][T30303] usb 5-1: Product: syz [ 1911.933716][T12111] usb 3-1: config 0 descriptor?? [ 1911.938990][T30303] usb 5-1: Manufacturer: syz [ 1911.943600][T30303] usb 5-1: SerialNumber: syz [ 1911.978479][ T4237] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1911.990117][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 1911.996705][T30303] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1912.257660][ T4237] usb 2-1: no configurations [ 1912.263293][ T4237] usb 2-1: can't read configurations, error -22 [ 1912.270109][ T4237] usb usb2-port1: attempt power cycle [ 1912.572352][T30303] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1912.647635][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1912.677599][ T4237] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1912.687919][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 1912.727755][T12111] pwc: recv_control_msg error -32 req 04 val 1700 [ 1912.767729][T12111] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1912.807669][ T4237] usb 2-1: no configurations [ 1912.812423][ T4237] usb 2-1: can't read configurations, error -22 [ 1912.819165][T12111] pwc: recv_control_msg error -32 req 04 val 1000 [ 1912.858158][T12111] pwc: recv_control_msg error -32 req 04 val 1300 [ 1912.897896][T12111] pwc: recv_control_msg error -32 req 04 val 1400 [ 1912.937701][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 1912.958163][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 1912.967755][ T4237] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1912.981108][T30303] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1912.986802][T30303] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1912.994811][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 1913.017746][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 1913.037812][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 1913.057682][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 1913.078186][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 1913.097712][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 1913.107867][ T4237] usb 2-1: no configurations [ 1913.112491][ T4237] usb 2-1: can't read configurations, error -22 [ 1913.119348][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 1913.125961][ T4237] usb usb2-port1: unable to enumerate USB device [ 1913.147576][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 1913.167625][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 1913.182959][ T4237] usb 5-1: USB disconnect, device number 92 [ 1913.192338][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 1913.203820][T30303] ath9k_htc: Failed to initialize the device [ 1913.210041][ T4237] usb 5-1: ath9k_htc: USB layer deinitialized [ 1913.221057][T12111] pwc: Registered as video71. [ 1913.226939][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 1913.240064][T12111] usb 3-1: USB disconnect, device number 114 10:39:16 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "c153b5056bfb641ee32b03309d333538ed030c4178c9001ca1379df35e2c31354c9da01a95d9711b08ad6f9e6dd5e86ba502d99ec94d170f80adbd3269f086a89354a77484897fbaa76056ed97d3dbf3268a0bf5ded8f6900ff1b7d8f80050fd1517f2b546a67cdc07f439173108f22a8a9d222383f6c3679acde30f3eb1fdc767f2e06d7d6815ceb1caa0a622001e1f2ac01d9ee8c5bc9ee10dbe500a4df1f6a83b3ae7fda87abab68e8adf6aa1b4c31f3d39d7d2e1f933d863edddb64dd86768e2b1692499c9374661af1e4855fb21b6ad2368ec6374aaf69392849d60ce3501ccb100c5ee2d0741c2baa79319fca70e38"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x108, &(0x7f0000000240)={[{}, {0xd8, 0x4e00, "14e7b3b37a8d2f400436aff2a73d857cf325b59285da31ebbc8c51819077c23d6ff6ecbe69a37e95bac1724962b881e47a054379f5b99ce33512139c61a3c14adefc73032c7d85b9625e88985ab3d5c8edc4bad8746f01c740cad0c838757917e860484a89ffe046464d9b5f1008ead75062d668cbf3d0dedf5ae96e36367b24d8089e0bfa67a842f2bb60a369b71e1c792f5c75ecffa919a3f0c2d70cd0ad61ebc114913d1a4c6e927fa652bddf16e15c40f611623220849441ea95bdf59f94de0ea386447f8b6c2e0507b72cb4e9f2d359a1d478447b9d"}, {0x21, 0x4e00, "093f01aa2a1a30651894daead36b64360e7d8853fa3f6d5107d767a984fbc27d41"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) 10:39:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00016800f7ffffff"], 0x30}}, 0x0) 10:39:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 10:39:16 executing program 3: syz_genetlink_get_family_id$nl80211(0xffffffffffffffff, 0xffffffffffffffff) 10:39:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:16 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x14, &(0x7f0000000240)={[{0x10, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xd3, &(0x7f00000001c0)=""/211, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) socket$kcm(0xa, 0x2, 0x11) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x4, 0x0) perf_event_open(&(0x7f0000002500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xbf9}, 0x12482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x55, &(0x7f0000000240)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x6) 10:39:16 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) sendfile(r0, r0, 0x0, 0x34000) [ 1914.183929][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010802f7ffffff"], 0x30}}, 0x0) 10:39:16 executing program 3: r0 = open(&(0x7f00000006c0)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff00d) [ 1914.270973][T14449] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1914.290323][T14449] device team0 left promiscuous mode [ 1914.295810][T14449] device team_slave_0 left promiscuous mode [ 1914.310452][T14449] device team_slave_1 left promiscuous mode 10:39:16 executing program 0: r0 = socket(0x2, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000003880)=[{{&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10, 0x0, 0x7, {[@generic={0x44, 0x4, "86c1"}]}}}], 0x10}}], 0x1, 0x0) [ 1914.317462][T14449] bridge0: port 3(team0) entered disabled state [ 1914.325302][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.332391][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.344631][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010803f7ffffff"], 0x30}}, 0x0) [ 1914.446478][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1914.467626][T19272] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1914.497763][ T4237] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1914.638028][T31433] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1914.717913][T19272] usb 3-1: Using ep0 maxpacket: 32 [ 1915.007704][T19272] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1915.016797][T19272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.030731][T19272] usb 3-1: Product: syz [ 1915.034898][T19272] usb 3-1: Manufacturer: syz [ 1915.043529][T19272] usb 3-1: SerialNumber: syz [ 1915.054502][T19272] usb 3-1: config 0 descriptor?? [ 1915.057679][ T4237] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1915.068914][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.076936][ T4237] usb 5-1: Product: syz [ 1915.081491][ T4237] usb 5-1: Manufacturer: syz [ 1915.086108][ T4237] usb 5-1: SerialNumber: syz [ 1915.105030][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1915.142083][ T4237] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1915.187774][T31433] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1915.196861][T31433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.205841][T31433] usb 2-1: Product: syz [ 1915.210589][T31433] usb 2-1: Manufacturer: syz [ 1915.215201][T31433] usb 2-1: SerialNumber: syz [ 1915.268446][T31433] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1915.747693][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1915.787816][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1915.807692][ T4237] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1915.827683][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1915.847606][T31433] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1915.867740][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1915.907643][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1915.947640][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1915.991529][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1916.037560][T19272] pwc: recv_control_msg error -71 req 02 val 2000 [ 1916.058152][T14446] UDC core: couldn't find an available UDC or it's busy: -16 [ 1916.065545][T14446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1916.077639][T19272] pwc: recv_control_msg error -71 req 02 val 2100 [ 1916.100000][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 1916.127798][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 1916.147581][T19272] pwc: recv_control_msg error -71 req 04 val 1500 [ 1916.167573][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 1916.187624][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1916.210032][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1916.227644][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1916.241789][ T4237] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1916.247742][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1916.248046][ T4237] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1916.267585][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1916.280078][T30303] usb 2-1: USB disconnect, device number 93 [ 1916.290074][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1916.297295][T19272] pwc: Registered as video71. [ 1916.307495][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 1916.324785][T19272] usb 3-1: USB disconnect, device number 115 [ 1916.443448][T21699] usb 5-1: USB disconnect, device number 93 [ 1916.461624][ T4237] ath9k_htc: Failed to initialize the device [ 1916.467757][T21699] usb 5-1: ath9k_htc: USB layer deinitialized 10:39:18 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "c153b5056bfb641ee32b03309d333538ed030c4178c9001ca1379df35e2c31354c9da01a95d9711b08ad6f9e6dd5e86ba502d99ec94d170f80adbd3269f086a89354a77484897fbaa76056ed97d3dbf3268a0bf5ded8f6900ff1b7d8f80050fd1517f2b546a67cdc07f439173108f22a8a9d222383f6c3679acde30f3eb1fdc767f2e06d7d6815ceb1caa0a622001e1f2ac01d9ee8c5bc9ee10dbe500a4df1f6a83b3ae7fda87abab68e8adf6aa1b4c31f3d39d7d2e1f933d863edddb64dd86768e2b1692499c9374661af1e4855fb21b6ad2368ec6374aaf69392849d60ce3501ccb100c5ee2d0741c2baa79319fca70e38"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x108, &(0x7f0000000240)={[{}, {0xd8, 0x4e00, "14e7b3b37a8d2f400436aff2a73d857cf325b59285da31ebbc8c51819077c23d6ff6ecbe69a37e95bac1724962b881e47a054379f5b99ce33512139c61a3c14adefc73032c7d85b9625e88985ab3d5c8edc4bad8746f01c740cad0c838757917e860484a89ffe046464d9b5f1008ead75062d668cbf3d0dedf5ae96e36367b24d8089e0bfa67a842f2bb60a369b71e1c792f5c75ecffa919a3f0c2d70cd0ad61ebc114913d1a4c6e927fa652bddf16e15c40f611623220849441ea95bdf59f94de0ea386447f8b6c2e0507b72cb4e9f2d359a1d478447b9d"}, {0x21, 0x4e00, "093f01aa2a1a30651894daead36b64360e7d8853fa3f6d5107d767a984fbc27d41"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "c153b5056bfb641ee32b03309d333538ed030c4178c9001ca1379df35e2c31354c9da01a95d9711b08ad6f9e6dd5e86ba502d99ec94d170f80adbd3269f086a89354a77484897fbaa76056ed97d3dbf3268a0bf5ded8f6900ff1b7d8f80050fd1517f2b546a67cdc07f439173108f22a8a9d222383f6c3679acde30f3eb1fdc767f2e06d7d6815ceb1caa0a622001e1f2ac01d9ee8c5bc9ee10dbe500a4df1f6a83b3ae7fda87abab68e8adf6aa1b4c31f3d39d7d2e1f933d863edddb64dd86768e2b1692499c9374661af1e4855fb21b6ad2368ec6374aaf69392849d60ce3501ccb100c5ee2d0741c2baa79319fca70e38"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x108, &(0x7f0000000240)={[{}, {0xd8, 0x4e00, "14e7b3b37a8d2f400436aff2a73d857cf325b59285da31ebbc8c51819077c23d6ff6ecbe69a37e95bac1724962b881e47a054379f5b99ce33512139c61a3c14adefc73032c7d85b9625e88985ab3d5c8edc4bad8746f01c740cad0c838757917e860484a89ffe046464d9b5f1008ead75062d668cbf3d0dedf5ae96e36367b24d8089e0bfa67a842f2bb60a369b71e1c792f5c75ecffa919a3f0c2d70cd0ad61ebc114913d1a4c6e927fa652bddf16e15c40f611623220849441ea95bdf59f94de0ea386447f8b6c2e0507b72cb4e9f2d359a1d478447b9d"}, {0x21, 0x4e00, "093f01aa2a1a30651894daead36b64360e7d8853fa3f6d5107d767a984fbc27d41"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) 10:39:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x20002851, 0x0, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x2c, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) 10:39:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010804f7ffffff"], 0x30}}, 0x0) 10:39:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$chown(0x4, r1, 0x0, 0xffffffffffffffff) 10:39:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1916.811376][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:19 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x14, &(0x7f0000000240)={[{0x10, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x1e, 0x0, 0x0) 10:39:19 executing program 0: r0 = socket(0x2, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) 10:39:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010805f7ffffff"], 0x30}}, 0x0) 10:39:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x4, 0x8, 0x801}, 0x14}}, 0x0) 10:39:19 executing program 3: r0 = socket(0xa, 0x3, 0x7f) r1 = socket(0x2, 0x3, 0x7f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @mcast1, @mcast1, 0x0, 0x0, 0x900f, 0x0, 0x0, 0x0, r2}) [ 1916.981301][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010806f7ffffff"], 0x30}}, 0x0) [ 1917.085306][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1917.097722][T19272] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1917.117730][T31433] usb 2-1: Service connection timeout for: 256 [ 1917.123938][T31433] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1917.134638][T31433] ath9k_htc: Failed to initialize the device [ 1917.142431][T30303] usb 2-1: ath9k_htc: USB layer deinitialized [ 1917.287602][T21699] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1917.337532][T19272] usb 3-1: Using ep0 maxpacket: 32 [ 1917.527610][T30303] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1917.617748][T19272] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1917.626813][T19272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.635252][T19272] usb 3-1: Product: syz [ 1917.639574][T19272] usb 3-1: Manufacturer: syz [ 1917.644178][T19272] usb 3-1: SerialNumber: syz [ 1917.654627][T19272] usb 3-1: config 0 descriptor?? [ 1917.699855][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1917.807700][T21699] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1917.816771][T21699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.825271][T21699] usb 5-1: Product: syz [ 1917.829640][T21699] usb 5-1: Manufacturer: syz [ 1917.834307][T21699] usb 5-1: SerialNumber: syz [ 1917.879362][T21699] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1918.117750][T30303] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1918.127753][T30303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.135782][T30303] usb 2-1: Product: syz [ 1918.140141][T30303] usb 2-1: Manufacturer: syz [ 1918.145490][T30303] usb 2-1: SerialNumber: syz [ 1918.200130][T30303] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1918.357581][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1918.397639][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1918.437591][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1918.447866][T21700] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1918.477570][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1918.517559][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1918.558180][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1918.597595][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1918.640975][T19272] pwc: recv_control_msg error -71 req 02 val 2000 [ 1918.667824][T19272] pwc: recv_control_msg error -71 req 02 val 2100 [ 1918.687637][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 1918.707575][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 1918.727675][T19272] pwc: recv_control_msg error -71 req 04 val 1500 [ 1918.751515][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 1918.777571][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1918.798058][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1918.817552][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1918.837904][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1918.857665][T30303] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1918.861199][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1918.878700][T21700] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1918.884377][T21700] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1918.907893][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1918.915437][T19272] pwc: Registered as video71. [ 1918.922577][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input46 [ 1918.949900][T19272] usb 3-1: USB disconnect, device number 116 [ 1919.062063][T14471] UDC core: couldn't find an available UDC or it's busy: -16 [ 1919.069733][T14471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1919.080369][T12111] usb 5-1: USB disconnect, device number 94 [ 1919.091083][T21700] ath9k_htc: Failed to initialize the device [ 1919.097196][T12111] usb 5-1: ath9k_htc: USB layer deinitialized [ 1919.279507][T14471] UDC core: couldn't find an available UDC or it's busy: -16 [ 1919.287233][T14471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1919.287445][T14488] UDC core: couldn't find an available UDC or it's busy: -16 [ 1919.303887][T14488] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1919.483705][ T4237] usb 2-1: USB disconnect, device number 94 10:39:22 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "c153b5056bfb641ee32b03309d333538ed030c4178c9001ca1379df35e2c31354c9da01a95d9711b08ad6f9e6dd5e86ba502d99ec94d170f80adbd3269f086a89354a77484897fbaa76056ed97d3dbf3268a0bf5ded8f6900ff1b7d8f80050fd1517f2b546a67cdc07f439173108f22a8a9d222383f6c3679acde30f3eb1fdc767f2e06d7d6815ceb1caa0a622001e1f2ac01d9ee8c5bc9ee10dbe500a4df1f6a83b3ae7fda87abab68e8adf6aa1b4c31f3d39d7d2e1f933d863edddb64dd86768e2b1692499c9374661af1e4855fb21b6ad2368ec6374aaf69392849d60ce3501ccb100c5ee2d0741c2baa79319fca70e38"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x108, &(0x7f0000000240)={[{}, {0xd8, 0x4e00, "14e7b3b37a8d2f400436aff2a73d857cf325b59285da31ebbc8c51819077c23d6ff6ecbe69a37e95bac1724962b881e47a054379f5b99ce33512139c61a3c14adefc73032c7d85b9625e88985ab3d5c8edc4bad8746f01c740cad0c838757917e860484a89ffe046464d9b5f1008ead75062d668cbf3d0dedf5ae96e36367b24d8089e0bfa67a842f2bb60a369b71e1c792f5c75ecffa919a3f0c2d70cd0ad61ebc114913d1a4c6e927fa652bddf16e15c40f611623220849441ea95bdf59f94de0ea386447f8b6c2e0507b72cb4e9f2d359a1d478447b9d"}, {0x21, 0x4e00, "093f01aa2a1a30651894daead36b64360e7d8853fa3f6d5107d767a984fbc27d41"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "c153b5056bfb641ee32b03309d333538ed030c4178c9001ca1379df35e2c31354c9da01a95d9711b08ad6f9e6dd5e86ba502d99ec94d170f80adbd3269f086a89354a77484897fbaa76056ed97d3dbf3268a0bf5ded8f6900ff1b7d8f80050fd1517f2b546a67cdc07f439173108f22a8a9d222383f6c3679acde30f3eb1fdc767f2e06d7d6815ceb1caa0a622001e1f2ac01d9ee8c5bc9ee10dbe500a4df1f6a83b3ae7fda87abab68e8adf6aa1b4c31f3d39d7d2e1f933d863edddb64dd86768e2b1692499c9374661af1e4855fb21b6ad2368ec6374aaf69392849d60ce3501ccb100c5ee2d0741c2baa79319fca70e38"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x108, &(0x7f0000000240)={[{}, {0xd8, 0x4e00, "14e7b3b37a8d2f400436aff2a73d857cf325b59285da31ebbc8c51819077c23d6ff6ecbe69a37e95bac1724962b881e47a054379f5b99ce33512139c61a3c14adefc73032c7d85b9625e88985ab3d5c8edc4bad8746f01c740cad0c838757917e860484a89ffe046464d9b5f1008ead75062d668cbf3d0dedf5ae96e36367b24d8089e0bfa67a842f2bb60a369b71e1c792f5c75ecffa919a3f0c2d70cd0ad61ebc114913d1a4c6e927fa652bddf16e15c40f611623220849441ea95bdf59f94de0ea386447f8b6c2e0507b72cb4e9f2d359a1d478447b9d"}, {0x21, 0x4e00, "093f01aa2a1a30651894daead36b64360e7d8853fa3f6d5107d767a984fbc27d41"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) 10:39:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 10:39:22 executing program 3: r0 = socket(0xa, 0x3, 0x7f) getpeername$qrtr(r0, 0x0, 0x0) 10:39:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010807f7ffffff"], 0x30}}, 0x0) 10:39:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:22 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x14, &(0x7f0000000240)={[{0x10, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010808f7ffffff"], 0x30}}, 0x0) 10:39:22 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) 10:39:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002580)=@getpolicy={0x50, 0x15, 0x3, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x50}}, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/42, 0x2a}], 0x1}}], 0x1, 0x0, 0x0) [ 1920.034466][T14500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002580)=@getpolicy={0x50, 0x15, 0x3, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x50}}, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/42, 0x2a}], 0x1}}], 0x1, 0x0, 0x0) 10:39:22 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) [ 1920.116081][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010809f7ffffff"], 0x30}}, 0x0) [ 1920.157563][T30303] usb 2-1: Service connection timeout for: 256 [ 1920.165078][T30303] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1920.192028][T30303] ath9k_htc: Failed to initialize the device [ 1920.210342][ T4237] usb 2-1: ath9k_htc: USB layer deinitialized [ 1920.241418][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1920.287723][T30301] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1920.297854][T12111] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1920.527526][T30301] usb 3-1: Using ep0 maxpacket: 32 [ 1920.587605][ T4237] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1920.807651][T30301] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1920.817015][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.825814][T12111] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1920.835137][T30301] usb 3-1: Product: syz [ 1920.839650][T12111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.848009][T30301] usb 3-1: Manufacturer: syz [ 1920.852709][T30301] usb 3-1: SerialNumber: syz [ 1920.857374][T12111] usb 5-1: Product: syz [ 1920.868462][T30301] usb 3-1: config 0 descriptor?? [ 1920.873583][T12111] usb 5-1: Manufacturer: syz [ 1920.878387][T12111] usb 5-1: SerialNumber: syz [ 1920.910093][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1920.918370][T12111] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1921.107690][ T4237] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1921.116889][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.125156][ T4237] usb 2-1: Product: syz [ 1921.129917][ T4237] usb 2-1: Manufacturer: syz [ 1921.134601][ T4237] usb 2-1: SerialNumber: syz [ 1921.179240][ T4237] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1921.527761][T12111] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1921.577872][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1921.628077][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1921.679247][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1921.718072][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1921.768348][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1921.818886][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1921.847732][ T4237] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1921.867914][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1921.907830][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 1921.936013][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 1921.951876][T12111] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1921.957677][T12111] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1921.966329][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 1921.988383][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1922.007878][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1922.038875][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1922.058495][T14503] UDC core: couldn't find an available UDC or it's busy: -16 [ 1922.065906][T14503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1922.067803][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1922.107830][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1922.128027][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1922.148751][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1922.155364][T19272] usb 5-1: USB disconnect, device number 95 [ 1922.171703][T12111] ath9k_htc: Failed to initialize the device [ 1922.177866][T19272] usb 5-1: ath9k_htc: USB layer deinitialized [ 1922.177913][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1922.217712][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1922.224909][T30301] pwc: Registered as video71. [ 1922.231365][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 1922.244232][T30301] usb 3-1: USB disconnect, device number 117 [ 1922.276036][T14517] UDC core: couldn't find an available UDC or it's busy: -16 [ 1922.287097][T14517] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1922.300988][T14503] UDC core: couldn't find an available UDC or it's busy: -16 [ 1922.309565][T14503] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1922.501731][T30301] usb 2-1: USB disconnect, device number 95 10:39:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/218}}, {{&(0x7f00000001c0)=@generic, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/121}, {&(0x7f00000002c0)=""/109}, {&(0x7f0000000340)=""/182}, {&(0x7f0000000400)=""/111}, {&(0x7f0000000480)=""/22}, {&(0x7f00000004c0)=""/181}, {&(0x7f0000000580)=""/227}, {&(0x7f0000000680)=""/174}, {&(0x7f0000000740)=""/31}], 0x1000025d, &(0x7f0000000840)=""/61}}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/216}, {&(0x7f0000000a00)=""/145}]}}, {{&(0x7f0000000b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000003e80)=[{&(0x7f0000000b80)=""/69}, {&(0x7f0000000c00)=""/4096}, {&(0x7f0000001c00)=""/239}, {&(0x7f0000001d00)=""/4091}, {&(0x7f0000002d00)=""/74}, {&(0x7f0000002d80)=""/7}, {&(0x7f0000002dc0)=""/4096}, {&(0x7f0000003dc0)=""/143}]}}, {{&(0x7f0000003f00)=@in={0x2, 0x0, @dev}, 0x0, &(0x7f00000045c0)=[{&(0x7f0000003f80)=""/125}, {&(0x7f0000004000)=""/205}, {&(0x7f0000004100)=""/108}, {&(0x7f0000004180)=""/94}, {&(0x7f0000004200)=""/47}, {&(0x7f0000004240)=""/241}, {&(0x7f0000004340)=""/23}, {&(0x7f0000004380)=""/235}, {&(0x7f0000004480)=""/225}, {&(0x7f0000004580)=""/60}], 0x0, &(0x7f0000004680)=""/139}}, {{&(0x7f0000004740)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, &(0x7f00000048c0)=[{&(0x7f00000047c0)=""/201}]}}, {{&(0x7f0000004900)=@nfc_llcp, 0x0, &(0x7f0000005e00)=[{&(0x7f0000004980)=""/224}, {&(0x7f0000004a80)=""/108}, {&(0x7f0000004b00)=""/27}, {&(0x7f0000004b40)=""/4}, {&(0x7f0000004b80)=""/4096}, {&(0x7f0000005b80)=""/244}, {&(0x7f0000005c80)=""/240}, {&(0x7f0000005d80)=""/83}]}}], 0x40, 0x0, 0x0) 10:39:25 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCPNGETOBJECT(r1, 0x89a0, &(0x7f00000000c0)=0x6) 10:39:25 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da245f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af2720176d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000000000000"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x89, &(0x7f0000000340)=@generic={0x4, 0x2, 0x81, "8c05cd79", "b1ca0a55102de3f3e6431cb6176f21b16bc6ed057f4ee7de5a5665801a60ec4d0c6f7cbfbfc01cbb4dfe71d779025e0c1d66f59f00b64cf7fcd48bfa2015a3be78dca738323bc20fe732f66260d6d2647b7697b1944edcca7c7d8918772859c054b55fc52925768ac9960c7a649f487c9c0eca283cd1a4f8f64f4dd5ad266bb4c7"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:39:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0001080af7ffffff"], 0x30}}, 0x0) 10:39:25 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x18, &(0x7f0000000240)={[{0x13, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 10:39:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0001080cf7ffffff"], 0x30}}, 0x0) [ 1923.051598][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001300)) 10:39:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0001080ef7ffffff"], 0x30}}, 0x0) [ 1923.117822][ T4237] usb 2-1: Service connection timeout for: 256 [ 1923.125315][ T4237] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1923.136512][ T4237] ath9k_htc: Failed to initialize the device [ 1923.143637][T30301] usb 2-1: ath9k_htc: USB layer deinitialized [ 1923.152309][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, 0x0, 0x0) 10:39:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0001080ff7ffffff"], 0x30}}, 0x0) [ 1923.221991][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1923.284063][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1923.307554][T19272] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1923.327737][T12111] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1923.517874][T30301] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1923.547554][T19272] usb 3-1: Using ep0 maxpacket: 32 [ 1923.827732][T19272] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1923.837337][T19272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.846534][T19272] usb 3-1: Product: syz [ 1923.851140][T19272] usb 3-1: Manufacturer: syz [ 1923.855846][T19272] usb 3-1: SerialNumber: syz 10:39:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/242, &(0x7f0000000100)=0xf2) [ 1923.882539][T19272] usb 3-1: config 0 descriptor?? [ 1923.897717][T12111] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1923.911677][T12111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.921896][T12111] usb 5-1: Product: syz [ 1923.926306][T12111] usb 5-1: Manufacturer: syz [ 1923.929734][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1923.931638][T12111] usb 5-1: SerialNumber: syz [ 1924.007942][T12111] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1924.117898][T30301] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1924.127119][T30301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.135889][T30301] usb 2-1: Product: syz [ 1924.144348][T30301] usb 2-1: Manufacturer: syz [ 1924.149735][T30301] usb 2-1: SerialNumber: syz [ 1924.198938][T30301] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1924.587599][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1924.627592][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1924.669232][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1924.687766][T21143] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1924.707704][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1924.747598][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1924.787858][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1924.827585][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1924.867735][T30301] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1924.870959][T19272] pwc: recv_control_msg error -71 req 02 val 2000 [ 1924.897696][T19272] pwc: recv_control_msg error -71 req 02 val 2100 [ 1924.917643][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 1924.937592][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 1924.957873][T19272] pwc: recv_control_msg error -71 req 04 val 1500 [ 1924.977567][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 1924.999095][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1925.017602][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1925.047568][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1925.067621][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1925.087563][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1925.109443][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1925.111539][T21143] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1925.122145][T21143] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1925.123565][T19272] pwc: Registered as video71. [ 1925.149993][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48 [ 1925.193868][T19272] usb 3-1: USB disconnect, device number 118 [ 1925.292063][T30301] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1925.297785][T30301] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1925.320467][T21700] usb 5-1: USB disconnect, device number 96 [ 1925.340137][T21143] ath9k_htc: Failed to initialize the device [ 1925.346225][T21700] usb 5-1: ath9k_htc: USB layer deinitialized [ 1925.506540][T14533] UDC core: couldn't find an available UDC or it's busy: -16 [ 1925.517379][T14533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1925.527650][T14533] UDC core: couldn't find an available UDC or it's busy: -16 [ 1925.535042][T14533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1925.551254][T21699] usb 2-1: USB disconnect, device number 96 [ 1925.561437][T30301] ath9k_htc: Failed to initialize the device [ 1925.567690][T21699] usb 2-1: ath9k_htc: USB layer deinitialized 10:39:28 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da245f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af2720176d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000000000000"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x89, &(0x7f0000000340)=@generic={0x4, 0x2, 0x81, "8c05cd79", "b1ca0a55102de3f3e6431cb6176f21b16bc6ed057f4ee7de5a5665801a60ec4d0c6f7cbfbfc01cbb4dfe71d779025e0c1d66f59f00b64cf7fcd48bfa2015a3be78dca738323bc20fe732f66260d6d2647b7697b1944edcca7c7d8918772859c054b55fc52925768ac9960c7a649f487c9c0eca283cd1a4f8f64f4dd5ad266bb4c7"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:39:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x1c, 0x0, 0x0) 10:39:28 executing program 0: r0 = socket(0x2, 0x3, 0x7f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) 10:39:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010810f7ffffff"], 0x30}}, 0x0) 10:39:28 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:28 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x18, &(0x7f0000000240)={[{0x13, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xc, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10:39:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x3}, 0x14}}, 0x0) [ 1926.111151][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, 0x0, 0x0) 10:39:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010848f7ffffff"], 0x30}}, 0x0) 10:39:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x20800}, 0x0) 10:39:28 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$netlink(r0, &(0x7f0000000000), 0xc) [ 1926.241398][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1926.367650][T21143] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1926.375522][T30301] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1926.387548][T12111] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1926.617544][T30301] usb 3-1: Using ep0 maxpacket: 32 [ 1926.897963][T21143] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.907333][T21143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.916827][T30301] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1926.926059][T12111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.935486][T12111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.943657][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.951762][T12111] usb 2-1: Product: syz [ 1926.955972][T30301] usb 3-1: Product: syz [ 1926.960374][T21143] usb 5-1: Product: syz [ 1926.964636][T12111] usb 2-1: Manufacturer: syz [ 1926.969381][T21143] usb 5-1: Manufacturer: syz [ 1926.974045][T30301] usb 3-1: Manufacturer: syz [ 1926.978793][T12111] usb 2-1: SerialNumber: syz [ 1926.983458][T21143] usb 5-1: SerialNumber: syz [ 1926.988227][T30301] usb 3-1: SerialNumber: syz [ 1927.004194][T30301] usb 3-1: config 0 descriptor?? [ 1927.058288][T12111] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1927.068168][T21143] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1927.079694][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1927.657667][T12111] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1927.666753][ T4237] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1927.717608][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1927.757970][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1927.797585][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1927.837624][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1927.862024][T14575] UDC core: couldn't find an available UDC or it's busy: -16 [ 1927.872177][T12111] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1927.878278][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1927.884878][T12111] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1927.887572][T14575] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1927.901287][T14560] UDC core: couldn't find an available UDC or it's busy: -16 [ 1927.909156][T14560] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1927.917852][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1927.957664][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1927.997745][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 1928.017664][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 1928.037642][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 1928.057651][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1928.082038][ T4237] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1928.088085][ T4237] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1928.096012][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1928.098127][T21699] usb 2-1: USB disconnect, device number 97 [ 1928.111447][T12111] ath9k_htc: Failed to initialize the device [ 1928.118148][T21699] usb 2-1: ath9k_htc: USB layer deinitialized [ 1928.118871][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1928.147591][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1928.167625][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1928.187568][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1928.207603][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1928.228147][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1928.247921][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1928.255106][T30301] pwc: Registered as video71. [ 1928.269376][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49 [ 1928.284316][T31433] usb 5-1: USB disconnect, device number 97 [ 1928.301916][ T4237] ath9k_htc: Failed to initialize the device [ 1928.308501][T31433] usb 5-1: ath9k_htc: USB layer deinitialized [ 1928.338959][T30301] usb 3-1: USB disconnect, device number 119 10:39:30 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da245f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af2720176d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000000000000"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x89, &(0x7f0000000340)=@generic={0x4, 0x2, 0x81, "8c05cd79", "b1ca0a55102de3f3e6431cb6176f21b16bc6ed057f4ee7de5a5665801a60ec4d0c6f7cbfbfc01cbb4dfe71d779025e0c1d66f59f00b64cf7fcd48bfa2015a3be78dca738323bc20fe732f66260d6d2647b7697b1944edcca7c7d8918772859c054b55fc52925768ac9960c7a649f487c9c0eca283cd1a4f8f64f4dd5ad266bb4c7"}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:39:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@func]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:39:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0001084cf7ffffff"], 0x30}}, 0x0) 10:39:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x21, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 10:39:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1928.648055][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1928.648169][T14582] UDC core: couldn't find an available UDC or it's busy: -16 [ 1928.674359][T14582] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:39:30 executing program 3: r0 = socket(0x2, 0x3, 0x7f) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000003c0)={{0x2, 0x0, @broadcast}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast1}}) 10:39:30 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000003d40), 0xffffffffffffffff) 10:39:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010860f7ffffff"], 0x30}}, 0x0) 10:39:30 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x18, &(0x7f0000000240)={[{0x13, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:31 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x6, 0x17, &(0x7f00000000c0)={0xffffffff, {{0x2, 0x0, @dev}}}, 0x12) [ 1928.819009][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:31 executing program 3: r0 = socket(0x2, 0x3, 0x7f) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000003c0)={{0x2, 0x0, @broadcast}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast1}}) 10:39:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010868f7ffffff"], 0x30}}, 0x0) [ 1928.907594][T31433] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1928.915426][T21699] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1928.945538][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1929.127718][T19272] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1929.177552][T31433] usb 3-1: Using ep0 maxpacket: 32 [ 1929.497817][T31433] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1929.507086][T21699] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1929.516248][T31433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.524819][T21699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.533095][T31433] usb 3-1: Product: syz [ 1929.537271][T31433] usb 3-1: Manufacturer: syz [ 1929.542233][T21699] usb 2-1: Product: syz [ 1929.546416][T21699] usb 2-1: Manufacturer: syz [ 1929.551278][T31433] usb 3-1: SerialNumber: syz [ 1929.556469][T21699] usb 2-1: SerialNumber: syz [ 1929.573101][T31433] usb 3-1: config 0 descriptor?? [ 1929.628482][T21699] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1929.640661][T31433] pwc: Samsung MPC-C10 USB webcam detected. [ 1929.697792][T19272] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1929.707209][T19272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.715689][T19272] usb 5-1: Product: syz [ 1929.720118][T19272] usb 5-1: Manufacturer: syz [ 1929.724885][T19272] usb 5-1: SerialNumber: syz [ 1929.768754][T19272] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1930.267706][T31433] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1930.317754][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1930.326884][T31433] pwc: recv_control_msg error -32 req 02 val 2700 [ 1930.368000][T31433] pwc: recv_control_msg error -32 req 04 val 1700 [ 1930.410085][T31433] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1930.437701][T19272] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1930.460020][T31433] pwc: recv_control_msg error -32 req 04 val 1000 [ 1930.511403][T31433] pwc: recv_control_msg error -32 req 04 val 1300 [ 1930.518886][T14584] UDC core: couldn't find an available UDC or it's busy: -16 [ 1930.526279][T14584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1930.569643][T31433] pwc: recv_control_msg error -32 req 04 val 1400 [ 1930.617667][T31433] pwc: recv_control_msg error -71 req 02 val 2000 [ 1930.639478][T31433] pwc: recv_control_msg error -71 req 02 val 2100 [ 1930.667615][T31433] pwc: recv_control_msg error -71 req 02 val 2200 [ 1930.687591][T31433] pwc: recv_control_msg error -71 req 06 val 0600 [ 1930.707611][T31433] pwc: recv_control_msg error -71 req 04 val 1500 [ 1930.727614][T31433] pwc: recv_control_msg error -71 req 02 val 2500 [ 1930.742035][T30301] usb 2-1: USB disconnect, device number 98 [ 1930.761882][T31433] pwc: recv_control_msg error -71 req 02 val 2400 [ 1930.789870][T31433] pwc: recv_control_msg error -71 req 02 val 2600 [ 1930.807604][T31433] pwc: recv_control_msg error -71 req 02 val 2900 [ 1930.827602][T31433] pwc: recv_control_msg error -71 req 02 val 2800 [ 1930.847638][T31433] pwc: recv_control_msg error -71 req 04 val 1100 [ 1930.860649][T19272] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1930.866317][T19272] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1930.879257][T31433] pwc: recv_control_msg error -71 req 04 val 1200 [ 1930.892305][T31433] pwc: Registered as video71. [ 1930.908276][T31433] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 1930.937967][T31433] usb 3-1: USB disconnect, device number 120 [ 1931.063444][ T4237] usb 5-1: USB disconnect, device number 98 [ 1931.071100][T19272] ath9k_htc: Failed to initialize the device [ 1931.077203][ T4237] usb 5-1: ath9k_htc: USB layer deinitialized 10:39:33 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "c56be2f7", {0x1, 0x1, 0x6, 0x0, 0x4}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 10:39:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_FLAGS={0x8}]}, 0x34}}, 0x0) 10:39:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0001086cf7ffffff"], 0x30}}, 0x0) 10:39:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000e1ffffff455b080000000000950000000000000018380000030000000000000001000000183300000500000000001b00000000008510"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xcb, &(0x7f00000000c0)=""/203, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1931.260444][T14608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010874f7ffffff"], 0x30}}, 0x0) 10:39:33 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={'team_slave_1\x00', @ifru_ivalue}) [ 1931.368125][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1931.378542][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1931.389342][T21699] ath9k_htc: Failed to initialize the device [ 1931.402297][T30301] usb 2-1: ath9k_htc: USB layer deinitialized 10:39:33 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x18, &(0x7f0000000240)={[{0x14, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e4"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:33 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x4018920a, 0x0) 10:39:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="0001087af7ffffff"], 0x30}}, 0x0) 10:39:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000200)=@newtaction={0x14}, 0x14}}, 0x0) [ 1931.537535][T21143] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1931.593935][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1931.777646][T21143] usb 3-1: Using ep0 maxpacket: 32 [ 1931.782874][T30301] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1931.927589][T31433] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1932.057643][T21143] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1932.066723][T21143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.075219][T21143] usb 3-1: Product: syz [ 1932.079509][T21143] usb 3-1: Manufacturer: syz [ 1932.084115][T21143] usb 3-1: SerialNumber: syz [ 1932.091696][T21143] usb 3-1: config 0 descriptor?? [ 1932.129137][T21143] pwc: Samsung MPC-C10 USB webcam detected. [ 1932.307717][T30301] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1932.316950][T30301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.325339][T30301] usb 2-1: Product: syz [ 1932.332307][T30301] usb 2-1: Manufacturer: syz [ 1932.336999][T30301] usb 2-1: SerialNumber: syz [ 1932.390983][T30301] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1932.507664][T31433] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1932.516809][T31433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.525428][T31433] usb 5-1: Product: syz [ 1932.529849][T31433] usb 5-1: Manufacturer: syz [ 1932.534495][T31433] usb 5-1: SerialNumber: syz [ 1932.589143][T31433] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1932.787622][T21143] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1932.827611][T21143] pwc: recv_control_msg error -32 req 02 val 2700 [ 1932.867726][T21143] pwc: recv_control_msg error -32 req 04 val 1700 [ 1932.908326][T21143] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1932.947561][T21143] pwc: recv_control_msg error -32 req 04 val 1000 [ 1932.967976][T30301] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1932.987620][T21143] pwc: recv_control_msg error -32 req 04 val 1300 [ 1933.027608][T21143] pwc: recv_control_msg error -32 req 04 val 1400 [ 1933.067657][T21143] pwc: recv_control_msg error -71 req 02 val 2000 [ 1933.087636][T21143] pwc: recv_control_msg error -71 req 02 val 2100 [ 1933.107694][T21143] pwc: recv_control_msg error -71 req 02 val 2200 [ 1933.128223][T21143] pwc: recv_control_msg error -71 req 06 val 0600 [ 1933.148360][T21143] pwc: recv_control_msg error -71 req 04 val 1500 [ 1933.167651][T21143] pwc: recv_control_msg error -71 req 02 val 2500 [ 1933.187889][T21143] pwc: recv_control_msg error -71 req 02 val 2400 [ 1933.207633][T21143] pwc: recv_control_msg error -71 req 02 val 2600 [ 1933.228141][T21143] pwc: recv_control_msg error -71 req 02 val 2900 [ 1933.247798][T21143] pwc: recv_control_msg error -71 req 02 val 2800 [ 1933.267615][T21143] pwc: recv_control_msg error -71 req 04 val 1100 [ 1933.277653][T21699] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1933.287654][T21143] pwc: recv_control_msg error -71 req 04 val 1200 [ 1933.295082][T21143] pwc: Registered as video71. [ 1933.305552][T21143] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51 [ 1933.325701][T21143] usb 3-1: USB disconnect, device number 121 [ 1933.590075][T30301] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1933.595764][T30301] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1933.691673][T21699] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1933.698197][T21699] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1933.794797][T21590] usb 2-1: USB disconnect, device number 99 [ 1933.811464][T30301] ath9k_htc: Failed to initialize the device [ 1933.817781][T21590] usb 2-1: ath9k_htc: USB layer deinitialized [ 1933.892831][T21143] usb 5-1: USB disconnect, device number 99 [ 1933.911325][T21699] ath9k_htc: Failed to initialize the device [ 1933.918960][T21143] usb 5-1: ath9k_htc: USB layer deinitialized 10:39:36 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "c56be2f7", {0x1, 0x1, 0x6, 0x0, 0x4}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "c56be2f7", {0x1, 0x1, 0x6, 0x0, 0x4}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) 10:39:36 executing program 0: select(0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000180)={0x77359400}) 10:39:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f1ffffff"], 0x30}}, 0x0) 10:39:36 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x40000080, 0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10:39:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000005c0)={'sit0\x00', 0x0}) [ 1934.327220][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ff8024"], 0x30}}, 0x0) 10:39:36 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x18, &(0x7f0000000240)={[{0x14, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e4"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:36 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000004c00), 0xffffffffffffffff) 10:39:36 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x40047438, 0x0) 10:39:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0xa}}, 0x0) [ 1934.478747][T14675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:36 executing program 0: socket(0x10, 0x0, 0x8001) [ 1934.597608][T30301] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1934.647610][T31433] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1934.777683][T14603] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1934.847645][T30301] usb 3-1: Using ep0 maxpacket: 32 [ 1935.129548][T30301] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1935.147091][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.155284][T30301] usb 3-1: Product: syz [ 1935.167945][T30301] usb 3-1: Manufacturer: syz [ 1935.172581][T30301] usb 3-1: SerialNumber: syz [ 1935.196840][T30301] usb 3-1: config 0 descriptor?? [ 1935.227765][T31433] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1935.239020][T31433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.239948][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1935.253411][T31433] usb 2-1: Product: syz [ 1935.258276][T31433] usb 2-1: Manufacturer: syz [ 1935.263108][T31433] usb 2-1: SerialNumber: syz [ 1935.324006][T31433] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1935.387738][T14603] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1935.401478][T14603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.416167][T14603] usb 5-1: Product: syz [ 1935.423545][T14603] usb 5-1: Manufacturer: syz [ 1935.434342][T14603] usb 5-1: SerialNumber: syz [ 1935.479006][T14603] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1935.897564][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1935.937600][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1935.965647][T31433] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1935.977573][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1936.017623][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1936.057563][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1936.097634][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1936.107920][T21590] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1936.137625][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1936.177585][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 1936.197575][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 1936.217599][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 1936.237670][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1936.257580][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1936.297587][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1936.324851][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1936.347725][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1936.367591][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1936.387589][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1936.407572][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1936.428425][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1936.444557][T30301] pwc: Registered as video71. [ 1936.459917][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 1936.486651][T30301] usb 3-1: USB disconnect, device number 122 [ 1936.562066][T21590] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1936.568249][T21590] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1936.581443][T31433] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1936.587130][T31433] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1936.773376][T30301] usb 5-1: USB disconnect, device number 100 [ 1936.782209][T14640] UDC core: couldn't find an available UDC or it's busy: -16 [ 1936.793765][T21590] ath9k_htc: Failed to initialize the device [ 1936.800148][T14640] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1936.800937][T30301] usb 5-1: ath9k_htc: USB layer deinitialized [ 1937.001177][T21143] usb 2-1: USB disconnect, device number 100 [ 1937.030351][T31433] ath9k_htc: Failed to initialize the device [ 1937.036951][T21143] usb 2-1: ath9k_htc: USB layer deinitialized 10:39:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0xf}}, 0x0) 10:39:39 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "c56be2f7", {0x1, 0x1, 0x6, 0x0, 0x4}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:39 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xfffff047}, 0x8) 10:39:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000240)) 10:39:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:39 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x18, &(0x7f0000000240)={[{0x14, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e4"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000001040)=@framed, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000010c0), 0x8, 0x10, 0x0}, 0x78) 10:39:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x10}}, 0x0) 10:39:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x281}) 10:39:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x23}}, 0x0) 10:39:39 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='('], 0x28}}, 0x0) 10:39:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x2b}}, 0x0) 10:39:39 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) [ 1937.827520][T21699] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1937.835962][T31433] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1937.857828][T21590] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1938.078058][T21699] usb 3-1: Using ep0 maxpacket: 32 [ 1938.357661][T31433] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1938.366893][T21699] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1938.376417][T31433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.384844][T21699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.393227][T21590] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1938.402458][T31433] usb 5-1: Product: syz [ 1938.406634][T31433] usb 5-1: Manufacturer: syz [ 1938.411307][T21699] usb 3-1: Product: syz [ 1938.415483][T21699] usb 3-1: Manufacturer: syz [ 1938.420189][T21590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.428302][T31433] usb 5-1: SerialNumber: syz [ 1938.433719][T21699] usb 3-1: SerialNumber: syz [ 1938.438438][T21590] usb 2-1: Product: syz [ 1938.442604][T21590] usb 2-1: Manufacturer: syz [ 1938.447184][T21590] usb 2-1: SerialNumber: syz [ 1938.462532][T21699] usb 3-1: config 0 descriptor?? [ 1938.498177][T31433] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1938.511275][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 1938.518184][T21590] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1939.067648][T21700] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1939.087657][T31433] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1939.167699][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1939.207687][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 1939.247744][T21699] pwc: recv_control_msg error -32 req 04 val 1700 [ 1939.288025][T21699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1939.310142][T31433] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1939.315860][T31433] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1939.327964][T21699] pwc: recv_control_msg error -32 req 04 val 1000 [ 1939.367822][T21699] pwc: recv_control_msg error -32 req 04 val 1300 [ 1939.408009][T21699] pwc: recv_control_msg error -32 req 04 val 1400 [ 1939.447779][T21699] pwc: recv_control_msg error -71 req 02 val 2000 [ 1939.467704][T21699] pwc: recv_control_msg error -71 req 02 val 2100 [ 1939.490152][T21700] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1939.496161][T21699] pwc: recv_control_msg error -71 req 02 val 2200 [ 1939.503228][T21700] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1939.527751][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 1939.536772][T21143] usb 2-1: USB disconnect, device number 101 [ 1939.549919][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 1939.556785][T31433] ath9k_htc: Failed to initialize the device [ 1939.563364][T21143] usb 2-1: ath9k_htc: USB layer deinitialized [ 1939.567779][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 1939.587647][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 1939.607872][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 1939.627681][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 1939.647638][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 1939.667688][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 1939.689529][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 1939.704292][T21590] usb 5-1: USB disconnect, device number 101 [ 1939.712927][T21700] ath9k_htc: Failed to initialize the device [ 1939.719921][T21699] pwc: Registered as video71. [ 1939.725629][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input53 [ 1939.736826][T21590] usb 5-1: ath9k_htc: USB layer deinitialized [ 1939.756387][T21699] usb 3-1: USB disconnect, device number 123 10:39:42 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xbc, &(0x7f0000000240)=ANY=[@ANYBLOB="9500004e1255a461fa40993610b326376ff764ab8361b7445cb10b7516e3271df355bb29ea2733daab6edf39456cbdcedecacc00e0ed16993dd177cbd92b4c241ee5ca2bcf89905819216efd734597d576488eb7a03f9729c812c1b385d95b420d69664c435911f1fc3fc44875bf0fbd32d2c0b4b87df5de6601577d26a8f3e1d6941ff80ef1e47c3e8c2902c8a073cb75a5830000001d00004e1cbab1b36d068b9a1b71de33c63a0700000000000000c5047d0a22de"]) 10:39:42 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0xe344]}, 0x8}) 10:39:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x2d}}, 0x0) 10:39:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 10:39:42 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c, &(0x7f0000000240)={[{0x15, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e48a"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x68}}, 0x0) 10:39:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x3, 0x101, 0x21, @private0, @local, 0x80, 0x8000, 0x7, 0x9}}) 10:39:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000140)=0x10) 10:39:42 executing program 3: sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x6004c050) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x24, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}, 0x0, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0) socket(0xa, 0x3, 0x102) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=r2], 0x2c}}, 0x8008000) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVid:De', 0x0) 10:39:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@cgroup=r0, r1, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r0, 0xffffffffffffffff, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd5e) [ 1940.244252][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0xc0}}, 0x0) [ 1940.367714][T30301] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1940.377793][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1940.487522][T21699] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1940.570133][T21143] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1940.727499][T21699] usb 3-1: Using ep0 maxpacket: 32 [ 1940.927771][T30301] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1940.937245][T30301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.946080][T30301] usb 2-1: Product: syz [ 1940.950896][T30301] usb 2-1: Manufacturer: syz [ 1940.955504][T30301] usb 2-1: SerialNumber: syz [ 1941.007630][T21699] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1941.010127][T30301] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1941.016710][T21699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.016741][T21699] usb 3-1: Product: syz [ 1941.016763][T21699] usb 3-1: Manufacturer: syz [ 1941.045754][T21699] usb 3-1: SerialNumber: syz [ 1941.057892][T21699] usb 3-1: config 0 descriptor?? [ 1941.099873][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 1941.118668][T21143] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1941.127921][T21143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.135932][T21143] usb 5-1: Product: syz [ 1941.141111][T21143] usb 5-1: Manufacturer: syz [ 1941.145727][T21143] usb 5-1: SerialNumber: syz [ 1941.201940][T21143] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1941.647648][T30301] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1941.757994][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1941.797529][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 1941.837616][T21699] pwc: recv_control_msg error -32 req 04 val 1700 [ 1941.837967][T21143] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1941.877699][T21699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1941.917648][T21699] pwc: recv_control_msg error -32 req 04 val 1000 [ 1941.957551][T21699] pwc: recv_control_msg error -32 req 04 val 1300 [ 1942.007638][T21699] pwc: recv_control_msg error -32 req 04 val 1400 [ 1942.047629][T21699] pwc: recv_control_msg error -71 req 02 val 2000 [ 1942.067553][T21699] pwc: recv_control_msg error -71 req 02 val 2100 [ 1942.077476][T30301] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1942.083154][T30301] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1942.087588][T21699] pwc: recv_control_msg error -71 req 02 val 2200 [ 1942.117565][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 1942.137716][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 1942.157529][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 1942.177547][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 1942.197555][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 1942.217661][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 1942.237968][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 1942.260798][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 1942.265997][ T4237] usb 5-1: USB disconnect, device number 102 [ 1942.287582][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 1942.295230][T21699] pwc: Registered as video71. [ 1942.301101][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 1942.330248][T21699] usb 3-1: USB disconnect, device number 124 [ 1942.496082][T31433] usb 2-1: USB disconnect, device number 102 [ 1942.509954][T30301] ath9k_htc: Failed to initialize the device [ 1942.516057][T31433] usb 2-1: ath9k_htc: USB layer deinitialized 10:39:45 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xbc, &(0x7f0000000240)=ANY=[@ANYBLOB="9500004e1255a461fa40993610b326376ff764ab8361b7445cb10b7516e3271df355bb29ea2733daab6edf39456cbdcedecacc00e0ed16993dd177cbd92b4c241ee5ca2bcf89905819216efd734597d576488eb7a03f9729c812c1b385d95b420d69664c435911f1fc3fc44875bf0fbd32d2c0b4b87df5de6601577d26a8f3e1d6941ff80ef1e47c3e8c2902c8a073cb75a5830000001d00004e1cbab1b36d068b9a1b71de33c63a0700000000000000c5047d0a22de"]) 10:39:45 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 10:39:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0xec0}}, 0x0) 10:39:45 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x100) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000090581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)=ANY=[], 0x0) 10:39:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:45 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c, &(0x7f0000000240)={[{0x15, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e48a"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:45 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, 0x0, 0x12) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x9, 0xff, 0x7f, 0x4, 0x0, 0x1f, 0x10040, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xfffffffffffffffc, 0xffffffff}, 0x1, 0x81, 0x10001, 0x0, 0x1, 0x8, 0x4e, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000027, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffed8, 0x1d4}, 0x28) 10:39:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x33fe0}}, 0x0) [ 1943.051914][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:45 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x1, 0x3, 0x0, 0x0, 0x4, 0x1440, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x4}, 0x12020, 0x7fffffff, 0x0, 0x8, 0x8f, 0xc1, 0x100, 0x0, 0xfffffffc, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303, 0x37}, "4e9e39cbfff55200", "00fa9d88e19c1700", "c10ad498", "15c1f103964b1e7e"}, 0x28) sendfile(r1, r0, 0x0, 0x8000) [ 1943.119042][T21143] usb 5-1: Service connection timeout for: 256 [ 1943.125246][T21143] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1943.135813][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1943.156326][T21143] ath9k_htc: Failed to initialize the device 10:39:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x20000930}}, 0x0) [ 1943.177763][ T4237] usb 5-1: ath9k_htc: USB layer deinitialized 10:39:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x7ffff000}}, 0x0) 10:39:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0xfffffdef}}, 0x0) [ 1943.317460][T21699] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 1943.328037][T31433] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1943.397543][T21700] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1943.547654][ T4237] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1943.577490][T31433] usb 3-1: Using ep0 maxpacket: 32 [ 1943.718061][T21699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.728446][T21699] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1943.737472][T21699] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1943.747304][T21699] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1943.756751][T21699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.821739][T21699] hub 4-1:1.0: bad descriptor, ignoring hub [ 1943.827919][T21699] hub: probe of 4-1:1.0 failed with error -5 [ 1943.834692][T21699] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1943.897747][T31433] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1943.907041][T31433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.915491][T31433] usb 3-1: Product: syz [ 1943.919892][T31433] usb 3-1: Manufacturer: syz [ 1943.924499][T31433] usb 3-1: SerialNumber: syz [ 1943.938234][T31433] usb 3-1: config 0 descriptor?? [ 1943.979977][T31433] pwc: Samsung MPC-C10 USB webcam detected. [ 1943.997706][T21700] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1944.007571][T21700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.015584][T21700] usb 2-1: Product: syz [ 1944.024154][T21700] usb 2-1: Manufacturer: syz [ 1944.031884][T21700] usb 2-1: SerialNumber: syz [ 1944.078436][T21700] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1944.079251][ T4237] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1944.096470][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.105138][ T4237] usb 5-1: Product: syz [ 1944.110470][ T4237] usb 5-1: Manufacturer: syz [ 1944.115362][ T4237] usb 5-1: SerialNumber: syz [ 1944.137730][T30301] usb 4-1: USB disconnect, device number 59 [ 1944.158497][ T4237] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1944.487934][ T4237] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1944.627638][T31433] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1944.667610][T31433] pwc: recv_control_msg error -32 req 02 val 2700 [ 1944.707758][T31433] pwc: recv_control_msg error -32 req 04 val 1700 [ 1944.727653][T30301] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1944.728191][T21700] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1944.736746][ T4237] usb 4-1: Using ep0 maxpacket: 8 [ 1944.758621][T31433] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1944.817658][T31433] pwc: recv_control_msg error -32 req 04 val 1000 [ 1944.857625][T31433] pwc: recv_control_msg error -32 req 04 val 1300 [ 1944.867717][ T4237] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.878102][ T4237] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1944.887079][ T4237] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1944.897071][ T4237] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1944.906225][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.907713][T31433] pwc: recv_control_msg error -32 req 04 val 1400 [ 1944.930027][T19272] usb 2-1: USB disconnect, device number 103 [ 1944.958962][ T4237] hub 4-1:1.0: bad descriptor, ignoring hub [ 1944.971861][ T4237] hub: probe of 4-1:1.0 failed with error -5 [ 1944.977575][T31433] pwc: recv_control_msg error -71 req 02 val 2000 [ 1944.978593][ T4237] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1944.999257][T31433] pwc: recv_control_msg error -71 req 02 val 2100 [ 1945.027620][T31433] pwc: recv_control_msg error -71 req 02 val 2200 [ 1945.048934][T31433] pwc: recv_control_msg error -71 req 06 val 0600 [ 1945.067575][T31433] pwc: recv_control_msg error -71 req 04 val 1500 [ 1945.087755][T31433] pwc: recv_control_msg error -71 req 02 val 2500 [ 1945.119301][T31433] pwc: recv_control_msg error -71 req 02 val 2400 [ 1945.137529][T31433] pwc: recv_control_msg error -71 req 02 val 2600 [ 1945.157799][T31433] pwc: recv_control_msg error -71 req 02 val 2900 [ 1945.166711][T21590] usb 5-1: USB disconnect, device number 103 [ 1945.187578][T31433] pwc: recv_control_msg error -71 req 02 val 2800 [ 1945.207651][T31433] pwc: recv_control_msg error -71 req 04 val 1100 [ 1945.228738][T31433] pwc: recv_control_msg error -71 req 04 val 1200 [ 1945.237321][T31433] pwc: Registered as video71. [ 1945.244097][T31433] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input55 [ 1945.276238][T31433] usb 3-1: USB disconnect, device number 125 [ 1945.277848][ T4237] usb 4-1: USB disconnect, device number 60 10:39:47 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xbc, &(0x7f0000000240)=ANY=[@ANYBLOB="9500004e1255a461fa40993610b326376ff764ab8361b7445cb10b7516e3271df355bb29ea2733daab6edf39456cbdcedecacc00e0ed16993dd177cbd92b4c241ee5ca2bcf89905819216efd734597d576488eb7a03f9729c812c1b385d95b420d69664c435911f1fc3fc44875bf0fbd32d2c0b4b87df5de6601577d26a8f3e1d6941ff80ef1e47c3e8c2902c8a073cb75a5830000001d00004e1cbab1b36d068b9a1b71de33c63a0700000000000000c5047d0a22de"]) 10:39:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x2}, 0x0) 10:39:47 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x81, 0x1, 0x3, 0x0, 0x0, 0x4, 0x1440, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x4}, 0x12020, 0x7fffffff, 0x0, 0x8, 0x8f, 0xc1, 0x100, 0x0, 0xfffffffc, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303, 0x37}, "4e9e39cbfff55200", "00fa9d88e19c1700", "c10ad498", "15c1f103964b1e7e"}, 0x28) sendfile(r1, r0, 0x0, 0x8000) [ 1945.464550][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:47 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c, &(0x7f0000000240)={[{0x15, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e48a"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x7}, 0x0) 10:39:47 executing program 0: syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e000102030109022400010000000009040000022512e933090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/18, 0x12) syz_usb_disconnect(0xffffffffffffffff) 10:39:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1945.757567][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1945.768758][T21700] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1945.778463][T21700] ath9k_htc: Failed to initialize the device [ 1945.795360][T19272] usb 2-1: ath9k_htc: USB layer deinitialized 10:39:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x8}, 0x0) 10:39:48 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) [ 1945.916358][T14878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x25}, 0x0) [ 1945.997671][T30301] usb 5-1: Service connection timeout for: 256 [ 1945.997855][T31433] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1946.007362][T30301] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1946.023771][ T4237] usb 1-1: new low-speed USB device number 104 using dummy_hcd 10:39:48 executing program 3: syz_emit_ethernet(0x48, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) [ 1946.064104][T30301] ath9k_htc: Failed to initialize the device [ 1946.067283][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1946.085551][T21590] usb 5-1: ath9k_htc: USB layer deinitialized [ 1946.207572][T19272] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1946.297543][T31433] usb 3-1: Using ep0 maxpacket: 32 [ 1946.397883][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1946.408977][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1946.497601][T21590] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1946.611573][T31433] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1946.620711][T31433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.629801][T31433] usb 3-1: Product: syz [ 1946.633994][T31433] usb 3-1: Manufacturer: syz [ 1946.639109][T31433] usb 3-1: SerialNumber: syz [ 1946.654854][T31433] usb 3-1: config 0 descriptor?? [ 1946.657818][ T4237] usb 1-1: string descriptor 0 read error: -22 [ 1946.667133][ T4237] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1946.681630][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.705044][ T4237] usb 1-1: config 0 descriptor?? [ 1946.705624][T31433] pwc: Samsung MPC-C10 USB webcam detected. [ 1946.753135][ T4237] adutux 1-1:0.0: ADU100 now attached to /dev/usb/adutux0 [ 1946.798590][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1946.812063][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.820606][T19272] usb 2-1: Product: syz [ 1946.824781][T19272] usb 2-1: Manufacturer: syz [ 1946.829986][T19272] usb 2-1: SerialNumber: syz [ 1946.878811][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1947.107713][T21590] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1947.117576][T21590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.125742][T21590] usb 5-1: Product: syz [ 1947.131419][T21590] usb 5-1: Manufacturer: syz [ 1947.136321][T21590] usb 5-1: SerialNumber: syz [ 1947.214021][T21590] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1947.347663][T31433] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1947.401041][T31433] pwc: recv_control_msg error -32 req 02 val 2700 [ 1947.450018][T31433] pwc: recv_control_msg error -32 req 04 val 1700 [ 1947.510296][T31433] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1947.559965][T31433] pwc: recv_control_msg error -32 req 04 val 1000 [ 1947.587721][T19272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1947.608457][T31433] pwc: recv_control_msg error -32 req 04 val 1300 [ 1947.657756][T31433] pwc: recv_control_msg error -32 req 04 val 1400 [ 1947.697718][T31433] pwc: recv_control_msg error -71 req 02 val 2000 [ 1947.718124][T31433] pwc: recv_control_msg error -71 req 02 val 2100 [ 1947.737774][T31433] pwc: recv_control_msg error -71 req 02 val 2200 [ 1947.757913][T31433] pwc: recv_control_msg error -71 req 06 val 0600 [ 1947.787598][T31433] pwc: recv_control_msg error -71 req 04 val 1500 [ 1947.798366][T30301] usb 2-1: USB disconnect, device number 104 [ 1947.815428][T31433] pwc: recv_control_msg error -71 req 02 val 2500 [ 1947.839541][T31433] pwc: recv_control_msg error -71 req 02 val 2400 [ 1947.857558][T31433] pwc: recv_control_msg error -71 req 02 val 2600 [ 1947.877549][T31433] pwc: recv_control_msg error -71 req 02 val 2900 [ 1947.887877][T21590] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1947.907595][T31433] pwc: recv_control_msg error -71 req 02 val 2800 [ 1947.927625][T31433] pwc: recv_control_msg error -71 req 04 val 1100 [ 1947.949231][T31433] pwc: recv_control_msg error -71 req 04 val 1200 [ 1947.967118][T31433] pwc: Registered as video71. [ 1947.982090][T31433] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 1948.004509][T31433] usb 3-1: USB disconnect, device number 126 10:39:50 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x2, "7a8262bd", {0x1, 0x2}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x68}, 0x0) 10:39:50 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303, 0x37}, "4e9e39cbfff55200", "00fa9d88e19c1700", "c10ad498", "15c1f103964b1e7e"}, 0x28) sendfile(r1, r0, 0x0, 0x8000) [ 1948.300908][T21143] usb 5-1: USB disconnect, device number 104 [ 1948.637614][T19272] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1948.644679][T19272] ath9k_htc: Failed to initialize the device [ 1948.656216][T30301] usb 2-1: ath9k_htc: USB layer deinitialized [ 1948.740059][T31433] usb 1-1: USB disconnect, device number 104 10:39:50 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c, &(0x7f0000000240)={[{0x15, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e48a"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 10:39:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:50 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303, 0x37}, "4e9e39cbfff55200", "00fa9d88e19c1700", "c10ad498", "15c1f103964b1e7e"}, 0x28) sendfile(r1, r0, 0x0, 0x8000) 10:39:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x300}, 0x0) 10:39:50 executing program 0: syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e000102030109022400010000000009040000022512e933090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/18, 0x12) syz_usb_disconnect(0xffffffffffffffff) 10:39:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x7ffffff2}, 0x0) 10:39:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x7ffffff8}, 0x0) 10:39:51 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303, 0x37}, "4e9e39cbfff55200", "00fa9d88e19c1700", "c10ad498", "15c1f103964b1e7e"}, 0x28) sendfile(r1, r0, 0x0, 0x8000) 10:39:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x7ffffff9}, 0x0) [ 1949.017663][T30301] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1949.087677][ T4237] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1949.127704][T21590] usb 5-1: Service connection timeout for: 256 [ 1949.137186][T21590] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1949.150457][T21590] ath9k_htc: Failed to initialize the device [ 1949.156759][T21143] usb 5-1: ath9k_htc: USB layer deinitialized [ 1949.277728][T31433] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 1949.344908][ T4237] usb 3-1: Using ep0 maxpacket: 32 [ 1949.527698][T21143] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1949.548179][T30301] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1949.557606][T30301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.565822][T30301] usb 2-1: Product: syz [ 1949.570913][T30301] usb 2-1: Manufacturer: syz [ 1949.575685][T30301] usb 2-1: SerialNumber: syz [ 1949.627761][ T4237] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1949.638949][T30301] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1949.658303][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.666340][ T4237] usb 3-1: Product: syz [ 1949.672339][ T4237] usb 3-1: Manufacturer: syz [ 1949.677062][ T4237] usb 3-1: SerialNumber: syz [ 1949.677711][T31433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1949.683700][ T4237] usb 3-1: config 0 descriptor?? [ 1949.706563][T31433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1949.741127][ T4237] pwc: Samsung MPC-C10 USB webcam detected. [ 1950.017633][T31433] usb 1-1: string descriptor 0 read error: -22 [ 1950.025221][T31433] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1950.038463][T31433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.052327][T21143] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1950.062371][T21143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.070198][T31433] usb 1-1: config 0 descriptor?? [ 1950.077098][T21143] usb 5-1: Product: syz [ 1950.082900][T21143] usb 5-1: Manufacturer: syz [ 1950.093435][T21143] usb 5-1: SerialNumber: syz [ 1950.120394][T31433] adutux 1-1:0.0: ADU100 now attached to /dev/usb/adutux0 [ 1950.138595][T21143] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1950.257877][T30301] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1950.397772][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1950.438334][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1950.478193][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 1950.518059][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1950.558690][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1950.598092][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 1950.638211][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 1950.680322][T30301] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1950.686013][T30301] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1950.694550][ T4237] pwc: recv_control_msg error -71 req 02 val 2000 [ 1950.717659][ T4237] pwc: recv_control_msg error -71 req 02 val 2100 [ 1950.727815][T12111] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1950.738193][ T4237] pwc: recv_control_msg error -71 req 02 val 2200 [ 1950.758622][ T4237] pwc: recv_control_msg error -71 req 06 val 0600 [ 1950.777839][ T4237] pwc: recv_control_msg error -71 req 04 val 1500 [ 1950.798010][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 1950.818046][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 1950.847682][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 1950.868848][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 1950.884030][T30304] usb 2-1: USB disconnect, device number 105 [ 1950.890656][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1950.901458][T30301] ath9k_htc: Failed to initialize the device [ 1950.910057][T30304] usb 2-1: ath9k_htc: USB layer deinitialized [ 1950.927602][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1950.947923][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1950.955407][ T4237] pwc: Registered as video71. [ 1950.962378][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 1950.994503][ T4237] usb 3-1: USB disconnect, device number 127 10:39:53 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x2, "7a8262bd", {0x1, 0x2}}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (rerun: 64) 10:39:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan1\x00', 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b000924020200000000000905030300000000000905840200f2"], 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x103602, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000380)={0x100, 0x1f}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r1, r2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) 10:39:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0xffffff1f}, 0x0) [ 1951.343866][T21590] usb 5-1: USB disconnect, device number 105 [ 1951.687676][ T4237] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1951.717507][T31433] usb 2-1: new high-speed USB device number 106 using dummy_hcd 10:39:54 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c, &(0x7f0000000240)={[{0x15, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e48a"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 10:39:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x0) 10:39:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000000)) [ 1951.862576][T30304] usb 1-1: USB disconnect, device number 105 [ 1951.898493][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x2}, 0x0) [ 1951.937662][ T4237] usb 4-1: Using ep0 maxpacket: 8 [ 1951.995838][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1952.005723][T12111] usb 5-1: Service connection timeout for: 256 [ 1952.013869][T12111] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1952.032290][T12111] ath9k_htc: Failed to initialize the device 10:39:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x3}, 0x0) [ 1952.044921][T21590] usb 5-1: ath9k_htc: USB layer deinitialized [ 1952.058344][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1952.084216][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 10:39:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000000)) [ 1952.096499][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 61952, setting to 1024 [ 1952.117049][ T4237] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1952.154448][T14932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x4}, 0x0) [ 1952.212837][T21143] usb 3-1: new high-speed USB device number 2 using dummy_hcd 10:39:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000000)) [ 1952.257633][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1952.297882][T31433] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1952.299653][ T4237] usb 4-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice=70.86 [ 1952.307266][T31433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.324914][T31433] usb 2-1: Product: syz [ 1952.336881][T31433] usb 2-1: Manufacturer: syz [ 1952.342084][T31433] usb 2-1: SerialNumber: syz [ 1952.346914][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.369564][ T4237] usb 4-1: Product: syz [ 1952.373988][ T4237] usb 4-1: Manufacturer: syz [ 1952.386332][ T4237] usb 4-1: SerialNumber: syz [ 1952.395377][ T4237] usb 4-1: config 0 descriptor?? [ 1952.398554][T31433] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1952.477930][T21590] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1952.477957][T21143] usb 3-1: Using ep0 maxpacket: 32 [ 1952.787843][T21143] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1952.801546][T21143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.812234][T21143] usb 3-1: Product: syz [ 1952.816470][T21143] usb 3-1: Manufacturer: syz [ 1952.824661][T21143] usb 3-1: SerialNumber: syz [ 1952.847199][T21143] usb 3-1: config 0 descriptor?? [ 1952.890262][T21143] pwc: Samsung MPC-C10 USB webcam detected. [ 1953.057739][T31433] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1953.062978][T30304] usb 4-1: USB disconnect, device number 61 [ 1953.066932][T21590] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1953.114594][T21590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.131643][T21590] usb 5-1: Product: syz [ 1953.135921][T21590] usb 5-1: Manufacturer: syz [ 1953.143639][T21590] usb 5-1: SerialNumber: syz [ 1953.198791][T21590] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1953.311296][T31433] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1953.316992][T31433] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1953.547550][T21143] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1953.587676][T21143] pwc: recv_control_msg error -32 req 02 val 2700 [ 1953.627779][T21143] pwc: recv_control_msg error -32 req 04 val 1700 [ 1953.667585][T21143] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1953.707627][T21143] pwc: recv_control_msg error -32 req 04 val 1000 [ 1953.747544][T21143] pwc: recv_control_msg error -32 req 04 val 1300 [ 1953.787658][T21143] pwc: recv_control_msg error -32 req 04 val 1400 [ 1953.827636][T21143] pwc: recv_control_msg error -71 req 02 val 2000 [ 1953.848091][T21143] pwc: recv_control_msg error -71 req 02 val 2100 [ 1953.867852][T21143] pwc: recv_control_msg error -71 req 02 val 2200 [ 1953.887602][T21143] pwc: recv_control_msg error -71 req 06 val 0600 [ 1953.887924][T19272] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1953.907635][T21143] pwc: recv_control_msg error -71 req 04 val 1500 [ 1953.927565][T21143] pwc: recv_control_msg error -71 req 02 val 2500 [ 1953.948893][T21143] pwc: recv_control_msg error -71 req 02 val 2400 [ 1953.972513][T21143] pwc: recv_control_msg error -71 req 02 val 2600 [ 1953.997827][T21143] pwc: recv_control_msg error -71 req 02 val 2900 [ 1954.017762][T21143] pwc: recv_control_msg error -71 req 02 val 2800 [ 1954.037551][T21143] pwc: recv_control_msg error -71 req 04 val 1100 [ 1954.058407][T21143] pwc: recv_control_msg error -71 req 04 val 1200 [ 1954.073868][T21143] pwc: Registered as video71. [ 1954.087960][T21143] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 1954.125482][T21143] usb 3-1: USB disconnect, device number 2 [ 1954.527689][T21143] usb 5-1: USB disconnect, device number 106 [ 1954.987719][T31433] ath9k_htc: Failed to initialize the device [ 1954.995213][T31433] usb 2-1: ath9k_htc: USB layer deinitialized [ 1955.197643][T19272] usb 5-1: Service connection timeout for: 256 [ 1955.203821][T19272] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1955.212221][T19272] ath9k_htc: Failed to initialize the device [ 1955.218593][T21143] usb 5-1: ath9k_htc: USB layer deinitialized 10:39:57 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x2, "7a8262bd", {0x1, 0x2}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:39:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x5}, 0x0) 10:39:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000000)) 10:39:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc048aeca, &(0x7f0000000400)={"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"}) 10:39:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:39:57 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c, &(0x7f0000000240)={[{0x15, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e48a"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 10:39:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x6}, 0x0) [ 1955.319677][T30304] usb 2-1: USB disconnect, device number 106 [ 1955.342747][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8140aecc, &(0x7f0000000000)) 10:39:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x7}, 0x0) [ 1955.450102][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)) 10:39:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x8}, 0x0) [ 1955.536627][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x9}, 0x0) [ 1955.627674][T12111] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1955.636242][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1955.703817][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1955.791982][T21143] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1955.799895][T30304] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1955.887617][T12111] usb 3-1: Using ep0 maxpacket: 32 [ 1956.230011][T12111] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1956.239158][T12111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.247166][T12111] usb 3-1: Product: syz [ 1956.252051][T12111] usb 3-1: Manufacturer: syz [ 1956.256684][T12111] usb 3-1: SerialNumber: syz [ 1956.263713][T12111] usb 3-1: config 0 descriptor?? [ 1956.310022][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 1956.367714][T21143] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1956.377028][T30304] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1956.386219][T21143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.395078][T30304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.403463][T30304] usb 2-1: Product: syz [ 1956.407916][T21143] usb 5-1: Product: syz [ 1956.412095][T21143] usb 5-1: Manufacturer: syz [ 1956.416695][T21143] usb 5-1: SerialNumber: syz [ 1956.421601][T30304] usb 2-1: Manufacturer: syz [ 1956.426217][T30304] usb 2-1: SerialNumber: syz [ 1956.468958][T30304] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1956.478205][T21143] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1956.967792][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1957.007848][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 1957.047776][T30301] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1957.056947][T30304] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1957.066202][T12111] pwc: recv_control_msg error -32 req 04 val 1700 [ 1957.107671][T12111] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1957.147647][T12111] pwc: recv_control_msg error -32 req 04 val 1000 [ 1957.187768][T12111] pwc: recv_control_msg error -32 req 04 val 1300 [ 1957.227631][T12111] pwc: recv_control_msg error -32 req 04 val 1400 [ 1957.270454][T30304] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1957.276134][T30304] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1957.284130][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 1957.313458][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 1957.337558][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 1957.363356][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 1957.387976][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 1957.407824][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 1957.427859][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 1957.449636][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 1957.469561][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 1957.489488][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 1957.492210][T19272] usb 2-1: USB disconnect, device number 107 [ 1957.510435][T30304] ath9k_htc: Failed to initialize the device [ 1957.516512][T19272] usb 2-1: ath9k_htc: USB layer deinitialized [ 1957.517995][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 1957.557888][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 1957.565866][T12111] pwc: Registered as video71. [ 1957.572407][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 1957.607822][T12111] usb 3-1: USB disconnect, device number 3 [ 1957.664501][T31433] usb 5-1: USB disconnect, device number 107 10:40:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)) 10:40:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8140aecc, &(0x7f0000000000)) 10:40:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xa}, 0x0) 10:40:00 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:00 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x18c, &(0x7f0000000240)={[{0xec, 0x4e00, "0438e5df23fb82e8ed1502281ce1903a036478d92a7e9f241263793e710d44ee598b40b41dc58b02b1f4c16d32386fa925436eddd31c4521898d9138ce773d45ee173985168013fa069817b00dd0eba943ceda9e4539d738624644af08fd87426b3b6b6dce420205d8f068c3097b831ca5a32e7458ec825361c6ca06778582777035741fb04009fda43840ba377285dcc290b3f6e65133bb7ed4662e8ae4d6a9cef98334a375ea1e40d0be1a0b5ddfe6ec5a5a8f4d8f063ebd1240147820318554bebd067a57180b1fb1babede0d49c03f605cbdb10023a51b66fd10e6d9ffea3ed2e1d0ac3c92c3f3e97ccc"}, {0x96, 0x4e00, "3ef0f0291ee063058b64c14147456e0e745ac0cd5b67ee5703a8aba0b28c99269882b6a0ca817d2bf74b50b858c3ebcad409bca75117f63a839a00253c42096aa0db94b8ccb3f4e97d67d595383145d60ccaa7252339ba5f7ae3fdff63628aca7885210012f29615cbe6440d7edf26e30a4630696d18680f5ee77f2cd852d242b76c76432db12139c07eaccef956bd44d8c7beb9079e"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x3, 0x0, 0x3, 0xfffd}}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090018105e04da0500000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000680)={0x24, &(0x7f0000000440)={0x0, 0x0, 0xa, {0xa, 0x0, "103fdba33dc16169"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x40, 0x0, 0x96, {0x96, 0x8, "bcf3b6e22fdcbf1ea957405bac9af0a15091e139e02529fa696ebb2b57514fef241235550c26f78eed3100b442db35ab1d61cb7d0b48cdc401560caa33288ad04a2e47683454391ef42ed34f3a17958934d34cd6fd49cc7b1e75689c162f12a578ec1bcb356f8fb771d559f7d7928b2f578f3c7cf18b590b47021bc1d591260271653eaef73b81ac9c64d0c9fb21f11882abb5f5"}}, &(0x7f0000000000)={0x0, 0x3, 0x18, @string={0x18, 0x3, "b15d4c257eb3a9dd181b8b50a070ad7fedc3e6c734ac"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x8, "b2"}, @global=@item_4={0x3, 0x1, 0x0, "f6024f98"}, @main=@item_012={0x2, 0x0, 0xa, "e26e"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_012={0x1, 0x0, 0xb, '\"'}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3f6}}}}, &(0x7f0000000740)={0x18, &(0x7f0000000540)={0x40, 0x10, 0x7f, "687186ee42ac92013ef1d2e8d87a5c8fb418c6d2d187cfd8f621efc2da64b8a4d92935263725071eb3096b9dcefad5354ae3cee2bcae5f65d2bc3250dcb440c3b1cab9c567af0b583c238d30f4d51c81fa2a83e96c12d483e5debc4a7dff96a194d45e5d10fbc093c5474f07282f07c3ed45621ea7479ac0985bb89b90c437"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x1, 0x45, "5dce16fd7167a3c65e096f6115781519f44cd2eadfbd1ef86cb6f01dafe799293e0f03ec12291a830e6227ec6b863d74d46e50dc8e6fe6d64b255701954ff1f70aa296e0b3"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xab}}) [ 1958.031849][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)) 10:40:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xc}, 0x0) 10:40:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7c, 0x40, 0x0, 0x80}, [{0x3, 0x8, 0x0, 0x5}], "327887cf99d93d43", ['\x00', '\x00', '\x00', '\x00']}, 0x480) ioctl$TCXONC(r0, 0x540a, 0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840), 0x101100, 0x0) 10:40:00 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r0, 0x5453, 0x0) 10:40:00 executing program 4: socket(0x29, 0x5, 0x4ae74e53) [ 1958.233484][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xe}, 0x0) 10:40:00 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$sock(r0, 0x0, 0x0, 0x0) [ 1958.315678][T21700] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1958.317681][T30301] usb 5-1: Service connection timeout for: 256 [ 1958.354171][T30301] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services 10:40:00 executing program 4: clock_gettime(0x1, &(0x7f0000000000)) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:40:00 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0xc008aec1, &(0x7f0000000000)) [ 1958.374415][T19272] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1958.391920][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1958.406232][T30301] ath9k_htc: Failed to initialize the device 10:40:00 executing program 3: faccessat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 1958.427363][T31433] usb 5-1: ath9k_htc: USB layer deinitialized [ 1958.597726][T21700] usb 3-1: Using ep0 maxpacket: 32 [ 1958.908032][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1958.921517][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.929882][T21700] usb 3-1: Product: syz [ 1958.934135][T21700] usb 3-1: Manufacturer: syz [ 1958.938948][T21700] usb 3-1: SerialNumber: syz [ 1958.954654][T21700] usb 3-1: config 0 descriptor?? [ 1958.960186][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1958.969431][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.977723][T19272] usb 2-1: Product: syz [ 1958.981909][T19272] usb 2-1: Manufacturer: syz [ 1958.986519][T19272] usb 2-1: SerialNumber: syz [ 1959.029054][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1959.050785][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1959.677697][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1959.727626][T19272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1959.736891][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1959.777682][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1959.817663][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1959.857623][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 1959.897714][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 1959.936005][T15093] UDC core: couldn't find an available UDC or it's busy: -16 [ 1959.947843][T21700] pwc: recv_control_msg error -32 req 04 val 1400 [ 1959.949305][T15093] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1959.987691][T21700] pwc: recv_control_msg error -71 req 02 val 2000 [ 1960.017641][T21700] pwc: recv_control_msg error -71 req 02 val 2100 [ 1960.050174][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 1960.067619][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 1960.089625][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 1960.117802][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 1960.147630][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1960.165777][T15093] UDC core: couldn't find an available UDC or it's busy: -16 [ 1960.173549][T15093] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1960.177739][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 1960.182928][T15093] UDC core: couldn't find an available UDC or it's busy: -16 [ 1960.196028][T15093] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1960.205983][T30301] usb 2-1: USB disconnect, device number 108 [ 1960.220049][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1960.247807][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1960.287622][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1960.309331][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1960.324004][T21700] pwc: Registered as video71. [ 1960.337850][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 1960.366614][T21700] usb 3-1: USB disconnect, device number 4 10:40:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:02 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (rerun: 32) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x18c, &(0x7f0000000240)={[{0xec, 0x4e00, "0438e5df23fb82e8ed1502281ce1903a036478d92a7e9f241263793e710d44ee598b40b41dc58b02b1f4c16d32386fa925436eddd31c4521898d9138ce773d45ee173985168013fa069817b00dd0eba943ceda9e4539d738624644af08fd87426b3b6b6dce420205d8f068c3097b831ca5a32e7458ec825361c6ca06778582777035741fb04009fda43840ba377285dcc290b3f6e65133bb7ed4662e8ae4d6a9cef98334a375ea1e40d0be1a0b5ddfe6ec5a5a8f4d8f063ebd1240147820318554bebd067a57180b1fb1babede0d49c03f605cbdb10023a51b66fd10e6d9ffea3ed2e1d0ac3c92c3f3e97ccc"}, {0x96, 0x4e00, "3ef0f0291ee063058b64c14147456e0e745ac0cd5b67ee5703a8aba0b28c99269882b6a0ca817d2bf74b50b858c3ebcad409bca75117f63a839a00253c42096aa0db94b8ccb3f4e97d67d595383145d60ccaa7252339ba5f7ae3fdff63628aca7885210012f29615cbe6440d7edf26e30a4630696d18680f5ee77f2cd852d242b76c76432db12139c07eaccef956bd44d8c7beb9079e"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async, rerun: 32) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x3, 0x0, 0x3, 0xfffd}}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090018105e04da0500000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000680)={0x24, &(0x7f0000000440)={0x0, 0x0, 0xa, {0xa, 0x0, "103fdba33dc16169"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x40, 0x0, 0x96, {0x96, 0x8, "bcf3b6e22fdcbf1ea957405bac9af0a15091e139e02529fa696ebb2b57514fef241235550c26f78eed3100b442db35ab1d61cb7d0b48cdc401560caa33288ad04a2e47683454391ef42ed34f3a17958934d34cd6fd49cc7b1e75689c162f12a578ec1bcb356f8fb771d559f7d7928b2f578f3c7cf18b590b47021bc1d591260271653eaef73b81ac9c64d0c9fb21f11882abb5f5"}}, &(0x7f0000000000)={0x0, 0x3, 0x18, @string={0x18, 0x3, "b15d4c257eb3a9dd181b8b50a070ad7fedc3e6c734ac"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x8, "b2"}, @global=@item_4={0x3, 0x1, 0x0, "f6024f98"}, @main=@item_012={0x2, 0x0, 0xa, "e26e"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_012={0x1, 0x0, 0xb, '\"'}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3f6}}}}, &(0x7f0000000740)={0x18, &(0x7f0000000540)={0x40, 0x10, 0x7f, "687186ee42ac92013ef1d2e8d87a5c8fb418c6d2d187cfd8f621efc2da64b8a4d92935263725071eb3096b9dcefad5354ae3cee2bcae5f65d2bc3250dcb440c3b1cab9c567af0b583c238d30f4d51c81fa2a83e96c12d483e5debc4a7dff96a194d45e5d10fbc093c5474f07282f07c3ed45621ea7479ac0985bb89b90c437"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x1, 0x45, "5dce16fd7167a3c65e096f6115781519f44cd2eadfbd1ef86cb6f01dafe799293e0f03ec12291a830e6227ec6b863d74d46e50dc8e6fe6d64b255701954ff1f70aa296e0b3"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xab}}) 10:40:02 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 10:40:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0xc008aec1, &(0x7f0000000000)) 10:40:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xf}, 0x0) 10:40:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:02 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0xc008aec1, &(0x7f0000000000)) 10:40:02 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1960.760711][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1960.792968][T15128] UDC core: couldn't find an available UDC or it's busy: -16 10:40:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x10}, 0x0) [ 1960.808790][T15128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1960.823436][T15130] UDC core: couldn't find an available UDC or it's busy: -16 [ 1960.835851][T15130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1960.848718][T15130] UDC core: couldn't find an available UDC or it's busy: -16 [ 1960.856313][T15130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1960.874055][T15130] UDC core: couldn't find an available UDC or it's busy: -16 [ 1960.882920][T21700] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1960.893876][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1960.902678][T15130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:40:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x48}, 0x0) 10:40:03 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) [ 1960.918281][T15130] UDC core: couldn't find an available UDC or it's busy: -16 [ 1960.929991][T15130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:40:03 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) [ 1960.987993][T15140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1961.047723][T19272] usb 2-1: Service connection timeout for: 256 [ 1961.054089][T21590] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1961.061949][T19272] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1961.072155][T19272] ath9k_htc: Failed to initialize the device [ 1961.079050][T30301] usb 2-1: ath9k_htc: USB layer deinitialized [ 1961.127591][T21700] usb 3-1: Using ep0 maxpacket: 32 [ 1961.147587][T21143] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1961.327592][T21590] usb 4-1: Using ep0 maxpacket: 32 [ 1961.387600][T21143] usb 5-1: Using ep0 maxpacket: 32 [ 1961.437533][T30301] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1961.457957][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1961.467040][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.475502][T21700] usb 3-1: Product: syz [ 1961.480058][T21700] usb 3-1: Manufacturer: syz [ 1961.484681][T21700] usb 3-1: SerialNumber: syz [ 1961.492241][T21700] usb 3-1: config 0 descriptor?? [ 1961.530312][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1961.627641][T21590] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1961.636722][T21590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.645567][T21590] usb 4-1: Product: syz [ 1961.650187][T21590] usb 4-1: Manufacturer: syz [ 1961.654955][T21590] usb 4-1: SerialNumber: syz [ 1961.665810][T21590] usb 4-1: config 0 descriptor?? [ 1961.667945][T21143] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1961.684340][T21143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.692599][T21143] usb 5-1: Product: syz [ 1961.696787][T21143] usb 5-1: Manufacturer: syz [ 1961.701901][T21143] usb 5-1: SerialNumber: syz [ 1961.715610][T21143] usb 5-1: config 0 descriptor?? [ 1961.720072][T21590] pwc: Samsung MPC-C10 USB webcam detected. [ 1961.762692][T21143] pwc: Samsung MPC-C10 USB webcam detected. [ 1961.797757][T30301] usb 2-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 1961.812732][T30301] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1961.977677][T30301] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1961.987057][T30301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.996814][T30301] usb 2-1: Product: syz [ 1962.001586][T30301] usb 2-1: Manufacturer: syz [ 1962.006375][T30301] usb 2-1: SerialNumber: syz [ 1962.060732][T30301] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1962.168522][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1962.220912][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1962.267624][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1962.307630][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1962.347649][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 1962.387674][T21590] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1962.394261][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 1962.407799][T21143] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1962.440329][T21590] pwc: recv_control_msg error -32 req 02 val 2700 [ 1962.446998][T21700] pwc: recv_control_msg error -32 req 04 val 1400 [ 1962.447664][T21143] pwc: recv_control_msg error -32 req 02 val 2700 [ 1962.487748][T21700] pwc: recv_control_msg error -71 req 02 val 2000 [ 1962.494468][T21590] pwc: recv_control_msg error -32 req 04 val 1700 [ 1962.507678][T21143] pwc: recv_control_msg error -32 req 04 val 1700 [ 1962.519011][T21700] pwc: recv_control_msg error -71 req 02 val 2100 [ 1962.547609][T21143] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1962.547609][T21590] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1962.550097][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 1962.587655][T21143] pwc: recv_control_msg error -32 req 04 val 1000 [ 1962.597743][T21590] pwc: recv_control_msg error -32 req 04 val 1000 [ 1962.610837][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 1962.627817][T21143] pwc: recv_control_msg error -32 req 04 val 1300 [ 1962.638050][T30301] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1962.647960][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 1962.657663][T21590] pwc: recv_control_msg error -32 req 04 val 1300 [ 1962.667936][T21143] pwc: recv_control_msg error -32 req 04 val 1400 [ 1962.683721][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 1962.707753][T21143] pwc: recv_control_msg error -71 req 02 val 2000 [ 1962.714596][T21590] pwc: recv_control_msg error -32 req 04 val 1400 [ 1962.721335][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1962.727850][T21143] pwc: recv_control_msg error -71 req 02 val 2100 [ 1962.747670][T21143] pwc: recv_control_msg error -71 req 02 val 2200 [ 1962.760960][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 1962.767771][T21143] pwc: recv_control_msg error -71 req 06 val 0600 [ 1962.777770][T21590] pwc: recv_control_msg error -71 req 02 val 2000 [ 1962.788041][T21143] pwc: recv_control_msg error -71 req 04 val 1500 [ 1962.797802][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1962.804714][T21590] pwc: recv_control_msg error -71 req 02 val 2100 [ 1962.807669][T21143] pwc: recv_control_msg error -71 req 02 val 2500 [ 1962.828035][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1962.834907][T21590] pwc: recv_control_msg error -71 req 02 val 2200 [ 1962.843959][T21143] pwc: recv_control_msg error -71 req 02 val 2400 [ 1962.861363][T12111] usb 2-1: USB disconnect, device number 109 [ 1962.862241][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1962.874500][T21590] pwc: recv_control_msg error -71 req 06 val 0600 [ 1962.878145][T21143] pwc: recv_control_msg error -71 req 02 val 2600 [ 1962.907613][T21590] pwc: recv_control_msg error -71 req 04 val 1500 [ 1962.907715][T21143] pwc: recv_control_msg error -71 req 02 val 2900 [ 1962.914450][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1962.933654][T21700] pwc: Registered as video71. [ 1962.938839][T21143] pwc: recv_control_msg error -71 req 02 val 2800 [ 1962.942734][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 1962.958552][T21143] pwc: recv_control_msg error -71 req 04 val 1100 [ 1962.962278][T21590] pwc: recv_control_msg error -71 req 02 val 2500 [ 1962.981334][T21700] usb 3-1: USB disconnect, device number 5 [ 1962.995095][T21590] pwc: recv_control_msg error -71 req 02 val 2400 [ 1962.999553][T21143] pwc: recv_control_msg error -71 req 04 val 1200 10:40:05 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1963.021690][T21590] pwc: recv_control_msg error -71 req 02 val 2600 [ 1963.036505][T21143] pwc: Registered as video71. [ 1963.059782][T21143] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input62 [ 1963.067535][T21590] pwc: recv_control_msg error -71 req 02 val 2900 [ 1963.097671][T21590] pwc: recv_control_msg error -71 req 02 val 2800 [ 1963.101614][T21143] usb 5-1: USB disconnect, device number 108 [ 1963.119132][T21590] pwc: recv_control_msg error -71 req 04 val 1100 [ 1963.147701][T21590] pwc: recv_control_msg error -71 req 04 val 1200 [ 1963.173578][T21590] pwc: Registered as video71. [ 1963.196790][T21590] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input63 [ 1963.233774][T21590] usb 4-1: USB disconnect, device number 62 10:40:05 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) 10:40:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x4c}, 0x0) 10:40:05 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x18c, &(0x7f0000000240)={[{0xec, 0x4e00, "0438e5df23fb82e8ed1502281ce1903a036478d92a7e9f241263793e710d44ee598b40b41dc58b02b1f4c16d32386fa925436eddd31c4521898d9138ce773d45ee173985168013fa069817b00dd0eba943ceda9e4539d738624644af08fd87426b3b6b6dce420205d8f068c3097b831ca5a32e7458ec825361c6ca06778582777035741fb04009fda43840ba377285dcc290b3f6e65133bb7ed4662e8ae4d6a9cef98334a375ea1e40d0be1a0b5ddfe6ec5a5a8f4d8f063ebd1240147820318554bebd067a57180b1fb1babede0d49c03f605cbdb10023a51b66fd10e6d9ffea3ed2e1d0ac3c92c3f3e97ccc"}, {0x96, 0x4e00, "3ef0f0291ee063058b64c14147456e0e745ac0cd5b67ee5703a8aba0b28c99269882b6a0ca817d2bf74b50b858c3ebcad409bca75117f63a839a00253c42096aa0db94b8ccb3f4e97d67d595383145d60ccaa7252339ba5f7ae3fdff63628aca7885210012f29615cbe6440d7edf26e30a4630696d18680f5ee77f2cd852d242b76c76432db12139c07eaccef956bd44d8c7beb9079e"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x3, 0x0, 0x3, 0xfffd}}) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090018105e04da0500000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000680)={0x24, &(0x7f0000000440)={0x0, 0x0, 0xa, {0xa, 0x0, "103fdba33dc16169"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x40, 0x0, 0x96, {0x96, 0x8, "bcf3b6e22fdcbf1ea957405bac9af0a15091e139e02529fa696ebb2b57514fef241235550c26f78eed3100b442db35ab1d61cb7d0b48cdc401560caa33288ad04a2e47683454391ef42ed34f3a17958934d34cd6fd49cc7b1e75689c162f12a578ec1bcb356f8fb771d559f7d7928b2f578f3c7cf18b590b47021bc1d591260271653eaef73b81ac9c64d0c9fb21f11882abb5f5"}}, &(0x7f0000000000)={0x0, 0x3, 0x18, @string={0x18, 0x3, "b15d4c257eb3a9dd181b8b50a070ad7fedc3e6c734ac"}}, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x8, "b2"}, @global=@item_4={0x3, 0x1, 0x0, "f6024f98"}, @main=@item_012={0x2, 0x0, 0xa, "e26e"}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x0, 0x2, 0x7}, @main=@item_012={0x1, 0x0, 0xb, '\"'}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3f6}}}}, &(0x7f0000000740)={0x18, &(0x7f0000000540)={0x40, 0x10, 0x7f, "687186ee42ac92013ef1d2e8d87a5c8fb418c6d2d187cfd8f621efc2da64b8a4d92935263725071eb3096b9dcefad5354ae3cee2bcae5f65d2bc3250dcb440c3b1cab9c567af0b583c238d30f4d51c81fa2a83e96c12d483e5debc4a7dff96a194d45e5d10fbc093c5474f07282f07c3ed45621ea7479ac0985bb89b90c437"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x1, 0x45, "5dce16fd7167a3c65e096f6115781519f44cd2eadfbd1ef86cb6f01dafe799293e0f03ec12291a830e6227ec6b863d74d46e50dc8e6fe6d64b255701954ff1f70aa296e0b3"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xab}}) 10:40:05 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1963.431019][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000000)) 10:40:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x60}, 0x0) [ 1963.490307][T15158] UDC core: couldn't find an available UDC or it's busy: -16 [ 1963.498529][T21700] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1963.513933][T15158] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:40:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x68}, 0x0) [ 1963.534048][T15158] UDC core: couldn't find an available UDC or it's busy: -16 [ 1963.547704][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1963.548806][T15158] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1963.579366][T15159] UDC core: couldn't find an available UDC or it's busy: -16 10:40:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000000)) [ 1963.587672][T15159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:40:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000000)) 10:40:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x6c}, 0x0) [ 1963.626996][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1963.677782][T30301] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1963.685650][T30301] ath9k_htc: Failed to initialize the device [ 1963.703280][T12111] usb 2-1: ath9k_htc: USB layer deinitialized [ 1963.717807][T31433] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1963.735211][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1963.787558][T21700] usb 3-1: Using ep0 maxpacket: 32 [ 1963.867616][T21590] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1963.987547][T31433] usb 5-1: Using ep0 maxpacket: 32 [ 1964.077591][T12111] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1964.088084][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1964.099435][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.111630][T21700] usb 3-1: Product: syz [ 1964.115800][T21700] usb 3-1: Manufacturer: syz [ 1964.122174][T21700] usb 3-1: SerialNumber: syz [ 1964.130552][T21700] usb 3-1: config 0 descriptor?? [ 1964.142397][T21590] usb 4-1: Using ep0 maxpacket: 32 [ 1964.172741][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1964.347844][T31433] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1964.356946][T31433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.367612][T31433] usb 5-1: Product: syz [ 1964.373868][T31433] usb 5-1: Manufacturer: syz [ 1964.379587][T31433] usb 5-1: SerialNumber: syz [ 1964.392203][T31433] usb 5-1: config 0 descriptor?? [ 1964.441511][T31433] pwc: Samsung MPC-C10 USB webcam detected. [ 1964.447730][T12111] usb 2-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 1964.463584][T12111] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1964.507600][T21590] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1964.517041][T21590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.526057][T21590] usb 4-1: Product: syz [ 1964.530838][T21590] usb 4-1: Manufacturer: syz [ 1964.535650][T21590] usb 4-1: SerialNumber: syz [ 1964.546088][T21590] usb 4-1: config 0 descriptor?? [ 1964.591417][T21590] pwc: Samsung MPC-C10 USB webcam detected. [ 1964.647157][T12111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1964.656690][T12111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.665076][T12111] usb 2-1: Product: syz [ 1964.669494][T12111] usb 2-1: Manufacturer: syz [ 1964.674191][T12111] usb 2-1: SerialNumber: syz [ 1964.729380][T12111] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1964.808036][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1964.847616][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1964.887672][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1964.928022][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1964.967670][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 1965.007609][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 1965.047612][T21700] pwc: recv_control_msg error -32 req 04 val 1400 [ 1965.097740][T21700] pwc: recv_control_msg error -71 req 02 val 2000 [ 1965.117666][T31433] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1965.124395][T21700] pwc: recv_control_msg error -71 req 02 val 2100 [ 1965.147661][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 1965.167652][T31433] pwc: recv_control_msg error -32 req 02 val 2700 [ 1965.190116][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 1965.208549][T31433] pwc: recv_control_msg error -32 req 04 val 1700 [ 1965.230383][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 1965.247789][T21590] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1965.254475][T31433] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1965.261619][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 1965.287667][T21590] pwc: recv_control_msg error -32 req 02 val 2700 [ 1965.294316][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1965.297628][T12111] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1965.318503][T31433] pwc: recv_control_msg error -32 req 04 val 1000 [ 1965.325579][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 1965.337823][T21590] pwc: recv_control_msg error -32 req 04 val 1700 [ 1965.359224][T31433] pwc: recv_control_msg error -32 req 04 val 1300 [ 1965.365959][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1965.377872][T21590] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1965.397928][T31433] pwc: recv_control_msg error -32 req 04 val 1400 [ 1965.404490][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1965.417543][T21590] pwc: recv_control_msg error -32 req 04 val 1000 [ 1965.442401][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1965.457618][T21590] pwc: recv_control_msg error -32 req 04 val 1300 [ 1965.464302][T31433] pwc: recv_control_msg error -71 req 02 val 2000 [ 1965.471133][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1965.479719][T21700] pwc: Registered as video71. [ 1965.486302][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input64 [ 1965.500431][T21700] usb 3-1: USB disconnect, device number 6 [ 1965.507688][T31433] pwc: recv_control_msg error -71 req 02 val 2100 [ 1965.520923][T14603] usb 2-1: USB disconnect, device number 110 [ 1965.527781][T21590] pwc: recv_control_msg error -32 req 04 val 1400 [ 1965.534449][T31433] pwc: recv_control_msg error -71 req 02 val 2200 [ 1965.558637][T31433] pwc: recv_control_msg error -71 req 06 val 0600 10:40:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) [ 1965.587615][T31433] pwc: recv_control_msg error -71 req 04 val 1500 [ 1965.587782][T21590] pwc: recv_control_msg error -71 req 02 val 2000 [ 1965.621087][T31433] pwc: recv_control_msg error -71 req 02 val 2500 [ 1965.628214][T21590] pwc: recv_control_msg error -71 req 02 val 2100 [ 1965.667771][T21590] pwc: recv_control_msg error -71 req 02 val 2200 [ 1965.674537][T31433] pwc: recv_control_msg error -71 req 02 val 2400 [ 1965.697597][T21590] pwc: recv_control_msg error -71 req 06 val 0600 [ 1965.704253][T31433] pwc: recv_control_msg error -71 req 02 val 2600 [ 1965.727617][T21590] pwc: recv_control_msg error -71 req 04 val 1500 [ 1965.734214][T31433] pwc: recv_control_msg error -71 req 02 val 2900 [ 1965.771358][T21590] pwc: recv_control_msg error -71 req 02 val 2500 [ 1965.780275][T31433] pwc: recv_control_msg error -71 req 02 val 2800 [ 1965.819401][T21590] pwc: recv_control_msg error -71 req 02 val 2400 [ 1965.826217][T31433] pwc: recv_control_msg error -71 req 04 val 1100 [ 1965.857896][T21590] pwc: recv_control_msg error -71 req 02 val 2600 [ 1965.864706][T31433] pwc: recv_control_msg error -71 req 04 val 1200 [ 1965.873218][T31433] pwc: Registered as video71. [ 1965.880344][T31433] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65 [ 1965.890313][T21590] pwc: recv_control_msg error -71 req 02 val 2900 [ 1965.903945][T31433] usb 5-1: USB disconnect, device number 109 [ 1965.927728][T21590] pwc: recv_control_msg error -71 req 02 val 2800 [ 1965.967553][T21590] pwc: recv_control_msg error -71 req 04 val 1100 [ 1965.987599][T21590] pwc: recv_control_msg error -71 req 04 val 1200 [ 1966.000152][T21590] pwc: Registered as video71. 10:40:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x74}, 0x0) 10:40:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) 10:40:08 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1966.029056][T21590] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 1966.062083][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:08 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da245f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af2720176d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000000000000"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x89, &(0x7f0000000340)=@generic={0x4, 0x2, 0x81, "8c05cd79", "b1ca0a55102de3f3e6431cb6176f21b16bc6ed057f4ee7de5a5665801a60ec4d0c6f7cbfbfc01cbb4dfe71d779025e0c1d66f59f00b64cf7fcd48bfa2015a3be78dca738323bc20fe732f66260d6d2647b7697b1944edcca7c7d8918772859c054b55fc52925768ac9960c7a649f487c9c0eca283cd1a4f8f64f4dd5ad266bb4c7"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:40:08 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000240)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000040480932ec9b10ccf2ef8fafe9330c9100e25a21fa"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x0, 0x0, 0x80}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "1152d6f5", {0x3, 0x1, 0x0, 0x81, 0x1, 0x2, 0xff}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:08 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) [ 1966.078085][T21700] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1966.114203][T21590] usb 4-1: USB disconnect, device number 63 10:40:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x7a}, 0x0) 10:40:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) [ 1966.279562][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1966.317560][T12111] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive 10:40:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xf0}, 0x0) [ 1966.331630][T12111] ath9k_htc: Failed to initialize the device [ 1966.357665][T14603] usb 2-1: ath9k_htc: USB layer deinitialized 10:40:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) [ 1966.400207][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1966.417716][T21700] usb 3-1: Using ep0 maxpacket: 32 [ 1966.423177][T21699] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1966.638714][T21590] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1966.707663][T21699] usb 5-1: Using ep0 maxpacket: 32 [ 1966.747710][T14603] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1966.755543][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1966.767771][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.775796][T21700] usb 3-1: Product: syz [ 1966.781023][T21700] usb 3-1: Manufacturer: syz [ 1966.785647][T21700] usb 3-1: SerialNumber: syz [ 1966.799440][T21700] usb 3-1: config 0 descriptor?? [ 1966.854961][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1967.027985][T21699] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1967.037049][T21699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.045809][T21699] usb 5-1: Product: syz [ 1967.050972][T21699] usb 5-1: Manufacturer: syz [ 1967.055729][T21699] usb 5-1: SerialNumber: syz [ 1967.070352][T21699] usb 5-1: config 0 descriptor?? [ 1967.120873][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 1967.201919][T21590] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1967.211277][T21590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.219912][T21590] usb 4-1: Product: syz [ 1967.224223][T21590] usb 4-1: Manufacturer: syz [ 1967.230869][T21590] usb 4-1: SerialNumber: syz [ 1967.289116][T21590] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1967.317873][T14603] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1967.337584][T14603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.345623][T14603] usb 2-1: Product: syz [ 1967.357895][T14603] usb 2-1: Manufacturer: syz [ 1967.362522][T14603] usb 2-1: SerialNumber: syz [ 1967.410973][T14603] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1967.517750][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1967.558075][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1967.617946][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1967.657829][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1967.712587][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 1967.768177][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 1967.807723][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1967.814608][T21700] pwc: recv_control_msg error -71 req 04 val 1400 [ 1967.840764][T21700] pwc: recv_control_msg error -71 req 02 val 2000 [ 1967.857660][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 1967.867682][T21700] pwc: recv_control_msg error -71 req 02 val 2100 [ 1967.908449][T21699] pwc: recv_control_msg error -32 req 04 val 1700 [ 1967.915324][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 1967.942536][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 1967.957745][T21699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1967.964331][T21590] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1967.974051][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 1968.002468][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 1968.017849][T21699] pwc: recv_control_msg error -32 req 04 val 1000 [ 1968.038553][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1968.060054][T21699] pwc: recv_control_msg error -32 req 04 val 1300 [ 1968.066634][T14603] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1968.076060][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 1968.097707][T21699] pwc: recv_control_msg error -32 req 04 val 1400 [ 1968.107681][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1968.137706][T21699] pwc: recv_control_msg error -71 req 02 val 2000 [ 1968.144248][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1968.172045][T21699] pwc: recv_control_msg error -71 req 02 val 2100 [ 1968.179051][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1968.207846][T21699] pwc: recv_control_msg error -71 req 02 val 2200 [ 1968.214559][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1968.222749][T21700] pwc: Registered as video71. [ 1968.229534][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input67 [ 1968.247647][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 1968.268038][T21700] usb 3-1: USB disconnect, device number 7 [ 1968.277930][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 1968.307841][T21699] pwc: recv_control_msg error -71 req 02 val 2500 10:40:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x300}, 0x0) 10:40:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0xc008aec1, &(0x7f0000000000)) [ 1968.328147][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 1968.348538][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 1968.359912][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1968.377763][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 1968.400147][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 1968.423138][T21590] usb 4-1: ath9k_htc: Invalid TX pipe: 0 10:40:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x500}, 0x0) [ 1968.431411][T21590] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1968.440424][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 1968.469086][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 1968.482935][T21699] pwc: Registered as video71. [ 1968.508856][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input68 [ 1968.518953][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1968.538116][T21699] usb 5-1: USB disconnect, device number 110 [ 1968.627021][T15191] UDC core: couldn't find an available UDC or it's busy: -16 [ 1968.642953][T15191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1968.662125][T15191] UDC core: couldn't find an available UDC or it's busy: -16 10:40:10 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da245f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af2720176d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000000000000"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x89, &(0x7f0000000340)=@generic={0x4, 0x2, 0x81, "8c05cd79", "b1ca0a55102de3f3e6431cb6176f21b16bc6ed057f4ee7de5a5665801a60ec4d0c6f7cbfbfc01cbb4dfe71d779025e0c1d66f59f00b64cf7fcd48bfa2015a3be78dca738323bc20fe732f66260d6d2647b7697b1944edcca7c7d8918772859c054b55fc52925768ac9960c7a649f487c9c0eca283cd1a4f8f64f4dd5ad266bb4c7"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1968.671505][T15191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1968.692134][T14603] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1968.696711][T21143] usb 4-1: USB disconnect, device number 64 [ 1968.697933][T14603] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1968.715110][T21590] ath9k_htc: Failed to initialize the device [ 1968.726057][T21143] usb 4-1: ath9k_htc: USB layer deinitialized [ 1968.817821][T21700] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1968.893920][T12111] usb 2-1: USB disconnect, device number 111 [ 1968.910006][T14603] ath9k_htc: Failed to initialize the device [ 1968.916247][T12111] usb 2-1: ath9k_htc: USB layer deinitialized [ 1969.057554][T21700] usb 3-1: Using ep0 maxpacket: 32 [ 1969.137759][T21699] usb 5-1: new high-speed USB device number 111 using dummy_hcd 10:40:11 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:11 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000240)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000040480932ec9b10ccf2ef8fafe9330c9100e25a21fa"]) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x0, 0x0, 0x80}}) (rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "1152d6f5", {0x3, 0x1, 0x0, 0x81, 0x1, 0x2, 0xff}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)) 10:40:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x600}, 0x0) [ 1969.397654][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1969.429130][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1969.439280][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:40:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x700}, 0x0) [ 1969.447980][T21700] usb 3-1: Product: syz [ 1969.461603][T21700] usb 3-1: Manufacturer: syz [ 1969.473553][T21700] usb 3-1: SerialNumber: syz [ 1969.507120][T21700] usb 3-1: config 0 descriptor?? [ 1969.517695][T12111] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1969.537054][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x900}, 0x0) 10:40:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)) [ 1969.560282][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1969.612772][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1969.767598][T12111] usb 4-1: Using ep0 maxpacket: 32 [ 1969.767998][T21699] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1969.782100][T14603] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1969.789992][T21699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.798258][T21699] usb 5-1: Product: syz [ 1969.802427][T21699] usb 5-1: Manufacturer: syz [ 1969.807032][T21699] usb 5-1: SerialNumber: syz [ 1969.858552][T21699] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1970.047613][T12111] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1970.056881][T12111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.065889][T12111] usb 4-1: Product: syz [ 1970.070654][T12111] usb 4-1: Manufacturer: syz [ 1970.075268][T12111] usb 4-1: SerialNumber: syz [ 1970.081765][T12111] usb 4-1: config 0 descriptor?? [ 1970.119270][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 1970.217688][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1970.258206][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1970.308303][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1970.367778][T14603] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1970.377009][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1970.383593][T14603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.391960][T14603] usb 2-1: Product: syz [ 1970.396286][T14603] usb 2-1: Manufacturer: syz [ 1970.401224][T14603] usb 2-1: SerialNumber: syz [ 1970.437667][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 1970.458491][T14603] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1970.487768][T21700] pwc: recv_control_msg error -71 req 04 val 1300 [ 1970.507820][T21699] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1970.517718][T21700] pwc: recv_control_msg error -71 req 04 val 1400 [ 1970.547705][T21700] pwc: recv_control_msg error -71 req 02 val 2000 [ 1970.569630][T21700] pwc: recv_control_msg error -71 req 02 val 2100 [ 1970.587797][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 1970.617719][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 1970.642078][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 1970.667975][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 1970.717600][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1970.760224][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 1970.777589][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1970.787653][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1970.813579][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1970.817547][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 1970.839221][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1970.857749][T12111] pwc: recv_control_msg error -32 req 04 val 1700 [ 1970.868884][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1970.876527][T21700] pwc: Registered as video71. [ 1970.883408][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 1970.898655][T21700] usb 3-1: USB disconnect, device number 8 [ 1970.907706][T12111] pwc: recv_control_msg error -32 req 02 val 2c00 10:40:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xa00}, 0x0) 10:40:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000000)) [ 1970.961170][T12111] pwc: recv_control_msg error -32 req 04 val 1000 [ 1970.981221][T21699] usb 5-1: ath9k_htc: Invalid TX pipe: 0 [ 1970.986921][T21699] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1971.031840][T12111] pwc: recv_control_msg error -32 req 04 val 1300 [ 1971.078873][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1971.097663][T12111] pwc: recv_control_msg error -32 req 04 val 1400 [ 1971.138554][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 1971.157542][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 1971.167799][T14603] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:40:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, 0x0) [ 1971.185869][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 1971.199104][T15214] UDC core: couldn't find an available UDC or it's busy: -16 [ 1971.206524][T15214] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1971.219069][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 1971.221828][T15214] UDC core: couldn't find an available UDC or it's busy: -16 [ 1971.235548][T15214] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1971.238081][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 1971.265593][T30410] usb 5-1: USB disconnect, device number 111 [ 1971.281467][T21699] ath9k_htc: Failed to initialize the device [ 1971.287674][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 1971.288465][T30410] usb 5-1: ath9k_htc: USB layer deinitialized [ 1971.309573][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 1971.347637][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 1971.367703][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 1971.397738][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 1971.417675][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 1971.443132][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 1971.454812][T12111] pwc: Registered as video71. [ 1971.457603][T21700] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1971.462726][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70 [ 1971.505804][T12111] usb 4-1: USB disconnect, device number 65 [ 1971.707628][T21700] usb 3-1: Using ep0 maxpacket: 32 10:40:13 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xc00}, 0x0) [ 1971.835958][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1971.939837][T14603] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1971.945508][T14603] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1972.047754][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1972.057330][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.066114][T21700] usb 3-1: Product: syz [ 1972.071054][T21700] usb 3-1: Manufacturer: syz [ 1972.075817][T21700] usb 3-1: SerialNumber: syz [ 1972.087789][T21700] usb 3-1: config 0 descriptor?? [ 1972.117713][T21699] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1972.129289][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1972.397946][T21699] usb 5-1: Using ep0 maxpacket: 32 [ 1972.737832][T21699] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1972.750415][T21699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.761256][T21699] usb 5-1: Product: syz [ 1972.765569][T21699] usb 5-1: Manufacturer: syz [ 1972.773039][T21699] usb 5-1: SerialNumber: syz [ 1972.790072][T21699] usb 5-1: config 0 descriptor?? [ 1972.802726][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1972.831830][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 1972.847572][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1972.897820][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1972.937795][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1972.987779][T21700] pwc: recv_control_msg error -71 req 04 val 1000 [ 1973.010433][T21700] pwc: recv_control_msg error -71 req 04 val 1300 [ 1973.039613][T21700] pwc: recv_control_msg error -71 req 04 val 1400 [ 1973.058014][T21700] pwc: recv_control_msg error -71 req 02 val 2000 [ 1973.077696][T21700] pwc: recv_control_msg error -71 req 02 val 2100 10:40:15 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000240)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000040480932ec9b10ccf2ef8fafe9330c9100e25a21fa"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x0, 0x0, 0x80}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "1152d6f5", {0x3, 0x1, 0x0, 0x81, 0x1, 0x2, 0xff}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000240)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb800000040480932ec9b10ccf2ef8fafe9330c9100e25a21fa"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x0, 0x0, 0x80}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "1152d6f5", {0x3, 0x1, 0x0, 0x81, 0x1, 0x2, 0xff}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) 10:40:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, 0x0) 10:40:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xe00}, 0x0) [ 1973.097689][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 1973.119360][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 1973.141412][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 1973.175528][T19272] usb 2-1: USB disconnect, device number 112 [ 1973.183874][T14603] ath9k_htc: Failed to initialize the device [ 1973.190776][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 1973.200391][T19272] usb 2-1: ath9k_htc: USB layer deinitialized [ 1973.209896][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1973.232413][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1973.267819][T21700] pwc: recv_control_msg error -71 req 02 val 2600 10:40:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xf00}, 0x0) 10:40:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, 0x0) [ 1973.297775][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1973.319497][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1973.334585][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1973.347855][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1973.388560][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1973.410261][T21700] pwc: Registered as video71. [ 1973.431317][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input71 [ 1973.445328][T21700] usb 3-1: USB disconnect, device number 9 [ 1973.467725][T30410] usb 4-1: new high-speed USB device number 66 using dummy_hcd 10:40:15 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:15 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000240)={[{0xb, 0x4e00, "c7dc6b1a4669337a9e7be6"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x17e9}, 0x0) [ 1973.490154][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1973.519780][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x1f00}, 0x0) [ 1973.568953][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 1973.624537][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1973.634068][T21699] pwc: recv_control_msg error -32 req 04 val 1700 [ 1973.641485][T19272] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1973.688120][T21699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1973.738481][T21699] pwc: recv_control_msg error -32 req 04 val 1000 [ 1973.747644][T30410] usb 4-1: Using ep0 maxpacket: 32 [ 1973.798189][T21699] pwc: recv_control_msg error -32 req 04 val 1300 [ 1973.847542][T12111] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1973.858425][T21699] pwc: recv_control_msg error -32 req 04 val 1400 [ 1973.897716][T21699] pwc: recv_control_msg error -71 req 02 val 2000 [ 1973.918089][T21699] pwc: recv_control_msg error -71 req 02 val 2100 [ 1973.947953][T21700] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1973.957357][T21699] pwc: recv_control_msg error -71 req 02 val 2200 [ 1973.998666][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 1974.027928][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 1974.049597][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 1974.067688][T30410] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1974.077107][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 1974.084329][T30410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.093512][T30410] usb 4-1: Product: syz [ 1974.098280][T30410] usb 4-1: Manufacturer: syz [ 1974.103162][T30410] usb 4-1: SerialNumber: syz [ 1974.108501][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 1974.126149][T30410] usb 4-1: config 0 descriptor?? [ 1974.132709][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 1974.159792][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 1974.189944][T30410] pwc: Samsung MPC-C10 USB webcam detected. [ 1974.199470][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 1974.207593][T21700] usb 3-1: Using ep0 maxpacket: 32 [ 1974.213332][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1974.223060][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 1974.229833][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.247739][T21699] pwc: Registered as video71. [ 1974.253895][T19272] usb 2-1: Product: syz [ 1974.268068][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input72 [ 1974.281552][T19272] usb 2-1: Manufacturer: syz [ 1974.290245][T19272] usb 2-1: SerialNumber: syz [ 1974.311317][T21699] usb 5-1: USB disconnect, device number 112 [ 1974.359629][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1974.367707][T12111] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1974.367745][T12111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.367772][T12111] usb 1-1: Product: syz [ 1974.367791][T12111] usb 1-1: Manufacturer: syz [ 1974.424473][T12111] usb 1-1: SerialNumber: syz 10:40:16 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x2000}, 0x0) [ 1974.498268][T12111] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1974.515787][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1974.537758][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1974.550855][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.567639][T21700] usb 3-1: Product: syz [ 1974.575341][T21700] usb 3-1: Manufacturer: syz [ 1974.581291][T21700] usb 3-1: SerialNumber: syz [ 1974.597326][T21700] usb 3-1: config 0 descriptor?? [ 1974.643386][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1974.847915][T30410] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1974.887886][T30410] pwc: recv_control_msg error -32 req 02 val 2700 [ 1974.917626][T21699] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1974.937761][T30410] pwc: recv_control_msg error -32 req 04 val 1700 [ 1974.978620][T30410] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1975.017802][T19272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1975.027501][T30410] pwc: recv_control_msg error -32 req 04 val 1000 [ 1975.077726][T30410] pwc: recv_control_msg error -32 req 04 val 1300 [ 1975.084379][T21700] pwc: send_video_command error -71 [ 1975.087652][T12111] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1975.089813][T21700] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1975.107136][T21700] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1975.126784][T21700] usb 3-1: USB disconnect, device number 10 [ 1975.152400][T30410] pwc: recv_control_msg error -32 req 04 val 1400 [ 1975.177572][T21699] usb 5-1: Using ep0 maxpacket: 32 [ 1975.198555][T30410] pwc: recv_control_msg error -71 req 02 val 2000 [ 1975.227693][T30410] pwc: recv_control_msg error -71 req 02 val 2100 [ 1975.268002][T30410] pwc: recv_control_msg error -71 req 02 val 2200 [ 1975.298841][T30410] pwc: recv_control_msg error -71 req 06 val 0600 [ 1975.335953][T30410] pwc: recv_control_msg error -71 req 04 val 1500 [ 1975.358888][T30410] pwc: recv_control_msg error -71 req 02 val 2500 [ 1975.392216][T30410] pwc: recv_control_msg error -71 req 02 val 2400 [ 1975.417698][T30410] pwc: recv_control_msg error -71 req 02 val 2600 [ 1975.448481][T30410] pwc: recv_control_msg error -71 req 02 val 2900 [ 1975.468073][T30410] pwc: recv_control_msg error -71 req 02 val 2800 [ 1975.487936][T30410] pwc: recv_control_msg error -71 req 04 val 1100 [ 1975.511554][T30410] pwc: recv_control_msg error -71 req 04 val 1200 [ 1975.527825][T21699] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1975.536909][T21699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.545508][T30410] pwc: Registered as video71. [ 1975.561279][T30410] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input73 [ 1975.561295][T12111] usb 1-1: ath9k_htc: Invalid TX pipe: 0 [ 1975.561334][T12111] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1975.574424][T21699] usb 5-1: Product: syz [ 1975.626077][T30410] usb 4-1: USB disconnect, device number 66 [ 1975.636396][T19272] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1975.643042][T19272] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1975.657709][T21699] usb 5-1: Manufacturer: syz [ 1975.662328][T21699] usb 5-1: SerialNumber: syz [ 1975.679729][T21699] usb 5-1: config 0 descriptor?? [ 1975.719997][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 1975.760330][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.766651][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.767220][T21143] usb 1-1: USB disconnect, device number 106 [ 1975.783306][T12111] ath9k_htc: Failed to initialize the device [ 1975.793800][T21143] usb 1-1: ath9k_htc: USB layer deinitialized [ 1975.838570][T15256] UDC core: couldn't find an available UDC or it's busy: -16 [ 1975.845984][T15256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1976.091600][T30410] usb 2-1: USB disconnect, device number 113 [ 1976.101757][T19272] ath9k_htc: Failed to initialize the device [ 1976.111992][T30410] usb 2-1: ath9k_htc: USB layer deinitialized [ 1976.347574][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1976.389474][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 1976.447552][T21699] pwc: recv_control_msg error -32 req 04 val 1700 [ 1976.487715][T21699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1976.537613][T21699] pwc: recv_control_msg error -32 req 04 val 1000 [ 1976.577587][T21699] pwc: recv_control_msg error -32 req 04 val 1300 10:40:18 executing program 1: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000280)={0x9, "96ec114565835ff971684964a6b31588edcc768de9c664af5e42366bc6e49c5a", 0x40, 0x1, 0x6c, 0xdc3c5b8ab978aa4f, 0x7}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da057e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ff81f5ea299671afff2ba91fa80fdce44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a67604825b7decf6842dad6fae4f806b1c8c8289daa24de11806152594d55ce9f9ac"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x4}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "b5ac576a", {0x3, 0x107, 0x0, 0x2, 0xe3, 0x20, 0x1f}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "5cd6f778", {0x1, 0x7fff, 0x3, 0x2, 0x3}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "0d133018", {0x3, 0x2, 0x0, 0x9, 0x81, 0x3f, 0x40}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x4800}, 0x0) 10:40:18 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:40:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:18 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1976.617646][T21699] pwc: recv_control_msg error -32 req 04 val 1400 [ 1976.650021][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1976.659574][T21699] pwc: recv_control_msg error -71 req 02 val 2000 10:40:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x4c00}, 0x0) [ 1976.677588][T21699] pwc: recv_control_msg error -71 req 02 val 2100 [ 1976.707737][T21699] pwc: recv_control_msg error -71 req 02 val 2200 10:40:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x5865}, 0x0) [ 1976.737729][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 1976.740231][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1976.762489][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 1976.787852][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 1976.800716][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1976.810550][T21699] pwc: recv_control_msg error -71 req 02 val 2400 10:40:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x6000}, 0x0) 10:40:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x6558}, 0x0) [ 1976.837699][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 1976.852062][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1976.867987][T21699] pwc: recv_control_msg error -71 req 02 val 2900 10:40:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x6800}, 0x0) [ 1976.896310][T15298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1976.897584][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 1976.917529][T21143] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1976.927595][T19272] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1976.935580][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 1976.967059][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1976.967669][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 1976.985606][T21699] pwc: Registered as video71. [ 1976.993154][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input74 [ 1977.007598][T21699] usb 5-1: USB disconnect, device number 113 10:40:19 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x6c00}, 0x0) [ 1977.177725][T21143] usb 1-1: Using ep0 maxpacket: 32 [ 1977.207971][T19272] usb 4-1: Using ep0 maxpacket: 32 10:40:19 executing program 1: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000280)={0x9, "96ec114565835ff971684964a6b31588edcc768de9c664af5e42366bc6e49c5a", 0x40, 0x1, 0x6c, 0xdc3c5b8ab978aa4f, 0x7}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da057e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ff81f5ea299671afff2ba91fa80fdce44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a67604825b7decf6842dad6fae4f806b1c8c8289daa24de11806152594d55ce9f9ac"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x4}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "b5ac576a", {0x3, 0x107, 0x0, 0x2, 0xe3, 0x20, 0x1f}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "5cd6f778", {0x1, 0x7fff, 0x3, 0x2, 0x3}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "0d133018", {0x3, 0x2, 0x0, 0x9, 0x81, 0x3f, 0x40}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) pipe2(&(0x7f0000000240), 0x80800) (async) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000280)={0x9, "96ec114565835ff971684964a6b31588edcc768de9c664af5e42366bc6e49c5a", 0x40, 0x1, 0x6c, 0xdc3c5b8ab978aa4f, 0x7}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da057e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ff81f5ea299671afff2ba91fa80fdce44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a67604825b7decf6842dad6fae4f806b1c8c8289daa24de11806152594d55ce9f9ac"]) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x4}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "b5ac576a", {0x3, 0x107, 0x0, 0x2, 0xe3, 0x20, 0x1f}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "5cd6f778", {0x1, 0x7fff, 0x3, 0x2, 0x3}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "0d133018", {0x3, 0x2, 0x0, 0x9, 0x81, 0x3f, 0x40}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) 10:40:19 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:40:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x7400}, 0x0) [ 1977.233281][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1977.309578][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1977.457842][T21143] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1977.471418][T21143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.481616][T21143] usb 1-1: Product: syz [ 1977.485854][T21143] usb 1-1: Manufacturer: syz [ 1977.492319][T21143] usb 1-1: SerialNumber: syz [ 1977.508454][T21143] usb 1-1: config 0 descriptor?? [ 1977.530748][T19272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1977.540195][T19272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.549114][T19272] usb 4-1: Product: syz [ 1977.553516][T19272] usb 4-1: Manufacturer: syz [ 1977.556265][T21143] pwc: Samsung MPC-C10 USB webcam detected. [ 1977.558955][T19272] usb 4-1: SerialNumber: syz [ 1977.569646][T21699] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1977.587211][T19272] usb 4-1: config 0 descriptor?? [ 1977.629372][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1977.827532][T21699] usb 5-1: Using ep0 maxpacket: 32 [ 1977.987654][T21143] pwc: send_video_command error -71 [ 1977.992877][T21143] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1978.001467][T21143] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 1978.011093][T21143] usb 1-1: USB disconnect, device number 107 [ 1978.147649][T21699] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1978.161452][T21699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.170267][T21699] usb 5-1: Product: syz [ 1978.174585][T21699] usb 5-1: Manufacturer: syz [ 1978.179845][T21699] usb 5-1: SerialNumber: syz [ 1978.188097][T21699] usb 5-1: config 0 descriptor?? [ 1978.230029][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 1978.267614][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1978.307583][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1978.347717][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1978.387728][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1978.429330][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1978.467686][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1978.507606][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1978.547597][T19272] pwc: recv_control_msg error -71 req 02 val 2000 [ 1978.567593][T19272] pwc: recv_control_msg error -71 req 02 val 2100 [ 1978.587590][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 1978.608570][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 1978.629523][T19272] pwc: recv_control_msg error -71 req 04 val 1500 [ 1978.649632][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 1978.669081][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1978.688719][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1978.708303][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1978.728294][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1978.748442][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1978.768365][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1978.775590][T19272] pwc: Registered as video71. [ 1978.801296][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input75 [ 1978.848822][T19272] usb 4-1: USB disconnect, device number 67 [ 1978.887587][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1978.927686][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 1978.967536][T21699] pwc: recv_control_msg error -32 req 04 val 1700 10:40:21 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f0000000240)={[{0x15, 0x4e00, "c7dc6b1a4669337a9e7be621bc2866ec482921e48a"}, {0x2b, 0x4e00, "caa8e564c797ec387a32f8891fd398a0f0ec1b0b12013a9bf08576cd14b89a197c1f3e7587588954554c24"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x7a00}, 0x0) 10:40:21 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:40:21 executing program 1: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000280)={0x9, "96ec114565835ff971684964a6b31588edcc768de9c664af5e42366bc6e49c5a", 0x40, 0x1, 0x6c, 0xdc3c5b8ab978aa4f, 0x7}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da057e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ff81f5ea299671afff2ba91fa80fdce44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a67604825b7decf6842dad6fae4f806b1c8c8289daa24de11806152594d55ce9f9ac"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x4}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "b5ac576a", {0x3, 0x107, 0x0, 0x2, 0xe3, 0x20, 0x1f}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "5cd6f778", {0x1, 0x7fff, 0x3, 0x2, 0x3}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "0d133018", {0x3, 0x2, 0x0, 0x9, 0x81, 0x3f, 0x40}}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:21 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1979.007539][T21699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1979.047613][T21699] pwc: recv_control_msg error -32 req 04 val 1000 10:40:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x8100}, 0x0) [ 1979.089828][T21699] pwc: recv_control_msg error -32 req 04 val 1300 [ 1979.099991][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xe917}, 0x0) [ 1979.147566][T21699] pwc: recv_control_msg error -32 req 04 val 1400 [ 1979.159992][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1979.187631][T21699] pwc: recv_control_msg error -32 req 02 val 2000 [ 1979.218023][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1979.227853][T21699] pwc: recv_control_msg error -32 req 02 val 2100 [ 1979.267547][T21699] pwc: recv_control_msg error -32 req 02 val 2200 [ 1979.309191][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 1979.327921][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 1979.347612][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 1979.367527][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 1979.377811][ T4237] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1979.388144][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 1979.397779][T19272] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1979.408918][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 1979.427533][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 1979.447513][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 1979.467734][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 1979.475479][T21699] pwc: Registered as video71. [ 1979.488455][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input76 [ 1979.520628][T21699] usb 5-1: USB disconnect, device number 114 [ 1979.645202][ T4237] usb 1-1: Using ep0 maxpacket: 32 10:40:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xf000}, 0x0) 10:40:22 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:22 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x34c, &(0x7f0000000380)=ANY=[]) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae190000008ca6f7daa24de11806152594d55ce9f9acb8000000"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x32, &(0x7f0000000000)=@generic={0x5, 0x0, 0x2a, "97208072", "017163a9da2bf6b951521828fb07b60add41581c3e652ba6b38dd4696dc96ae606b51ef7f68167a4f4ae"}) 10:40:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x34000}, 0x0) [ 1979.893663][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1979.917819][T19272] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1979.926910][T19272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.948947][T19272] usb 4-1: Product: syz [ 1979.953383][T19272] usb 4-1: Manufacturer: syz [ 1979.965606][T19272] usb 4-1: SerialNumber: syz [ 1979.967825][ T4237] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1979.981042][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1979.990658][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.004825][ T4237] usb 1-1: Product: syz [ 1980.015946][ T4237] usb 1-1: Manufacturer: syz [ 1980.021388][ T4237] usb 1-1: SerialNumber: syz [ 1980.028510][T19272] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1980.055491][ T4237] usb 1-1: config 0 descriptor?? [ 1980.106989][ T4237] pwc: Samsung MPC-C10 USB webcam detected. [ 1980.167661][T21699] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1980.217587][T12111] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1980.477550][T12111] usb 5-1: Using ep0 maxpacket: 32 [ 1980.607616][T21700] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1980.687643][T21699] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1980.696941][T21699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.707784][T21699] usb 2-1: Product: syz [ 1980.712096][T21699] usb 2-1: Manufacturer: syz [ 1980.716797][T21699] usb 2-1: SerialNumber: syz [ 1980.747883][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1980.768465][T21699] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1980.787755][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1980.794619][T12111] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1980.804137][T12111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.812897][T12111] usb 5-1: Product: syz [ 1980.817196][T12111] usb 5-1: Manufacturer: syz [ 1980.823843][T12111] usb 5-1: SerialNumber: syz [ 1980.831879][T12111] usb 5-1: config 0 descriptor?? [ 1980.847633][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 1980.899514][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 1980.905641][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1980.947580][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1980.997551][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 1981.037566][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 1981.071529][T21700] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1981.077452][T21700] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1981.087591][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 1981.137864][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 1981.187603][ T4237] pwc: recv_control_msg error -32 req 02 val 2200 [ 1981.247568][ T4237] pwc: recv_control_msg error -32 req 06 val 0600 [ 1981.290807][T19272] usb 4-1: USB disconnect, device number 68 [ 1981.307762][ T4237] pwc: recv_control_msg error -32 req 04 val 1500 [ 1981.310787][T21700] ath9k_htc: Failed to initialize the device [ 1981.326634][T19272] usb 4-1: ath9k_htc: USB layer deinitialized [ 1981.337949][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1981.359239][ T4237] pwc: recv_control_msg error -32 req 02 val 2500 [ 1981.412073][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 1981.446391][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 1981.467746][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 1981.487599][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1981.517644][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1981.537633][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1981.554627][T15340] UDC core: couldn't find an available UDC or it's busy: -16 [ 1981.556462][ T4237] pwc: Registered as video71. [ 1981.573380][T15340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1981.577642][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input77 [ 1981.597510][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1981.647616][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 1981.659134][ T4237] usb 1-1: USB disconnect, device number 108 [ 1981.697688][T12111] pwc: recv_control_msg error -32 req 04 val 1700 [ 1981.747534][T12111] pwc: recv_control_msg error -32 req 02 val 2c00 10:40:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x400300}, 0x0) 10:40:24 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 1981.797656][T12111] pwc: recv_control_msg error -32 req 04 val 1000 [ 1981.820507][T21699] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1981.826208][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1981.837843][T12111] pwc: recv_control_msg error -32 req 04 val 1300 10:40:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xf0ffff}, 0x0) [ 1981.854075][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1981.897622][T12111] pwc: recv_control_msg error -32 req 04 val 1400 [ 1981.924879][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:24 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10:40:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x1000000}, 0x0) [ 1981.947728][T12111] pwc: recv_control_msg error -32 req 02 val 2000 [ 1981.987690][T12111] pwc: recv_control_msg error -32 req 02 val 2100 10:40:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x2000000}, 0x0) [ 1982.005328][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1982.035213][T15340] UDC core: couldn't find an available UDC or it's busy: -16 [ 1982.042974][T15340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1982.047724][T12111] pwc: recv_control_msg error -32 req 02 val 2200 [ 1982.055042][T14603] usb 2-1: USB disconnect, device number 114 [ 1982.066963][T21699] ath9k_htc: Failed to initialize the device [ 1982.077978][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1982.097884][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 1982.099843][T14603] usb 2-1: ath9k_htc: USB layer deinitialized [ 1982.117914][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 1982.158186][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 1982.177649][T19272] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1982.188996][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 1982.217554][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 1982.247550][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 1982.267562][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 1982.277627][T21700] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1982.298706][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 1982.335512][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 1982.342790][T12111] pwc: Registered as video71. [ 1982.350986][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input78 [ 1982.387527][T12111] usb 5-1: USB disconnect, device number 115 [ 1982.417812][T19272] usb 4-1: Using ep0 maxpacket: 32 [ 1982.517563][T21700] usb 1-1: Using ep0 maxpacket: 32 10:40:24 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x3000000}, 0x0) 10:40:24 executing program 2: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:24 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x34c, &(0x7f0000000380)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae190000008ca6f7daa24de11806152594d55ce9f9acb8000000"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x32, &(0x7f0000000000)=@generic={0x5, 0x0, 0x2a, "97208072", "017163a9da2bf6b951521828fb07b60add41581c3e652ba6b38dd4696dc96ae606b51ef7f68167a4f4ae"}) 10:40:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x4000000}, 0x0) [ 1982.692063][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1982.702182][T19272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1982.717277][T19272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.737140][T19272] usb 4-1: Product: syz 10:40:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x5000000}, 0x0) [ 1982.746636][T19272] usb 4-1: Manufacturer: syz [ 1982.755956][T19272] usb 4-1: SerialNumber: syz [ 1982.781839][T19272] usb 4-1: config 0 descriptor?? [ 1982.798428][T21700] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1982.823486][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1982.829492][T21700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.840670][T21700] usb 1-1: Product: syz 10:40:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x6000000}, 0x0) [ 1982.844855][T21700] usb 1-1: Manufacturer: syz [ 1982.856456][T21700] usb 1-1: SerialNumber: syz [ 1982.878970][T21700] usb 1-1: config 0 descriptor?? [ 1982.919924][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1982.967738][T12111] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1982.987640][ T4237] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1983.227880][ T4237] usb 5-1: Using ep0 maxpacket: 32 [ 1983.477581][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1983.517724][T12111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1983.518062][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1983.527274][T12111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.542728][ T4237] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1983.552022][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.563757][T12111] usb 2-1: Product: syz [ 1983.568318][ T4237] usb 5-1: Product: syz [ 1983.572747][T12111] usb 2-1: Manufacturer: syz [ 1983.577583][ T4237] usb 5-1: Manufacturer: syz [ 1983.577821][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1983.582427][T12111] usb 2-1: SerialNumber: syz [ 1983.588998][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1983.593501][ T4237] usb 5-1: SerialNumber: syz [ 1983.613380][ T4237] usb 5-1: config 0 descriptor?? [ 1983.637573][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1983.644124][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1983.648327][T12111] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1983.662595][ T4237] pwc: Samsung MPC-C10 USB webcam detected. [ 1983.697833][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1983.704363][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1983.737530][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1983.747958][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1983.779193][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1983.787704][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 1983.817968][T19272] pwc: recv_control_msg error -32 req 02 val 2000 [ 1983.827910][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 1983.857517][T19272] pwc: recv_control_msg error -32 req 02 val 2100 [ 1983.867981][T21700] pwc: recv_control_msg error -32 req 04 val 1400 [ 1983.897557][T19272] pwc: recv_control_msg error -32 req 02 val 2200 [ 1983.907519][T21700] pwc: recv_control_msg error -32 req 02 val 2000 [ 1983.937619][T19272] pwc: recv_control_msg error -32 req 06 val 0600 [ 1983.947531][T21700] pwc: recv_control_msg error -32 req 02 val 2100 [ 1983.977764][T19272] pwc: recv_control_msg error -32 req 04 val 1500 [ 1983.987741][T21700] pwc: recv_control_msg error -32 req 02 val 2200 [ 1984.017526][T19272] pwc: recv_control_msg error -32 req 02 val 2500 [ 1984.027732][T21700] pwc: recv_control_msg error -32 req 06 val 0600 [ 1984.057626][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1984.067750][T21700] pwc: recv_control_msg error -32 req 04 val 1500 [ 1984.077982][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1984.099068][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1984.107714][T21700] pwc: recv_control_msg error -32 req 02 val 2500 [ 1984.117597][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1984.138981][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1984.147579][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1984.167619][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 1984.174317][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1984.187716][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1984.196680][T19272] pwc: Registered as video71. [ 1984.213555][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input79 [ 1984.223593][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1984.248041][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1984.259612][T19272] usb 4-1: USB disconnect, device number 69 [ 1984.267551][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1984.283254][T21700] pwc: Registered as video72. [ 1984.300513][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input80 [ 1984.317806][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1984.324425][T30301] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1984.385736][T21700] usb 1-1: USB disconnect, device number 109 [ 1984.387512][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1984.457765][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 1984.507739][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1984.534596][T15364] UDC core: couldn't find an available UDC or it's busy: -16 [ 1984.542066][T15364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1984.550142][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1984.568459][T15364] UDC core: couldn't find an available UDC or it's busy: -16 [ 1984.576091][T15364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1984.591715][T30301] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1984.597595][T30301] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1984.605633][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 10:40:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:40:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x7000000}, 0x0) 10:40:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10:40:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x0, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1984.668078][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 1984.685203][T15382] __nla_validate_parse: 3 callbacks suppressed [ 1984.685225][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1984.707852][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 10:40:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x8000000}, 0x0) [ 1984.747996][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 1984.807600][ T4237] pwc: recv_control_msg error -32 req 02 val 2200 [ 1984.821807][T21699] usb 2-1: USB disconnect, device number 115 [ 1984.831128][T30301] ath9k_htc: Failed to initialize the device [ 1984.837428][T15390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1984.852646][T21699] usb 2-1: ath9k_htc: USB layer deinitialized [ 1984.868592][ T4237] pwc: recv_control_msg error -71 req 06 val 0600 [ 1984.908518][ T4237] pwc: recv_control_msg error -71 req 04 val 1500 [ 1984.927795][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 1984.947558][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 1984.967723][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 1984.988662][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 1984.997744][T21700] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1985.008137][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1985.017668][T15272] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1985.027997][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1985.047554][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1985.060799][ T4237] pwc: Registered as video71. [ 1985.067579][T19272] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1985.073493][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input81 [ 1985.124664][ T4237] usb 5-1: USB disconnect, device number 116 [ 1985.207495][T15272] usb 3-1: device descriptor read/64, error 18 [ 1985.247593][T21700] usb 4-1: Using ep0 maxpacket: 32 [ 1985.307520][T19272] usb 1-1: Using ep0 maxpacket: 32 10:40:27 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x9000000}, 0x0) 10:40:27 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x34c, &(0x7f0000000380)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae190000008ca6f7daa24de11806152594d55ce9f9acb8000000"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x32, &(0x7f0000000000)=@generic={0x5, 0x0, 0x2a, "97208072", "017163a9da2bf6b951521828fb07b60add41581c3e652ba6b38dd4696dc96ae606b51ef7f68167a4f4ae"}) 10:40:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xa000000}, 0x0) [ 1985.455889][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1985.477731][T15272] usb 3-1: new high-speed USB device number 12 using dummy_hcd 10:40:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xc000000}, 0x0) [ 1985.505826][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1985.527923][T21700] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1985.537675][T21700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.555959][T21700] usb 4-1: Product: syz [ 1985.560545][T21700] usb 4-1: Manufacturer: syz [ 1985.565160][T21700] usb 4-1: SerialNumber: syz [ 1985.574759][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1985.583334][T21700] usb 4-1: config 0 descriptor?? 10:40:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xe000000}, 0x0) [ 1985.597852][T19272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1985.618453][T19272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.626527][T19272] usb 1-1: Product: syz [ 1985.634316][T19272] usb 1-1: Manufacturer: syz [ 1985.639247][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1985.639621][T19272] usb 1-1: SerialNumber: syz 10:40:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xf000000}, 0x0) [ 1985.658320][T19272] usb 1-1: config 0 descriptor?? [ 1985.671005][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 1985.687524][T15272] usb 3-1: device descriptor read/64, error 18 [ 1985.701805][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1985.709056][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1985.735022][ T4237] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1985.752397][T30301] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1985.807716][T15272] usb usb3-port1: attempt power cycle [ 1985.997759][T30301] usb 5-1: Using ep0 maxpacket: 32 [ 1986.217514][T15272] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1986.297672][ T4237] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1986.307677][T15272] usb 3-1: Invalid ep0 maxpacket: 0 [ 1986.309461][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.317948][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1986.321378][T30301] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1986.336797][T30301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.345234][T30301] usb 5-1: Product: syz [ 1986.350737][ T4237] usb 2-1: Product: syz [ 1986.355069][T30301] usb 5-1: Manufacturer: syz [ 1986.357623][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1986.361143][ T4237] usb 2-1: Manufacturer: syz [ 1986.367819][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 1986.377862][T30301] usb 5-1: SerialNumber: syz [ 1986.383629][ T4237] usb 2-1: SerialNumber: syz [ 1986.390186][T30301] usb 5-1: config 0 descriptor?? [ 1986.398358][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1986.418472][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 1986.430718][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1986.440137][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1986.448535][ T4237] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1986.458820][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1986.465423][T15272] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1986.477571][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1986.499507][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 1986.517614][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1986.538575][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 1986.559046][T15272] usb 3-1: Invalid ep0 maxpacket: 0 [ 1986.564532][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1986.571189][T15272] usb usb3-port1: unable to enumerate USB device [ 1986.579070][T21700] pwc: recv_control_msg error -32 req 04 val 1400 [ 1986.617670][T21700] pwc: recv_control_msg error -32 req 02 val 2000 [ 1986.624299][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1986.667632][T21700] pwc: recv_control_msg error -32 req 02 val 2100 [ 1986.674308][T19272] pwc: recv_control_msg error -32 req 02 val 2000 [ 1986.718118][T21700] pwc: recv_control_msg error -32 req 02 val 2200 [ 1986.724793][T19272] pwc: recv_control_msg error -32 req 02 val 2100 [ 1986.757567][T21700] pwc: recv_control_msg error -32 req 06 val 0600 [ 1986.767951][T19272] pwc: recv_control_msg error -32 req 02 val 2200 [ 1986.797690][T21700] pwc: recv_control_msg error -32 req 04 val 1500 [ 1986.808308][T19272] pwc: recv_control_msg error -32 req 06 val 0600 [ 1986.837580][T21700] pwc: recv_control_msg error -32 req 02 val 2500 [ 1986.849104][T19272] pwc: recv_control_msg error -32 req 04 val 1500 [ 1986.888762][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 1986.895563][T19272] pwc: recv_control_msg error -32 req 02 val 2500 [ 1986.918676][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 1986.937626][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1986.944318][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 1986.967676][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1986.974279][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 1986.997552][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1987.004132][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 1987.028048][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1987.034716][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 1987.042565][T21700] pwc: Registered as video71. [ 1987.047901][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1987.067717][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1987.074583][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input82 [ 1987.087609][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1987.110649][T19272] pwc: Registered as video72. [ 1987.116108][T21700] usb 4-1: USB disconnect, device number 70 [ 1987.117979][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1987.142024][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input83 [ 1987.157743][ T4237] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1987.177677][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1987.192170][T19272] usb 1-1: USB disconnect, device number 110 [ 1987.227942][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1987.287523][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1987.327674][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1987.359286][T15395] UDC core: couldn't find an available UDC or it's busy: -16 [ 1987.366835][T15395] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.377148][T15410] UDC core: couldn't find an available UDC or it's busy: -16 [ 1987.392275][ T4237] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1987.398008][ T4237] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 10:40:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:40:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x10000000}, 0x0) [ 1987.405919][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1987.413561][T15410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1987.457636][T30301] pwc: recv_control_msg error -32 req 02 val 2000 [ 1987.467125][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:29 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1987.497835][T30301] pwc: recv_control_msg error -32 req 02 val 2100 [ 1987.544768][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 1987.568531][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1987.588980][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1987.612967][T21700] usb 2-1: USB disconnect, device number 116 [ 1987.631356][ T4237] ath9k_htc: Failed to initialize the device [ 1987.637920][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1987.644774][T21700] usb 2-1: ath9k_htc: USB layer deinitialized [ 1987.658530][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1987.677784][T30301] pwc: recv_control_msg error -71 req 02 val 2600 10:40:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x0, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x1f000000}, 0x0) [ 1987.697619][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1987.737725][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1987.767153][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1987.777697][T19272] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1987.777812][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1987.817799][T14603] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1987.827800][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1987.836908][T30301] pwc: Registered as video71. [ 1987.845418][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input84 [ 1987.861472][T30301] usb 5-1: USB disconnect, device number 117 10:40:30 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x20000000}, 0x0) [ 1988.027681][T19272] usb 4-1: Using ep0 maxpacket: 32 [ 1988.057582][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 1988.062916][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:30 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x4, 0x948, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0xc2, 0xf3, 0x92, 0x8, 0x6f8, 0x300c, 0x42ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x936, 0x2, 0x1f, 0x7, 0x1d0, 0x5, [{{0x9, 0x4, 0x66, 0x3, 0x8, 0xe, 0x1, 0x0, 0x11, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x20, 0x1, 0x80, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x75, 0x40, "ffb9", "b22649"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x4, 0x1, '5r!'}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8a2a506669fd"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x3, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0x1dc, 0xf0, 0x20, 0x0, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x20}, @obex={0x5, 0x24, 0x15, 0x7ff}]}], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x6, 0x1f}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}, @generic={0x3e, 0x3, "10d9f095c3254baa129b29ad494f08423d6630ccba973d59cba3ff391ae23415b220b7c02552ae31e11113df186cb2933b41104872ff5b83b016a17a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x3a, 0x2, 0x8, [@generic={0x8, 0x23, "f207c8955da1"}, @generic={0x7f, 0xe, "451c1b08020b8ad96924b2a7940e6eda0251393c05890015186d00e3558d640b55d724b159169e69dbd518d56870f3dba78d8148fceed166a824a21f14f6d26e6e261104cb88ef3c0cb27aa798669c65346d897c9b1bbfdebe4cf7841195a6cfbd44a81a9f0611bc183e84f3dcaa65766c2098420257624ce4107542ff"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x5ef, 0x8a, 0x1f, 0x3f, [@generic={0x40, 0x30, "32f5826ff749b19ce1232125f7ef6be6fb0e9ab8220a5f1b861bb003e2c4db91972b123abf669f7377240645050fec155cd250c10f06d8c103bc7fc87eea"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x8f, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9d, 0x8}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x1, 0x5, 0x80}}, {{0x9, 0x5, 0x9, 0x10, 0x8602fb871573af74, 0x1, 0x9, 0x1, [@generic={0x87, 0x22, "08362550506cc021e4c7e9915c679cca7bba2e3a191f7d4a878811ae67671d727e204b1077b19fda83cb625e284abcdae40d250ea2a3a8c45caac0d2756872efb8c88bbc3bf89d4cd837c932d29c48e63942f6e313abd1efd19ee6577646a78f1622d0ff9287a700755963347d991c267e081c3fb85e73d98a75be0e2254fffb43984c51c2"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x30}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xd0, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x6}]}}]}}, {{0x9, 0x4, 0x55, 0x7f, 0xc, 0xe, 0x1, 0x0, 0x4, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf9, 0x4, 0xc5, 0x0, "ac08"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x7, 0x6, 0x1, [@generic={0x21, 0x6, "d82644ed308ca77249f1f17362f3d3ac17f0c0a0b53a0944299018494f1184"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0x4b, 0x5, [@generic={0x6a, 0x3a, "db4fa2740cfc8481ba54bc8bd4c430d2f258edb0f355f689be28bcc58629327ffa898f9abf461adb25d9f49c6df4148583ae7a7cf71edd708fa52ca64c18321ba6928f8f9bca11f115c55d873232cd9c280bd71f689403cc47c5592d2fc43bbff3c9261f6d423c5c"}, @generic={0xbb, 0x8, "b5b0af2d76767930955d3846c2706f1a828519136c9914758c06c1de91793f17d85b1444ea6f20ec37848e8dd045cb13fd732b79ed06bfabb1b80a8356393c8cbc8fb04d55fe301ec062fcc4df211aee1d24e2379ce3f96c0a588bb3107e206ee670094a3a04ab47001af923e78d68f2c765f0016f720b0527d8d9e93d1e14d18d9b9b533addbf77ec27e6b7ec1c2a270baaf7e26b274f00fe65beed34cbc168b97ef34b3869a6445430bd2e7a8d8dbb8f2d508afccc8cbfbc"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x2, 0x0, 0x20, [@generic={0x7c, 0x21, "cdca214f5a5ef10268263fd0ff38195c8276cb1aedeb982153b59424f37d883eb26416bd9391af54323b3520cefeb7cbf0d6661e1f0cafdd9f000910c183874619c290e6f90e3f1e4acb17adbfd9798d0cba2a26e7b3bf995ca15a13f6a3a44cf0cf35d8ba546283141612bced97536ce5903ced46925ec745a5"}]}}, {{0x9, 0x5, 0x3, 0x5, 0x20, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0xb, 0x7, 0x40, 0x77, 0x36, 0xbd}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xf, 0x5, 0x4, [@generic={0x83, 0x5, "fe8a97f0cfa47fcd16bea5087f492bc8a6daa51a0cb4b4d66726fd1076fd9efdd3fefeeda7f924bbc3ed21b348bd72da9c8c76493f534cb0420e68e4e41147222c6f9a4d175bf9c29b25bf045ce9cd9988a6fb7d7199b5ee2ad35e4cde3779889edbe85cbc2d731c60abc0d9565332bfd2272e5f6ea2d84fd0d4102b8f28a1e174"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x1, 0x80, 0x0, [@generic={0x82, 0x5, "78f1a36c0b522acf1f6d158bc79eef6e0138e92d3af378c4e6ac7f4474f9f0e5475e631dece59061fe3133c8eb7329f580cd3706a86a5dc0b36193f873d4824e212399ff146a10babaa2f111baf3013baafad988c729cfc93acc072fd1ea51da1d89e10af341867220a0893f8c39685667bbcb658402dbcf308bf423aa1202f5"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x94, 0x81, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x4}, @generic={0x80, 0x4, "e1ff04ba051274be16a5f537f79e7f9b39966a8a0601282cbc668d79e3228bf3443ecae025ddc284611f608e823926e923ba5135a70bfb7041e3b6d81417989776fd4dd35ed547cf97deff87b9fcfb4411b9bf1870d6610638ca1dfa170c54f50720d42423404a81f7dc8e792bc2ae9ca000e2c8890f03a234f5b78ad276"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x8, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x19f}]}}, {{0x9, 0x5, 0x5, 0x14, 0x3ff, 0x20, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x6}, @generic={0xc8, 0x8, "801e071aa7cf24cd170ed804cf282016aaa5df601f1f2872ed0d1b3407157c3936696889f4a92151782a7b9b966a49661fda56566f1d15d011626ff6671d383045e7c1d0f422566a047edb98197382641086f3cfdc47e0858508d3e505db32bd9a579a01cc938f7a552bc8baf063a727c6f2fc5283aeec5947ac62895652d73e8275b28eda83e8a0421af8bb4acdbeed3a8368cef1ee4a88cac7e96cf47f323b8f9b3cf2114fd88f385bacda73911189bdec4581760a3c8976e1ef3483e32a54973c0c0addce"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x30, 0x81, 0x3d, [@generic={0x30, 0x68, "dd7a51f30fcf44ee46f92bff865e814bf10c5870710f8af0339b11b4d4ffb4153954b8e1553a2943e5b1a90df481"}, @generic={0xff, 0x6, "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"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0xf9, 0x39, 0x80, [@generic={0x100, 0x10, "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"}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1c, 0x8, 0x7, 0x8, 0x6}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x62, 0x9f, 0x6, 0x1}]}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8d, &(0x7f0000001080)=@generic={0x2, 0x2, 0x85, "0f5a26d8", "d62a41ae4076a30eb55eb0d4c781ca99e0616678bd4d623777346f7d5059ec6f28d78a2a6c00dd45fa6a3db9807fe7214ada68f1d034f2cfb8b3ee979c3834dd94289248ca606a08fcfcda3202688424ef59e99389214093dc9a229c27b244f2ec4dffcf501014b14b1971263c29ff49f585f9bcb3bdb2aaf0fbabcfbbc859ba2d5e22cc60"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0xb}, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f00000003c0)="ce", 0xfef4, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0xf003, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x4008844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002e0000042fbd4a3b90bfdf5e327eac62f50aeb31a053d82f24ad003d", @ANYRES32=0x0, @ANYBLOB="0e000100e0ff0c000b000800"], 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x800) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x8) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "00001000", {0x3, 0x106}}) fcntl$setpipe(r1, 0x407, 0x3f) 10:40:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x48000000}, 0x0) 10:40:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x4c000000}, 0x0) 10:40:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x60000000}, 0x0) 10:40:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x65580000}, 0x0) [ 1988.217854][T15272] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1988.307708][T19272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1988.320656][T19272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.333823][T19272] usb 4-1: Product: syz [ 1988.341448][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1988.354072][T19272] usb 4-1: Manufacturer: syz [ 1988.361710][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.372881][T19272] usb 4-1: SerialNumber: syz [ 1988.382002][T19272] usb 4-1: config 0 descriptor?? [ 1988.387133][T14603] usb 1-1: Product: syz [ 1988.394651][T14603] usb 1-1: Manufacturer: syz [ 1988.402463][T14603] usb 1-1: SerialNumber: syz [ 1988.409065][T14603] usb 1-1: config 0 descriptor?? [ 1988.420474][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1988.426518][T15272] usb 3-1: device descriptor read/64, error 18 [ 1988.437528][T21700] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1988.449953][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 1988.487488][T30301] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1988.697567][T15272] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1988.737453][T30301] usb 5-1: Using ep0 maxpacket: 32 [ 1988.897669][T15272] usb 3-1: device descriptor read/64, error 18 [ 1988.957944][T21700] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1988.971523][T21700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.980033][T21700] usb 2-1: Product: syz [ 1988.984310][T21700] usb 2-1: Manufacturer: syz [ 1988.989271][T21700] usb 2-1: SerialNumber: syz [ 1989.017976][T15272] usb usb3-port1: attempt power cycle [ 1989.039236][T21700] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1989.077652][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1989.087744][T30301] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1989.096919][T30301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.105130][T30301] usb 5-1: Product: syz [ 1989.107774][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1989.109535][T30301] usb 5-1: Manufacturer: syz [ 1989.119738][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1989.129525][T30301] usb 5-1: SerialNumber: syz [ 1989.137559][T30301] usb 5-1: config 0 descriptor?? [ 1989.148223][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 1989.158320][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1989.187816][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 1989.190635][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1989.201431][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1989.247693][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1989.254263][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1989.297617][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 1989.304494][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1989.348430][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 1989.355122][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1989.408003][T14603] pwc: recv_control_msg error -32 req 04 val 1400 [ 1989.414885][T19272] pwc: recv_control_msg error -32 req 02 val 2000 [ 1989.439292][T15272] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1989.457646][T14603] pwc: recv_control_msg error -32 req 02 val 2000 [ 1989.464363][T19272] pwc: recv_control_msg error -32 req 02 val 2100 [ 1989.507708][T14603] pwc: recv_control_msg error -32 req 02 val 2100 [ 1989.514566][T19272] pwc: recv_control_msg error -32 req 02 val 2200 [ 1989.538649][T15272] usb 3-1: Invalid ep0 maxpacket: 0 [ 1989.560205][T14603] pwc: recv_control_msg error -32 req 02 val 2200 [ 1989.566887][T19272] pwc: recv_control_msg error -32 req 06 val 0600 [ 1989.607733][T14603] pwc: recv_control_msg error -32 req 06 val 0600 [ 1989.615089][T19272] pwc: recv_control_msg error -32 req 04 val 1500 [ 1989.627741][T21700] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1989.658499][T14603] pwc: recv_control_msg error -32 req 04 val 1500 [ 1989.665256][T19272] pwc: recv_control_msg error -32 req 02 val 2500 [ 1989.687525][T15272] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1989.697750][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 1989.707567][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1989.727737][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 1989.734497][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1989.757880][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 1989.764574][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1989.787641][T15272] usb 3-1: Invalid ep0 maxpacket: 0 [ 1989.793233][T15272] usb usb3-port1: unable to enumerate USB device [ 1989.800076][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 1989.806750][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1989.819419][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 1989.838304][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1989.845430][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 1989.857774][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1989.866414][T19272] pwc: Registered as video71. [ 1989.867699][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1989.871548][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 1989.886906][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input85 [ 1989.898691][T14603] pwc: Registered as video72. [ 1989.905427][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input86 [ 1989.917934][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1989.939378][T19272] usb 4-1: USB disconnect, device number 71 [ 1989.957674][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1989.989339][T14603] usb 1-1: USB disconnect, device number 111 [ 1989.997880][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1990.047608][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1990.125178][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1990.187566][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1990.227587][T30301] pwc: recv_control_msg error -32 req 02 val 2000 10:40:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10:40:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x68000000}, 0x0) 10:40:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1990.267653][T30301] pwc: recv_control_msg error -32 req 02 val 2100 [ 1990.282801][T14603] usb 2-1: USB disconnect, device number 117 [ 1990.328617][T15440] __nla_validate_parse: 4 callbacks suppressed [ 1990.328638][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1990.344603][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 1990.372863][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1990.417736][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1990.448279][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1990.467556][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1990.497583][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1990.518585][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1990.547730][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1990.567531][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1990.597549][ T4237] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1990.605438][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1990.613826][T30301] pwc: Registered as video71. [ 1990.617759][T19272] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1990.621338][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input87 [ 1990.642043][T30301] usb 5-1: USB disconnect, device number 118 10:40:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x0, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x6c000000}, 0x0) 10:40:33 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_usb_connect(0x4, 0x948, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0xc2, 0xf3, 0x92, 0x8, 0x6f8, 0x300c, 0x42ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x936, 0x2, 0x1f, 0x7, 0x1d0, 0x5, [{{0x9, 0x4, 0x66, 0x3, 0x8, 0xe, 0x1, 0x0, 0x11, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x20, 0x1, 0x80, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x75, 0x40, "ffb9", "b22649"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x4, 0x1, '5r!'}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8a2a506669fd"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x3, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0x1dc, 0xf0, 0x20, 0x0, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x20}, @obex={0x5, 0x24, 0x15, 0x7ff}]}], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x6, 0x1f}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}, @generic={0x3e, 0x3, "10d9f095c3254baa129b29ad494f08423d6630ccba973d59cba3ff391ae23415b220b7c02552ae31e11113df186cb2933b41104872ff5b83b016a17a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x3a, 0x2, 0x8, [@generic={0x8, 0x23, "f207c8955da1"}, @generic={0x7f, 0xe, "451c1b08020b8ad96924b2a7940e6eda0251393c05890015186d00e3558d640b55d724b159169e69dbd518d56870f3dba78d8148fceed166a824a21f14f6d26e6e261104cb88ef3c0cb27aa798669c65346d897c9b1bbfdebe4cf7841195a6cfbd44a81a9f0611bc183e84f3dcaa65766c2098420257624ce4107542ff"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x5ef, 0x8a, 0x1f, 0x3f, [@generic={0x40, 0x30, "32f5826ff749b19ce1232125f7ef6be6fb0e9ab8220a5f1b861bb003e2c4db91972b123abf669f7377240645050fec155cd250c10f06d8c103bc7fc87eea"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x8f, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9d, 0x8}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x1, 0x5, 0x80}}, {{0x9, 0x5, 0x9, 0x10, 0x8602fb871573af74, 0x1, 0x9, 0x1, [@generic={0x87, 0x22, "08362550506cc021e4c7e9915c679cca7bba2e3a191f7d4a878811ae67671d727e204b1077b19fda83cb625e284abcdae40d250ea2a3a8c45caac0d2756872efb8c88bbc3bf89d4cd837c932d29c48e63942f6e313abd1efd19ee6577646a78f1622d0ff9287a700755963347d991c267e081c3fb85e73d98a75be0e2254fffb43984c51c2"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x30}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xd0, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x6}]}}]}}, {{0x9, 0x4, 0x55, 0x7f, 0xc, 0xe, 0x1, 0x0, 0x4, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf9, 0x4, 0xc5, 0x0, "ac08"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x7, 0x6, 0x1, [@generic={0x21, 0x6, "d82644ed308ca77249f1f17362f3d3ac17f0c0a0b53a0944299018494f1184"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0x4b, 0x5, [@generic={0x6a, 0x3a, "db4fa2740cfc8481ba54bc8bd4c430d2f258edb0f355f689be28bcc58629327ffa898f9abf461adb25d9f49c6df4148583ae7a7cf71edd708fa52ca64c18321ba6928f8f9bca11f115c55d873232cd9c280bd71f689403cc47c5592d2fc43bbff3c9261f6d423c5c"}, @generic={0xbb, 0x8, "b5b0af2d76767930955d3846c2706f1a828519136c9914758c06c1de91793f17d85b1444ea6f20ec37848e8dd045cb13fd732b79ed06bfabb1b80a8356393c8cbc8fb04d55fe301ec062fcc4df211aee1d24e2379ce3f96c0a588bb3107e206ee670094a3a04ab47001af923e78d68f2c765f0016f720b0527d8d9e93d1e14d18d9b9b533addbf77ec27e6b7ec1c2a270baaf7e26b274f00fe65beed34cbc168b97ef34b3869a6445430bd2e7a8d8dbb8f2d508afccc8cbfbc"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x2, 0x0, 0x20, [@generic={0x7c, 0x21, "cdca214f5a5ef10268263fd0ff38195c8276cb1aedeb982153b59424f37d883eb26416bd9391af54323b3520cefeb7cbf0d6661e1f0cafdd9f000910c183874619c290e6f90e3f1e4acb17adbfd9798d0cba2a26e7b3bf995ca15a13f6a3a44cf0cf35d8ba546283141612bced97536ce5903ced46925ec745a5"}]}}, {{0x9, 0x5, 0x3, 0x5, 0x20, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0xb, 0x7, 0x40, 0x77, 0x36, 0xbd}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xf, 0x5, 0x4, [@generic={0x83, 0x5, "fe8a97f0cfa47fcd16bea5087f492bc8a6daa51a0cb4b4d66726fd1076fd9efdd3fefeeda7f924bbc3ed21b348bd72da9c8c76493f534cb0420e68e4e41147222c6f9a4d175bf9c29b25bf045ce9cd9988a6fb7d7199b5ee2ad35e4cde3779889edbe85cbc2d731c60abc0d9565332bfd2272e5f6ea2d84fd0d4102b8f28a1e174"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x1, 0x80, 0x0, [@generic={0x82, 0x5, "78f1a36c0b522acf1f6d158bc79eef6e0138e92d3af378c4e6ac7f4474f9f0e5475e631dece59061fe3133c8eb7329f580cd3706a86a5dc0b36193f873d4824e212399ff146a10babaa2f111baf3013baafad988c729cfc93acc072fd1ea51da1d89e10af341867220a0893f8c39685667bbcb658402dbcf308bf423aa1202f5"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x94, 0x81, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x4}, @generic={0x80, 0x4, "e1ff04ba051274be16a5f537f79e7f9b39966a8a0601282cbc668d79e3228bf3443ecae025ddc284611f608e823926e923ba5135a70bfb7041e3b6d81417989776fd4dd35ed547cf97deff87b9fcfb4411b9bf1870d6610638ca1dfa170c54f50720d42423404a81f7dc8e792bc2ae9ca000e2c8890f03a234f5b78ad276"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x8, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x19f}]}}, {{0x9, 0x5, 0x5, 0x14, 0x3ff, 0x20, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x6}, @generic={0xc8, 0x8, "801e071aa7cf24cd170ed804cf282016aaa5df601f1f2872ed0d1b3407157c3936696889f4a92151782a7b9b966a49661fda56566f1d15d011626ff6671d383045e7c1d0f422566a047edb98197382641086f3cfdc47e0858508d3e505db32bd9a579a01cc938f7a552bc8baf063a727c6f2fc5283aeec5947ac62895652d73e8275b28eda83e8a0421af8bb4acdbeed3a8368cef1ee4a88cac7e96cf47f323b8f9b3cf2114fd88f385bacda73911189bdec4581760a3c8976e1ef3483e32a54973c0c0addce"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x30, 0x81, 0x3d, [@generic={0x30, 0x68, "dd7a51f30fcf44ee46f92bff865e814bf10c5870710f8af0339b11b4d4ffb4153954b8e1553a2943e5b1a90df481"}, @generic={0xff, 0x6, "a54b336368f64a064334298574af5a7919fae2c7513ecb746457adc99ec150436c4e856345856f03558169cb8b06439a5d867abcff7265a114c828255e9c2af94ff607cf0eea46e4a7e6f2a618da15070f0cbad52f9cb040759290b81cbd894bc5cc571b2f0f53e144bb3a0ee13d16c08629885181e6683991ecfaa70c12531888a3ac3273b92e6998315ee20f85cbf7021817ef0cb2e220842a3660c61c0d800352a1d9b1ccbec9f8f0dd935b338456a46a1279df2886a610f404e6f3d72d39b58f2a3e2550b98cd474d926612f93b561033904269071ea13146bf672d8f19500365fa812dffb9d98bff25d5cf3e59d812a46d5c6d9d213457b41fc53"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0xf9, 0x39, 0x80, [@generic={0x100, 0x10, "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"}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1c, 0x8, 0x7, 0x8, 0x6}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x62, 0x9f, 0x6, 0x1}]}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8d, &(0x7f0000001080)=@generic={0x2, 0x2, 0x85, "0f5a26d8", "d62a41ae4076a30eb55eb0d4c781ca99e0616678bd4d623777346f7d5059ec6f28d78a2a6c00dd45fa6a3db9807fe7214ada68f1d034f2cfb8b3ee979c3834dd94289248ca606a08fcfcda3202688424ef59e99389214093dc9a229c27b244f2ec4dffcf501014b14b1971263c29ff49f585f9bcb3bdb2aaf0fbabcfbbc859ba2d5e22cc60"}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0xb}, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r3, &(0x7f00000003c0)="ce", 0xfef4, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0xf003, @loopback}, 0x1c) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x4008844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002e0000042fbd4a3b90bfdf5e327eac62f50aeb31a053d82f24ad003d", @ANYRES32=0x0, @ANYBLOB="0e000100e0ff0c000b000800"], 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x800) (async) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x8) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "00001000", {0x3, 0x106}}) fcntl$setpipe(r1, 0x407, 0x3f) 10:40:33 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1990.832551][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x74000000}, 0x0) [ 1990.875861][T19272] usb 4-1: Using ep0 maxpacket: 32 [ 1990.881337][T21700] usb 2-1: Service connection timeout for: 256 [ 1990.887452][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 1990.890059][T21700] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services 10:40:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x7a000000}, 0x0) [ 1990.918009][T21700] ath9k_htc: Failed to initialize the device [ 1990.931765][T14603] usb 2-1: ath9k_htc: USB layer deinitialized [ 1990.956326][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x81000000}, 0x0) [ 1991.009681][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x88a8ffff}, 0x0) [ 1991.053943][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x9effffff}, 0x0) [ 1991.098830][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1991.145179][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1991.167939][T19272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1991.178131][T19272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.186486][T19272] usb 4-1: Product: syz [ 1991.191475][T19272] usb 4-1: Manufacturer: syz [ 1991.196513][T19272] usb 4-1: SerialNumber: syz [ 1991.213039][T19272] usb 4-1: config 0 descriptor?? [ 1991.216480][ T4237] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1991.242840][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.251260][ T4237] usb 1-1: Product: syz [ 1991.255444][ T4237] usb 1-1: Manufacturer: syz [ 1991.268921][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1991.277758][ T4237] usb 1-1: SerialNumber: syz [ 1991.294346][ T4237] usb 1-1: config 0 descriptor?? [ 1991.297538][T14603] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1991.299546][T30301] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1991.307157][T15272] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1991.369675][ T4237] pwc: Samsung MPC-C10 USB webcam detected. [ 1991.507551][T15272] usb 3-1: device descriptor read/64, error 18 [ 1991.607695][T30301] usb 5-1: Using ep0 maxpacket: 32 [ 1991.777671][T15272] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1991.817781][T14603] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1991.827011][T14603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.841987][T14603] usb 2-1: Product: syz [ 1991.846514][T14603] usb 2-1: Manufacturer: syz [ 1991.852226][T14603] usb 2-1: SerialNumber: syz [ 1991.907570][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1991.915475][T14603] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1991.947523][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1991.957836][T30301] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1991.967172][T30301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.975694][T30301] usb 5-1: Product: syz [ 1991.977725][T15272] usb 3-1: device descriptor read/64, error 18 [ 1991.980373][T30301] usb 5-1: Manufacturer: syz [ 1991.987708][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1991.991050][T30301] usb 5-1: SerialNumber: syz [ 1992.008135][T30301] usb 5-1: config 0 descriptor?? [ 1992.027656][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1992.037630][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1992.051981][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1992.067762][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1992.077779][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1992.108563][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 1992.117840][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1992.124712][T15272] usb usb3-port1: attempt power cycle [ 1992.158021][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1992.168483][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1992.207701][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1992.207848][T19272] pwc: recv_control_msg error -32 req 02 val 2000 [ 1992.247633][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 1992.258227][T19272] pwc: recv_control_msg error -32 req 02 val 2100 [ 1992.297715][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 1992.297935][T19272] pwc: recv_control_msg error -32 req 02 val 2200 [ 1992.347547][T19272] pwc: recv_control_msg error -32 req 06 val 0600 [ 1992.357696][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 1992.387546][T19272] pwc: recv_control_msg error -32 req 04 val 1500 [ 1992.397708][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 1992.428082][T19272] pwc: recv_control_msg error -32 req 02 val 2500 [ 1992.459201][ T4237] pwc: recv_control_msg error -32 req 02 val 2200 [ 1992.470011][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1992.487608][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1992.497962][T14603] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1992.507600][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1992.508722][ T4237] pwc: recv_control_msg error -32 req 06 val 0600 [ 1992.527632][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1992.537757][T15272] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1992.548110][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1992.577743][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1992.578583][ T4237] pwc: recv_control_msg error -32 req 04 val 1500 [ 1992.592637][T19272] pwc: Registered as video71. [ 1992.599404][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input88 [ 1992.622398][T19272] usb 4-1: USB disconnect, device number 72 [ 1992.637785][T15272] usb 3-1: Invalid ep0 maxpacket: 0 [ 1992.638206][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 1992.687737][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 1992.694605][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1992.741312][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 1992.767590][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1992.774530][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 1992.787838][T15272] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1992.804526][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1992.827667][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1992.834459][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1992.857596][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1992.869909][ T4237] pwc: Registered as video71. [ 1992.875620][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input89 [ 1992.878992][T15272] usb 3-1: Invalid ep0 maxpacket: 0 [ 1992.885759][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1992.896460][T15272] usb usb3-port1: unable to enumerate USB device [ 1992.904631][ T4237] usb 1-1: USB disconnect, device number 112 [ 1992.937710][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1992.949941][T12111] usb 2-1: USB disconnect, device number 118 10:40:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:40:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xe9170000}, 0x0) [ 1992.977925][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1993.003419][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1993.018617][T30301] pwc: recv_control_msg error -32 req 04 val 1400 10:40:35 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:40:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xf0ffffff}, 0x0) [ 1993.087898][T30301] pwc: recv_control_msg error -32 req 02 val 2000 [ 1993.127577][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 1993.146079][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1993.158044][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 1993.197774][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 1993.218442][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1993.237676][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1993.259359][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1993.277633][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1993.297546][T15272] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1993.297670][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1993.337625][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1993.357960][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1993.387531][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1993.395736][T30301] pwc: Registered as video71. [ 1993.401466][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input90 [ 1993.415575][T30301] usb 5-1: USB disconnect, device number 119 [ 1993.537526][T15272] usb 4-1: Using ep0 maxpacket: 32 [ 1993.567776][ T4237] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1993.757693][T14603] usb 2-1: Service connection timeout for: 256 [ 1993.764156][T14603] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1993.773282][T14603] ath9k_htc: Failed to initialize the device [ 1993.780063][T12111] usb 2-1: ath9k_htc: USB layer deinitialized 10:40:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xffffa888}, 0x0) 10:40:36 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x4, 0x948, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0xc2, 0xf3, 0x92, 0x8, 0x6f8, 0x300c, 0x42ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x936, 0x2, 0x1f, 0x7, 0x1d0, 0x5, [{{0x9, 0x4, 0x66, 0x3, 0x8, 0xe, 0x1, 0x0, 0x11, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x20, 0x1, 0x80, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x75, 0x40, "ffb9", "b22649"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x4, 0x1, '5r!'}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8a2a506669fd"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x3, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0x1dc, 0xf0, 0x20, 0x0, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x20}, @obex={0x5, 0x24, 0x15, 0x7ff}]}], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x6, 0x1f}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}, @generic={0x3e, 0x3, "10d9f095c3254baa129b29ad494f08423d6630ccba973d59cba3ff391ae23415b220b7c02552ae31e11113df186cb2933b41104872ff5b83b016a17a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x3a, 0x2, 0x8, [@generic={0x8, 0x23, "f207c8955da1"}, @generic={0x7f, 0xe, "451c1b08020b8ad96924b2a7940e6eda0251393c05890015186d00e3558d640b55d724b159169e69dbd518d56870f3dba78d8148fceed166a824a21f14f6d26e6e261104cb88ef3c0cb27aa798669c65346d897c9b1bbfdebe4cf7841195a6cfbd44a81a9f0611bc183e84f3dcaa65766c2098420257624ce4107542ff"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x5ef, 0x8a, 0x1f, 0x3f, [@generic={0x40, 0x30, "32f5826ff749b19ce1232125f7ef6be6fb0e9ab8220a5f1b861bb003e2c4db91972b123abf669f7377240645050fec155cd250c10f06d8c103bc7fc87eea"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x8f, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9d, 0x8}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x1, 0x5, 0x80}}, {{0x9, 0x5, 0x9, 0x10, 0x8602fb871573af74, 0x1, 0x9, 0x1, [@generic={0x87, 0x22, "08362550506cc021e4c7e9915c679cca7bba2e3a191f7d4a878811ae67671d727e204b1077b19fda83cb625e284abcdae40d250ea2a3a8c45caac0d2756872efb8c88bbc3bf89d4cd837c932d29c48e63942f6e313abd1efd19ee6577646a78f1622d0ff9287a700755963347d991c267e081c3fb85e73d98a75be0e2254fffb43984c51c2"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x30}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xd0, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x6}]}}]}}, {{0x9, 0x4, 0x55, 0x7f, 0xc, 0xe, 0x1, 0x0, 0x4, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf9, 0x4, 0xc5, 0x0, "ac08"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x7, 0x6, 0x1, [@generic={0x21, 0x6, "d82644ed308ca77249f1f17362f3d3ac17f0c0a0b53a0944299018494f1184"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0x4b, 0x5, [@generic={0x6a, 0x3a, "db4fa2740cfc8481ba54bc8bd4c430d2f258edb0f355f689be28bcc58629327ffa898f9abf461adb25d9f49c6df4148583ae7a7cf71edd708fa52ca64c18321ba6928f8f9bca11f115c55d873232cd9c280bd71f689403cc47c5592d2fc43bbff3c9261f6d423c5c"}, @generic={0xbb, 0x8, "b5b0af2d76767930955d3846c2706f1a828519136c9914758c06c1de91793f17d85b1444ea6f20ec37848e8dd045cb13fd732b79ed06bfabb1b80a8356393c8cbc8fb04d55fe301ec062fcc4df211aee1d24e2379ce3f96c0a588bb3107e206ee670094a3a04ab47001af923e78d68f2c765f0016f720b0527d8d9e93d1e14d18d9b9b533addbf77ec27e6b7ec1c2a270baaf7e26b274f00fe65beed34cbc168b97ef34b3869a6445430bd2e7a8d8dbb8f2d508afccc8cbfbc"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x2, 0x0, 0x20, [@generic={0x7c, 0x21, "cdca214f5a5ef10268263fd0ff38195c8276cb1aedeb982153b59424f37d883eb26416bd9391af54323b3520cefeb7cbf0d6661e1f0cafdd9f000910c183874619c290e6f90e3f1e4acb17adbfd9798d0cba2a26e7b3bf995ca15a13f6a3a44cf0cf35d8ba546283141612bced97536ce5903ced46925ec745a5"}]}}, {{0x9, 0x5, 0x3, 0x5, 0x20, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0xb, 0x7, 0x40, 0x77, 0x36, 0xbd}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xf, 0x5, 0x4, [@generic={0x83, 0x5, "fe8a97f0cfa47fcd16bea5087f492bc8a6daa51a0cb4b4d66726fd1076fd9efdd3fefeeda7f924bbc3ed21b348bd72da9c8c76493f534cb0420e68e4e41147222c6f9a4d175bf9c29b25bf045ce9cd9988a6fb7d7199b5ee2ad35e4cde3779889edbe85cbc2d731c60abc0d9565332bfd2272e5f6ea2d84fd0d4102b8f28a1e174"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x1, 0x80, 0x0, [@generic={0x82, 0x5, "78f1a36c0b522acf1f6d158bc79eef6e0138e92d3af378c4e6ac7f4474f9f0e5475e631dece59061fe3133c8eb7329f580cd3706a86a5dc0b36193f873d4824e212399ff146a10babaa2f111baf3013baafad988c729cfc93acc072fd1ea51da1d89e10af341867220a0893f8c39685667bbcb658402dbcf308bf423aa1202f5"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x94, 0x81, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x4}, @generic={0x80, 0x4, "e1ff04ba051274be16a5f537f79e7f9b39966a8a0601282cbc668d79e3228bf3443ecae025ddc284611f608e823926e923ba5135a70bfb7041e3b6d81417989776fd4dd35ed547cf97deff87b9fcfb4411b9bf1870d6610638ca1dfa170c54f50720d42423404a81f7dc8e792bc2ae9ca000e2c8890f03a234f5b78ad276"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x8, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x19f}]}}, {{0x9, 0x5, 0x5, 0x14, 0x3ff, 0x20, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x6}, @generic={0xc8, 0x8, "801e071aa7cf24cd170ed804cf282016aaa5df601f1f2872ed0d1b3407157c3936696889f4a92151782a7b9b966a49661fda56566f1d15d011626ff6671d383045e7c1d0f422566a047edb98197382641086f3cfdc47e0858508d3e505db32bd9a579a01cc938f7a552bc8baf063a727c6f2fc5283aeec5947ac62895652d73e8275b28eda83e8a0421af8bb4acdbeed3a8368cef1ee4a88cac7e96cf47f323b8f9b3cf2114fd88f385bacda73911189bdec4581760a3c8976e1ef3483e32a54973c0c0addce"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x30, 0x81, 0x3d, [@generic={0x30, 0x68, "dd7a51f30fcf44ee46f92bff865e814bf10c5870710f8af0339b11b4d4ffb4153954b8e1553a2943e5b1a90df481"}, @generic={0xff, 0x6, "a54b336368f64a064334298574af5a7919fae2c7513ecb746457adc99ec150436c4e856345856f03558169cb8b06439a5d867abcff7265a114c828255e9c2af94ff607cf0eea46e4a7e6f2a618da15070f0cbad52f9cb040759290b81cbd894bc5cc571b2f0f53e144bb3a0ee13d16c08629885181e6683991ecfaa70c12531888a3ac3273b92e6998315ee20f85cbf7021817ef0cb2e220842a3660c61c0d800352a1d9b1ccbec9f8f0dd935b338456a46a1279df2886a610f404e6f3d72d39b58f2a3e2550b98cd474d926612f93b561033904269071ea13146bf672d8f19500365fa812dffb9d98bff25d5cf3e59d812a46d5c6d9d213457b41fc53"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0xf9, 0x39, 0x80, [@generic={0x100, 0x10, "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"}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1c, 0x8, 0x7, 0x8, 0x6}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x62, 0x9f, 0x6, 0x1}]}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8d, &(0x7f0000001080)=@generic={0x2, 0x2, 0x85, "0f5a26d8", "d62a41ae4076a30eb55eb0d4c781ca99e0616678bd4d623777346f7d5059ec6f28d78a2a6c00dd45fa6a3db9807fe7214ada68f1d034f2cfb8b3ee979c3834dd94289248ca606a08fcfcda3202688424ef59e99389214093dc9a229c27b244f2ec4dffcf501014b14b1971263c29ff49f585f9bcb3bdb2aaf0fbabcfbbc859ba2d5e22cc60"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0xb}, 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f00000003c0)="ce", 0xfef4, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0xf003, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x4008844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002e0000042fbd4a3b90bfdf5e327eac62f50aeb31a053d82f24ad003d", @ANYRES32=0x0, @ANYBLOB="0e000100e0ff0c000b000800"], 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x800) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x8) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "00001000", {0x3, 0x106}}) fcntl$setpipe(r1, 0x407, 0x3f) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x4, 0x948, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0xc2, 0xf3, 0x92, 0x8, 0x6f8, 0x300c, 0x42ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x936, 0x2, 0x1f, 0x7, 0x1d0, 0x5, [{{0x9, 0x4, 0x66, 0x3, 0x8, 0xe, 0x1, 0x0, 0x11, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x20, 0x1, 0x80, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x75, 0x40, "ffb9", "b22649"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x4, 0x1, '5r!'}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "8a2a506669fd"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x3, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x1ff, 0x1dc, 0xf0, 0x20, 0x0, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x20}, @obex={0x5, 0x24, 0x15, 0x7ff}]}], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x6, 0x1f}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}, @generic={0x3e, 0x3, "10d9f095c3254baa129b29ad494f08423d6630ccba973d59cba3ff391ae23415b220b7c02552ae31e11113df186cb2933b41104872ff5b83b016a17a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x3a, 0x2, 0x8, [@generic={0x8, 0x23, "f207c8955da1"}, @generic={0x7f, 0xe, "451c1b08020b8ad96924b2a7940e6eda0251393c05890015186d00e3558d640b55d724b159169e69dbd518d56870f3dba78d8148fceed166a824a21f14f6d26e6e261104cb88ef3c0cb27aa798669c65346d897c9b1bbfdebe4cf7841195a6cfbd44a81a9f0611bc183e84f3dcaa65766c2098420257624ce4107542ff"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x5ef, 0x8a, 0x1f, 0x3f, [@generic={0x40, 0x30, "32f5826ff749b19ce1232125f7ef6be6fb0e9ab8220a5f1b861bb003e2c4db91972b123abf669f7377240645050fec155cd250c10f06d8c103bc7fc87eea"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x8f, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9d, 0x8}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x1, 0x5, 0x80}}, {{0x9, 0x5, 0x9, 0x10, 0x8602fb871573af74, 0x1, 0x9, 0x1, [@generic={0x87, 0x22, "08362550506cc021e4c7e9915c679cca7bba2e3a191f7d4a878811ae67671d727e204b1077b19fda83cb625e284abcdae40d250ea2a3a8c45caac0d2756872efb8c88bbc3bf89d4cd837c932d29c48e63942f6e313abd1efd19ee6577646a78f1622d0ff9287a700755963347d991c267e081c3fb85e73d98a75be0e2254fffb43984c51c2"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x30}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xd0, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x6}]}}]}}, {{0x9, 0x4, 0x55, 0x7f, 0xc, 0xe, 0x1, 0x0, 0x4, [@uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf9, 0x4, 0xc5, 0x0, "ac08"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x7, 0x6, 0x1, [@generic={0x21, 0x6, "d82644ed308ca77249f1f17362f3d3ac17f0c0a0b53a0944299018494f1184"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x9, 0x4b, 0x5, [@generic={0x6a, 0x3a, "db4fa2740cfc8481ba54bc8bd4c430d2f258edb0f355f689be28bcc58629327ffa898f9abf461adb25d9f49c6df4148583ae7a7cf71edd708fa52ca64c18321ba6928f8f9bca11f115c55d873232cd9c280bd71f689403cc47c5592d2fc43bbff3c9261f6d423c5c"}, @generic={0xbb, 0x8, "b5b0af2d76767930955d3846c2706f1a828519136c9914758c06c1de91793f17d85b1444ea6f20ec37848e8dd045cb13fd732b79ed06bfabb1b80a8356393c8cbc8fb04d55fe301ec062fcc4df211aee1d24e2379ce3f96c0a588bb3107e206ee670094a3a04ab47001af923e78d68f2c765f0016f720b0527d8d9e93d1e14d18d9b9b533addbf77ec27e6b7ec1c2a270baaf7e26b274f00fe65beed34cbc168b97ef34b3869a6445430bd2e7a8d8dbb8f2d508afccc8cbfbc"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x2, 0x0, 0x20, [@generic={0x7c, 0x21, "cdca214f5a5ef10268263fd0ff38195c8276cb1aedeb982153b59424f37d883eb26416bd9391af54323b3520cefeb7cbf0d6661e1f0cafdd9f000910c183874619c290e6f90e3f1e4acb17adbfd9798d0cba2a26e7b3bf995ca15a13f6a3a44cf0cf35d8ba546283141612bced97536ce5903ced46925ec745a5"}]}}, {{0x9, 0x5, 0x3, 0x5, 0x20, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0xb, 0x7, 0x40, 0x77, 0x36, 0xbd}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xf, 0x5, 0x4, [@generic={0x83, 0x5, "fe8a97f0cfa47fcd16bea5087f492bc8a6daa51a0cb4b4d66726fd1076fd9efdd3fefeeda7f924bbc3ed21b348bd72da9c8c76493f534cb0420e68e4e41147222c6f9a4d175bf9c29b25bf045ce9cd9988a6fb7d7199b5ee2ad35e4cde3779889edbe85cbc2d731c60abc0d9565332bfd2272e5f6ea2d84fd0d4102b8f28a1e174"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x1, 0x80, 0x0, [@generic={0x82, 0x5, "78f1a36c0b522acf1f6d158bc79eef6e0138e92d3af378c4e6ac7f4474f9f0e5475e631dece59061fe3133c8eb7329f580cd3706a86a5dc0b36193f873d4824e212399ff146a10babaa2f111baf3013baafad988c729cfc93acc072fd1ea51da1d89e10af341867220a0893f8c39685667bbcb658402dbcf308bf423aa1202f5"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x94, 0x81, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x4}, @generic={0x80, 0x4, "e1ff04ba051274be16a5f537f79e7f9b39966a8a0601282cbc668d79e3228bf3443ecae025ddc284611f608e823926e923ba5135a70bfb7041e3b6d81417989776fd4dd35ed547cf97deff87b9fcfb4411b9bf1870d6610638ca1dfa170c54f50720d42423404a81f7dc8e792bc2ae9ca000e2c8890f03a234f5b78ad276"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x8, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x19f}]}}, {{0x9, 0x5, 0x5, 0x14, 0x3ff, 0x20, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x6}, @generic={0xc8, 0x8, "801e071aa7cf24cd170ed804cf282016aaa5df601f1f2872ed0d1b3407157c3936696889f4a92151782a7b9b966a49661fda56566f1d15d011626ff6671d383045e7c1d0f422566a047edb98197382641086f3cfdc47e0858508d3e505db32bd9a579a01cc938f7a552bc8baf063a727c6f2fc5283aeec5947ac62895652d73e8275b28eda83e8a0421af8bb4acdbeed3a8368cef1ee4a88cac7e96cf47f323b8f9b3cf2114fd88f385bacda73911189bdec4581760a3c8976e1ef3483e32a54973c0c0addce"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x30, 0x81, 0x3d, [@generic={0x30, 0x68, "dd7a51f30fcf44ee46f92bff865e814bf10c5870710f8af0339b11b4d4ffb4153954b8e1553a2943e5b1a90df481"}, @generic={0xff, 0x6, "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"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0xf9, 0x39, 0x80, [@generic={0x100, 0x10, "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"}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1c, 0x8, 0x7, 0x8, 0x6}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x62, 0x9f, 0x6, 0x1}]}}) (async) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8d, &(0x7f0000001080)=@generic={0x2, 0x2, 0x85, "0f5a26d8", "d62a41ae4076a30eb55eb0d4c781ca99e0616678bd4d623777346f7d5059ec6f28d78a2a6c00dd45fa6a3db9807fe7214ada68f1d034f2cfb8b3ee979c3834dd94289248ca606a08fcfcda3202688424ef59e99389214093dc9a229c27b244f2ec4dffcf501014b14b1971263c29ff49f585f9bcb3bdb2aaf0fbabcfbbc859ba2d5e22cc60"}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0xb}, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r3, &(0x7f00000003c0)="ce", 0xfef4, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0xf003, @loopback}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x4008844) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002e0000042fbd4a3b90bfdf5e327eac62f50aeb31a053d82f24ad003d", @ANYRES32=0x0, @ANYBLOB="0e000100e0ff0c000b000800"], 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x800) (async) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x8) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "00001000", {0x3, 0x106}}) (async) fcntl$setpipe(r1, 0x407, 0x3f) (async) 10:40:36 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1993.817683][T15272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1993.817778][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 1993.827101][T15272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.840975][T15272] usb 4-1: Product: syz [ 1993.845382][T15272] usb 4-1: Manufacturer: syz [ 1993.850841][T15272] usb 4-1: SerialNumber: syz [ 1993.858242][T15272] usb 4-1: config 0 descriptor?? 10:40:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xfffff000}, 0x0) [ 1993.920712][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 1993.927185][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xffffff7f}, 0x0) 10:40:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xffffff9e}, 0x0) 10:40:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xfffffff0}, 0x0) [ 1994.157802][ T4237] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1994.167679][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.175991][ T4237] usb 1-1: Product: syz [ 1994.181024][ T4237] usb 1-1: Manufacturer: syz [ 1994.185912][ T4237] usb 1-1: SerialNumber: syz [ 1994.190864][T21143] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1994.209178][ T4237] usb 1-1: config 0 descriptor?? [ 1994.263400][ T4237] pwc: Samsung MPC-C10 USB webcam detected. [ 1994.317654][T12111] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1994.347546][T19272] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1994.447488][T21143] usb 5-1: Using ep0 maxpacket: 32 [ 1994.547547][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1994.587544][T19272] usb 3-1: Using ep0 maxpacket: 32 [ 1994.592997][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 1994.637805][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 1994.679115][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1994.718107][T15272] pwc: recv_control_msg error -32 req 04 val 1000 [ 1994.747970][T21143] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1994.757445][T21143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.757915][T15272] pwc: recv_control_msg error -32 req 04 val 1300 [ 1994.765548][T21143] usb 5-1: Product: syz [ 1994.765572][T21143] usb 5-1: Manufacturer: syz [ 1994.781883][T21143] usb 5-1: SerialNumber: syz [ 1994.798903][T21143] usb 5-1: config 0 descriptor?? [ 1994.817821][T15272] pwc: recv_control_msg error -32 req 04 val 1400 [ 1994.853042][T21143] pwc: Samsung MPC-C10 USB webcam detected. [ 1994.857821][T15272] pwc: recv_control_msg error -32 req 02 val 2000 [ 1994.877820][T19272] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1994.887579][T19272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.897576][T15272] pwc: recv_control_msg error -32 req 02 val 2100 [ 1994.898121][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1994.904177][T19272] usb 3-1: Product: syz [ 1994.910710][T12111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1994.915025][T19272] usb 3-1: Manufacturer: syz [ 1994.929558][T19272] usb 3-1: SerialNumber: syz [ 1994.934343][T12111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.942860][T12111] usb 2-1: Product: syz [ 1994.944107][T19272] usb 3-1: config 0 descriptor?? [ 1994.950362][T12111] usb 2-1: Manufacturer: syz [ 1994.952300][T15272] pwc: recv_control_msg error -32 req 02 val 2200 [ 1994.956778][T12111] usb 2-1: SerialNumber: syz [ 1994.977661][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1995.007825][T15272] pwc: recv_control_msg error -32 req 06 val 0600 [ 1995.008866][T12111] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1995.016893][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1995.023637][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 1995.049338][T15272] pwc: recv_control_msg error -32 req 04 val 1500 [ 1995.074379][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1995.088233][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 1995.107706][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 1995.127630][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 1995.127750][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1995.147592][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 1995.167559][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 1995.187686][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 1995.189462][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 1995.207527][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 1995.214988][T15272] pwc: Registered as video71. [ 1995.225815][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input91 [ 1995.238066][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 1995.267853][T15272] usb 4-1: USB disconnect, device number 73 [ 1995.278686][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 1995.328080][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 1995.367935][ T4237] pwc: recv_control_msg error -32 req 02 val 2200 [ 1995.407625][T19272] pwc: send_video_command error -71 [ 1995.413192][T19272] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1995.421134][T19272] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1995.427736][ T4237] pwc: recv_control_msg error -32 req 06 val 0600 [ 1995.446848][T19272] usb 3-1: USB disconnect, device number 23 [ 1995.487796][T21143] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1995.494437][ T4237] pwc: recv_control_msg error -32 req 04 val 1500 [ 1995.537837][T21143] pwc: recv_control_msg error -32 req 02 val 2700 [ 1995.544418][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 1995.577612][T21143] pwc: recv_control_msg error -32 req 04 val 1700 10:40:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:40:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0xffffffff}, 0x0) [ 1995.596044][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 1995.616317][T15496] __nla_validate_parse: 4 callbacks suppressed [ 1995.616338][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1995.637692][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 1995.658945][T21143] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1995.667808][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 1995.688224][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1995.717729][T12111] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1995.726887][T21143] pwc: recv_control_msg error -32 req 04 val 1000 [ 1995.733517][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1995.758157][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1995.766671][ T4237] pwc: Registered as video71. [ 1995.784270][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input92 [ 1995.794332][T21143] pwc: recv_control_msg error -32 req 04 val 1300 [ 1995.814375][ T4237] usb 1-1: USB disconnect, device number 113 [ 1995.847652][T21143] pwc: recv_control_msg error -32 req 04 val 1400 [ 1995.887823][T21143] pwc: recv_control_msg error -71 req 02 val 2000 [ 1995.937994][T21143] pwc: recv_control_msg error -71 req 02 val 2100 [ 1995.957633][T21143] pwc: recv_control_msg error -71 req 02 val 2200 [ 1995.967473][T30301] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1995.988068][T21143] pwc: recv_control_msg error -71 req 06 val 0600 [ 1996.017966][T21143] pwc: recv_control_msg error -71 req 04 val 1500 10:40:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x0) 10:40:38 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:40:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x2}, 0x0) [ 1996.038657][T21143] pwc: recv_control_msg error -71 req 02 val 2500 [ 1996.058601][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1996.074450][T21143] pwc: recv_control_msg error -71 req 02 val 2400 [ 1996.097787][T21143] pwc: recv_control_msg error -71 req 02 val 2600 [ 1996.117717][T21143] pwc: recv_control_msg error -71 req 02 val 2900 [ 1996.162734][T21143] pwc: recv_control_msg error -71 req 02 val 2800 [ 1996.197798][T21143] pwc: recv_control_msg error -71 req 04 val 1100 [ 1996.217546][T30301] usb 4-1: Using ep0 maxpacket: 32 [ 1996.222781][T21143] pwc: recv_control_msg error -71 req 04 val 1200 [ 1996.236121][T21143] pwc: Registered as video71. [ 1996.265610][T21143] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input93 [ 1996.315830][T21143] usb 5-1: USB disconnect, device number 120 [ 1996.327545][T19272] usb 3-1: new high-speed USB device number 24 using dummy_hcd 10:40:38 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8000000aaf68f13d93360412c35a92305fc488a11d9edadeed5acd0045c4aabe09ee3751c9980d23e0283ce212a4883a3d19b370e1a8878b68f25d70184"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "9d2454d9", {0x1, 0x40, 0x7, 0x7, 0xfd}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x3}, 0x0) 10:40:38 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x4}, 0x0) [ 1996.438139][T30303] usb 2-1: USB disconnect, device number 119 [ 1996.457741][ T4237] usb 1-1: new high-speed USB device number 114 using dummy_hcd 10:40:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x5}, 0x0) [ 1996.518217][T30301] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1996.534388][T30301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.543266][T30301] usb 4-1: Product: syz [ 1996.547939][T30301] usb 4-1: Manufacturer: syz [ 1996.552867][T30301] usb 4-1: SerialNumber: syz 10:40:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x6}, 0x0) [ 1996.565957][T30301] usb 4-1: config 0 descriptor?? [ 1996.567762][T19272] usb 3-1: Using ep0 maxpacket: 32 [ 1996.616942][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1996.747517][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 1996.847721][T19272] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1996.856775][T19272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.870695][T19272] usb 3-1: Product: syz [ 1996.874869][T19272] usb 3-1: Manufacturer: syz [ 1996.881463][T19272] usb 3-1: SerialNumber: syz [ 1996.895594][T19272] usb 3-1: config 0 descriptor?? [ 1996.927653][T21143] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1996.940600][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 1996.957910][T12111] usb 2-1: Service connection timeout for: 256 [ 1996.964154][T12111] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1996.977341][T12111] ath9k_htc: Failed to initialize the device [ 1996.983741][T30303] usb 2-1: ath9k_htc: USB layer deinitialized [ 1997.087678][ T4237] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1997.096891][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.105083][ T4237] usb 1-1: Product: syz [ 1997.109428][ T4237] usb 1-1: Manufacturer: syz [ 1997.114088][ T4237] usb 1-1: SerialNumber: syz [ 1997.129344][ T4237] usb 1-1: config 0 descriptor?? [ 1997.180389][ T4237] pwc: Samsung MPC-C10 USB webcam detected. [ 1997.187614][T21143] usb 5-1: Using ep0 maxpacket: 32 [ 1997.278129][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1997.327551][T19272] pwc: send_video_command error -71 [ 1997.327759][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 1997.333155][T19272] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1997.347246][T19272] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1997.365229][T19272] usb 3-1: USB disconnect, device number 24 [ 1997.377928][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 1997.385976][T30303] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1997.428266][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1997.468020][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 1997.518004][T21143] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1997.527326][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 1997.534136][T21143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.542800][T21143] usb 5-1: Product: syz [ 1997.547073][T21143] usb 5-1: Manufacturer: syz [ 1997.552389][T21143] usb 5-1: SerialNumber: syz [ 1997.559962][T21143] usb 5-1: config 0 descriptor?? [ 1997.568753][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 1997.609476][T30301] pwc: recv_control_msg error -32 req 02 val 2000 [ 1997.617802][T21143] pwc: Samsung MPC-C10 USB webcam detected. [ 1997.657700][T30301] pwc: recv_control_msg error -32 req 02 val 2100 [ 1997.697986][T30301] pwc: recv_control_msg error -32 req 02 val 2200 [ 1997.747984][T30301] pwc: recv_control_msg error -32 req 06 val 0600 [ 1997.789221][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 1997.818106][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 1997.847691][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1997.854390][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 1997.878034][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 1997.907680][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1997.914329][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 1997.947731][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 1997.967851][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 1997.974954][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 1997.988036][T30303] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1997.997110][T30303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.005768][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 1998.012704][T30303] usb 2-1: Product: syz [ 1998.017058][T30301] pwc: Registered as video71. [ 1998.022497][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1998.030010][T30303] usb 2-1: Manufacturer: syz [ 1998.034623][T30303] usb 2-1: SerialNumber: syz [ 1998.040518][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input94 [ 1998.079057][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1998.089360][T30301] usb 4-1: USB disconnect, device number 74 [ 1998.098664][T30303] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1998.117896][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 1998.169325][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 1998.218232][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 1998.244528][T21143] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1998.258043][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 10:40:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x7}, 0x0) 10:40:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10:40:40 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1998.299255][T21143] pwc: recv_control_msg error -32 req 02 val 2700 [ 1998.321059][ T4237] pwc: recv_control_msg error -32 req 02 val 2200 [ 1998.348700][T21143] pwc: recv_control_msg error -32 req 04 val 1700 [ 1998.368495][ T4237] pwc: recv_control_msg error -32 req 06 val 0600 [ 1998.387655][T21143] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1998.418258][ T4237] pwc: recv_control_msg error -71 req 04 val 1500 [ 1998.447686][T21143] pwc: recv_control_msg error -32 req 04 val 1000 [ 1998.455569][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 1998.487804][T21143] pwc: recv_control_msg error -32 req 04 val 1300 [ 1998.494385][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 1998.517565][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 1998.527661][T21143] pwc: recv_control_msg error -32 req 04 val 1400 [ 1998.549182][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 1998.567937][T21143] pwc: recv_control_msg error -71 req 02 val 2000 [ 1998.574598][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1998.597719][T21143] pwc: recv_control_msg error -71 req 02 val 2100 [ 1998.604344][T30303] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1998.612191][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1998.638173][T21143] pwc: recv_control_msg error -71 req 02 val 2200 [ 1998.646159][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1998.654343][ T4237] pwc: Registered as video71. [ 1998.659595][T21143] pwc: recv_control_msg error -71 req 06 val 0600 [ 1998.670286][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input95 [ 1998.687301][ T4237] usb 1-1: USB disconnect, device number 114 [ 1998.693750][T21143] pwc: recv_control_msg error -71 req 04 val 1500 [ 1998.717866][T30301] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1998.725641][T21143] pwc: recv_control_msg error -71 req 02 val 2500 [ 1998.747758][T21143] pwc: recv_control_msg error -71 req 02 val 2400 [ 1998.767776][T21143] pwc: recv_control_msg error -71 req 02 val 2600 [ 1998.774653][T30832] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1998.807827][T21143] pwc: recv_control_msg error -71 req 02 val 2900 [ 1998.837928][T21143] pwc: recv_control_msg error -71 req 02 val 2800 [ 1998.858824][T21143] pwc: recv_control_msg error -71 req 04 val 1100 [ 1998.877593][T30303] usb 3-1: Using ep0 maxpacket: 32 [ 1998.883469][T21143] pwc: recv_control_msg error -71 req 04 val 1200 [ 1998.894525][T21143] pwc: Registered as video71. 10:40:41 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x8}, 0x0) [ 1998.901613][T21143] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input96 [ 1998.930005][T21143] usb 5-1: USB disconnect, device number 121 10:40:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x9}, 0x0) [ 1999.008212][T30301] usb 4-1: Using ep0 maxpacket: 32 [ 1999.211113][T30832] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1999.216938][T30832] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1999.237876][T30303] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1999.246946][T30303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.255463][T30303] usb 3-1: Product: syz [ 1999.260440][T30303] usb 3-1: Manufacturer: syz [ 1999.265053][T30303] usb 3-1: SerialNumber: syz [ 1999.278075][T30303] usb 3-1: config 0 descriptor?? [ 1999.288217][ T4237] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1999.329563][T30303] pwc: Samsung MPC-C10 USB webcam detected. [ 1999.368352][T30301] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1999.377589][T30301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.385608][T30301] usb 4-1: Product: syz [ 1999.390244][T30301] usb 4-1: Manufacturer: syz [ 1999.394869][T30301] usb 4-1: SerialNumber: syz [ 1999.410350][T30301] usb 4-1: config 0 descriptor?? [ 1999.414003][T19272] usb 2-1: USB disconnect, device number 120 [ 1999.421410][T30832] ath9k_htc: Failed to initialize the device [ 1999.430328][T19272] usb 2-1: ath9k_htc: USB layer deinitialized [ 1999.460074][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 1999.567598][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 1999.727922][T30303] pwc: send_video_command error -71 [ 1999.733207][T30303] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1999.741277][T30303] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1999.758260][T30303] usb 3-1: USB disconnect, device number 25 10:40:42 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8000000aaf68f13d93360412c35a92305fc488a11d9edadeed5acd0045c4aabe09ee3751c9980d23e0283ce212a4883a3d19b370e1a8878b68f25d70184"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "9d2454d9", {0x1, 0x40, 0x7, 0x7, 0xfd}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xa}, 0x0) 10:40:42 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 1999.867724][ T4237] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 1999.877121][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.885884][ T4237] usb 1-1: Product: syz [ 1999.891014][ T4237] usb 1-1: Manufacturer: syz [ 1999.895732][ T4237] usb 1-1: SerialNumber: syz [ 1999.905303][ T4237] usb 1-1: config 0 descriptor?? 10:40:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xc}, 0x0) 10:40:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xe}, 0x0) [ 1999.950195][ T4237] pwc: Samsung MPC-C10 USB webcam detected. 10:40:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xf}, 0x0) 10:40:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x10}, 0x0) [ 2000.107836][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2000.158284][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 2000.222031][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 2000.228617][T14603] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2000.237815][T19272] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2000.267571][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2000.307584][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 2000.347700][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 2000.398209][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 2000.447685][T30301] pwc: recv_control_msg error -32 req 02 val 2000 [ 2000.467578][T14603] usb 5-1: Using ep0 maxpacket: 32 [ 2000.497725][T30301] pwc: recv_control_msg error -32 req 02 val 2100 [ 2000.547591][T30301] pwc: recv_control_msg error -32 req 02 val 2200 [ 2000.597709][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2000.604331][T30301] pwc: recv_control_msg error -32 req 06 val 0600 [ 2000.647693][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 2000.654262][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 2000.677636][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 2000.687650][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 2000.697650][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 2000.717568][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 2000.727616][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2000.737793][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 2000.747818][T14603] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2000.756973][T14603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.765748][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2000.767498][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 2000.775215][T14603] usb 5-1: Product: syz [ 2000.781641][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 2000.786156][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.800614][T14603] usb 5-1: Manufacturer: syz [ 2000.805337][T14603] usb 5-1: SerialNumber: syz [ 2000.810841][T19272] usb 2-1: Product: syz [ 2000.818616][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 2000.824727][T14603] usb 5-1: config 0 descriptor?? [ 2000.830164][T19272] usb 2-1: Manufacturer: syz [ 2000.834773][T19272] usb 2-1: SerialNumber: syz [ 2000.847795][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 2000.854472][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 2000.863827][T30301] pwc: Registered as video71. [ 2000.880053][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input97 [ 2000.885992][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2000.890455][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 2000.896708][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2000.927787][T30301] usb 4-1: USB disconnect, device number 75 [ 2000.938582][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 2000.987876][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 2001.028093][ T4237] pwc: recv_control_msg error -32 req 02 val 2200 [ 2001.078825][ T4237] pwc: recv_control_msg error -71 req 06 val 0600 [ 2001.118003][ T4237] pwc: recv_control_msg error -71 req 04 val 1500 10:40:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x48}, 0x0) 10:40:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2001.137728][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 2001.187791][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 2001.208333][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 2001.227560][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 2001.252401][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 2001.284731][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 2001.312872][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 2001.320001][ T4237] pwc: Registered as video71. [ 2001.325453][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input98 [ 2001.352132][ T4237] usb 1-1: USB disconnect, device number 115 [ 2001.447771][T30303] usb 3-1: new high-speed USB device number 26 using dummy_hcd 10:40:43 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x4c}, 0x0) [ 2001.517810][T19272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2001.547608][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2001.592056][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2001.647653][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2001.687545][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2001.707562][T30303] usb 3-1: Using ep0 maxpacket: 32 [ 2001.728697][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2001.767544][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 2001.807662][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2001.830147][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2001.847646][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2001.867583][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2001.887669][T15272] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2001.895448][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2001.897509][ T4237] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2001.927953][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2001.933568][T30301] usb 2-1: USB disconnect, device number 121 [ 2001.950420][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2001.977907][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2001.998319][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2002.018155][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2002.037539][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2002.037811][T30303] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2002.054417][T30303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.057567][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2002.062937][T30303] usb 3-1: Product: syz [ 2002.079779][T30303] usb 3-1: Manufacturer: syz [ 2002.084389][T30303] usb 3-1: SerialNumber: syz [ 2002.087655][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2002.096010][T30303] usb 3-1: config 0 descriptor?? [ 2002.102865][T14603] pwc: Registered as video71. [ 2002.117679][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input99 [ 2002.137670][T15272] usb 4-1: Using ep0 maxpacket: 32 [ 2002.151750][T14603] usb 5-1: USB disconnect, device number 122 [ 2002.175388][T30303] pwc: Samsung MPC-C10 USB webcam detected. [ 2002.181406][ T4237] usb 1-1: Using ep0 maxpacket: 32 10:40:44 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8000000aaf68f13d93360412c35a92305fc488a11d9edadeed5acd0045c4aabe09ee3751c9980d23e0283ce212a4883a3d19b370e1a8878b68f25d70184"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "9d2454d9", {0x1, 0x40, 0x7, 0x7, 0xfd}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:40:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x60}, 0x0) 10:40:44 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2002.417774][T15272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2002.427144][T15272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.435948][T15272] usb 4-1: Product: syz [ 2002.440745][T15272] usb 4-1: Manufacturer: syz [ 2002.454436][T15272] usb 4-1: SerialNumber: syz 10:40:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x68}, 0x0) [ 2002.475232][T15272] usb 4-1: config 0 descriptor?? [ 2002.488583][ T4237] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2002.506766][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.519875][T15272] pwc: Samsung MPC-C10 USB webcam detected. 10:40:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x6c}, 0x0) [ 2002.520992][ T4237] usb 1-1: Product: syz [ 2002.538583][ T4237] usb 1-1: Manufacturer: syz [ 2002.543322][ T4237] usb 1-1: SerialNumber: syz [ 2002.559718][ T4237] usb 1-1: config 0 descriptor?? 10:40:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x74}, 0x0) [ 2002.577800][T30303] pwc: send_video_command error -71 [ 2002.583336][T30303] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2002.599807][T30303] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2002.614954][ T4237] pwc: Samsung MPC-C10 USB webcam detected. 10:40:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x7a}, 0x0) [ 2002.633819][T30303] usb 3-1: USB disconnect, device number 26 10:40:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xf0}, 0x0) [ 2002.777796][T21143] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2002.797810][T19272] usb 2-1: Service connection timeout for: 256 [ 2002.804009][T19272] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2002.815011][T19272] ath9k_htc: Failed to initialize the device [ 2002.824311][T30301] usb 2-1: ath9k_htc: USB layer deinitialized 10:40:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2003.037498][T21143] usb 5-1: Using ep0 maxpacket: 32 [ 2003.177532][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2003.217745][T30301] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2003.224467][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2003.270246][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2003.287712][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2003.308083][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2003.337591][T30832] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2003.345641][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 2003.347614][T15272] pwc: recv_control_msg error -32 req 04 val 1000 [ 2003.367742][T21143] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2003.377028][T21143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.385600][T21143] usb 5-1: Product: syz [ 2003.390379][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 2003.397488][T21143] usb 5-1: Manufacturer: syz [ 2003.398455][T15272] pwc: recv_control_msg error -32 req 04 val 1300 [ 2003.402403][T21143] usb 5-1: SerialNumber: syz [ 2003.423288][T21143] usb 5-1: config 0 descriptor?? [ 2003.447735][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2003.457594][T15272] pwc: recv_control_msg error -32 req 04 val 1400 [ 2003.481769][T21143] pwc: Samsung MPC-C10 USB webcam detected. [ 2003.497718][T15272] pwc: recv_control_msg error -32 req 02 val 2000 [ 2003.497988][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 2003.547617][T15272] pwc: recv_control_msg error -32 req 02 val 2100 [ 2003.547904][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 2003.587533][T15272] pwc: recv_control_msg error -32 req 02 val 2200 [ 2003.608192][T30832] usb 3-1: Using ep0 maxpacket: 32 [ 2003.613677][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 2003.627567][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2003.647645][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2003.667913][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2003.668216][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 2003.687572][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2003.712110][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2003.728319][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 2003.737568][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2003.760245][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2003.768121][ T4237] pwc: recv_control_msg error -32 req 02 val 2200 [ 2003.777516][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2003.788701][T30301] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2003.798126][T30301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.799139][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2003.806742][T30301] usb 2-1: Product: syz [ 2003.817320][ T4237] pwc: recv_control_msg error -71 req 06 val 0600 [ 2003.824284][T30301] usb 2-1: Manufacturer: syz [ 2003.829313][T30301] usb 2-1: SerialNumber: syz [ 2003.833646][T15272] pwc: Registered as video71. [ 2003.847112][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input100 [ 2003.847692][ T4237] pwc: recv_control_msg error -71 req 04 val 1500 [ 2003.865720][T15272] usb 4-1: USB disconnect, device number 76 [ 2003.888860][T30301] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2003.910130][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 2003.928811][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 2003.948058][T30832] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2003.963687][T30832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.980336][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 2003.986959][T30832] usb 3-1: Product: syz [ 2003.995950][T30832] usb 3-1: Manufacturer: syz [ 2004.001592][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 2004.008452][T30832] usb 3-1: SerialNumber: syz [ 2004.021456][T30832] usb 3-1: config 0 descriptor?? [ 2004.030119][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 2004.051952][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 2004.063433][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2004.087858][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 2004.098522][ T4237] pwc: Registered as video71. [ 2004.105622][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input101 [ 2004.127679][T21143] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2004.160895][ T4237] usb 1-1: USB disconnect, device number 116 [ 2004.174948][T21143] pwc: recv_control_msg error -32 req 02 val 2700 [ 2004.228419][T21143] pwc: recv_control_msg error -32 req 04 val 1700 [ 2004.277994][T21143] pwc: recv_control_msg error -32 req 02 val 2c00 10:40:46 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x300}, 0x0) 10:40:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2004.318291][T21143] pwc: recv_control_msg error -32 req 04 val 1000 [ 2004.387750][T21143] pwc: recv_control_msg error -32 req 04 val 1300 [ 2004.431702][T21143] pwc: recv_control_msg error -71 req 04 val 1400 [ 2004.457894][T21143] pwc: recv_control_msg error -71 req 02 val 2000 [ 2004.486900][T30832] pwc: send_video_command error -71 [ 2004.492401][T30832] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2004.500494][T21143] pwc: recv_control_msg error -71 req 02 val 2100 [ 2004.507160][T30832] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2004.516944][T30832] usb 3-1: USB disconnect, device number 27 [ 2004.524171][T21143] pwc: recv_control_msg error -71 req 02 val 2200 [ 2004.547632][T30303] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2004.557737][T21143] pwc: recv_control_msg error -71 req 06 val 0600 [ 2004.577750][T21143] pwc: recv_control_msg error -71 req 04 val 1500 [ 2004.597584][T21143] pwc: recv_control_msg error -71 req 02 val 2500 [ 2004.597639][T15272] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2004.618410][T21143] pwc: recv_control_msg error -71 req 02 val 2400 [ 2004.639139][T21143] pwc: recv_control_msg error -71 req 02 val 2600 [ 2004.667960][T21143] pwc: recv_control_msg error -71 req 02 val 2900 [ 2004.698358][T21143] pwc: recv_control_msg error -71 req 02 val 2800 [ 2004.717666][T21143] pwc: recv_control_msg error -71 req 04 val 1100 [ 2004.739260][T21143] pwc: recv_control_msg error -71 req 04 val 1200 [ 2004.746408][T21143] pwc: Registered as video71. [ 2004.757209][T21143] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input102 [ 2004.782866][ T4237] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2004.796522][T21143] usb 5-1: USB disconnect, device number 123 [ 2004.847503][T15272] usb 4-1: Using ep0 maxpacket: 32 [ 2004.956031][T30832] usb 2-1: USB disconnect, device number 122 [ 2005.067544][ T4237] usb 1-1: Using ep0 maxpacket: 32 [ 2005.127703][T15272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2005.138200][T15272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.146322][T15272] usb 4-1: Product: syz [ 2005.150688][T15272] usb 4-1: Manufacturer: syz [ 2005.155402][T15272] usb 4-1: SerialNumber: syz [ 2005.165121][T15272] usb 4-1: config 0 descriptor?? [ 2005.210723][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2005.357695][ T4237] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2005.366787][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.382085][ T4237] usb 1-1: Product: syz [ 2005.386258][ T4237] usb 1-1: Manufacturer: syz [ 2005.392157][ T4237] usb 1-1: SerialNumber: syz [ 2005.398791][ T4237] usb 1-1: config 0 descriptor?? 10:40:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x500}, 0x0) 10:40:47 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:47 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x128, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x50, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xc8, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0xfa, 0x34, 0x10}, 0x20a, &(0x7f0000000380)={0x5, 0xf, 0x20a, 0x6, [@generic={0xf2, 0x10, 0xa, "f9a08b453e2eea09cf0e4d1a9439d8c57a2ab3e36cd41303448a3fb27db0d3273f5ae6eadd6c4e775dc49cd6a5cceb013b048bc7b33431950e376e602a66ffe33815e111125b82179b3d0227c3367c9d759b85d9dc48ee54e29d23c63015cedfd5c16d153e887f952e5a3ff5627122b9b74d612192257cc9bb73770bed024d181a0ef342781e9091ed286304804c5efc579f8a808120eb67e7887de07c1c2579a5008fb38221cc98e4326097bf34b0ec235cff8c4a5f5e7f36eca1ad01beb680c29718ecb6ac147599c045b1e8375ee804bf5d654a0e1a6d175a673c1da7632d41313c619f1f5ff4c60de4be41140e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x8, 0x7f, 0xfff8, 0x20}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5a1af42cad3a0bfe7725ee1d56f28232"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xee, 0x10, 0x4, "8965186fe149b88619ce881559b60eaea685734d57bd318c04b1cf969f60dee689c4f43d2ea2fb077d218a7015cb084c3166343fc0880f42f4f2a8987591d03a75315b5b2fb6119ed0a150b760201636a77fcdd9ad955b857681b6084db034e009c8f6c16e3426e2b78dad8b50851d2744620d59c092890235945ca18262748106d777f6cf5dd02874797d39d24073d6764476f77d1d75c86b0f8f870e72d1391dd5784702983dadb24b3df01e0ccc6020a9b4d308ab210623ca128a134e4bbece1a5ecf311432966f4b293a226f01b7dd0b00b97cd1361f7d6c7b8f906a1fc45401c18af5b6faf01f72cc"}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x814}}, {0xdd, &(0x7f00000005c0)=@string={0xdd, 0x3, "a1d7f8e85422d723997370e9127b4494184205b4da83bb70b0ddb37ac5b0b4d0f5ac5097933e58668dc0673d1983729040ec2324b7affd0d3cef169cb6fa50eb407fecb9067a38834ac8c2c0a4c5d0d8cf77bb18e17fd2b8f353e7439c8d51f364abdee9dcb063e7e404bbafdd809a41639245f2654a0d5cab364da6ee094a01ec0bf6038c50613c5db550324a623c7643cf8ac08e560c242a9cc68be59b36f01fa195689bc13fb2f19481b66e5da7a21d6514b23b6609342bfc422efea93a48bd964de240941bbb9128018240f08c2f14ddfe41efe7f6b36474c9"}}, {0x9d, &(0x7f00000006c0)=@string={0x9d, 0x3, "7e6e8e013c6980ef6972e3203b23fc5127820b7a01163724b5fbabd957d1b5128e947800bba94326f6a68011c28aca1d1bde389707b3179e317d31b2fe2176cbda849c750d178349ebb93f8ee5a27704781d6cda8a4c7dc299bd56ee18c5942d1667d843aa1f5d056757e44249f0064f62666e0910f8fd6a87eed9fb12c21b381d9901203151611c717a6cb6ccb2e608021352635d2a0821197108"}}, {0xca, &(0x7f0000000780)=@string={0xca, 0x3, "1f491b0ae7a278b058b2b46f315e1f160a393d5d38cc11ea4ca0aa42dbe3d8cd477e44bb1ce986c336c86d68dc9dfb560656491436746ed50e760b026d76aa58d6fd6fdca8fcd53e5a0eb3cfdc8afac065e5dbb0ef9a54ae45935e96dee272eea496e4d5b8e5b753848ce842d3dccd56d154e5d37733e79d6531def3b0c3326e22619fe1f24818d06163adf61748efc1dfefb521b48fb1ee47fdca4b234c9e1868daac53f5d6e42bd0c8ec7cdb3943e5cd9261a876c694557f0b36ac097432e2233c726e9c154234"}}]}) syz_usb_disconnect(r1) 10:40:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2005.439536][ T4237] pwc: Samsung MPC-C10 USB webcam detected. 10:40:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x600}, 0x0) 10:40:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x700}, 0x0) 10:40:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x900}, 0x0) 10:40:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xa00}, 0x0) 10:40:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xc00}, 0x0) [ 2005.738907][T30304] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2005.757569][T19272] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2005.837725][T30303] usb 2-1: Service connection timeout for: 256 [ 2005.843914][T30303] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2005.855360][T30303] ath9k_htc: Failed to initialize the device [ 2005.863211][T30832] usb 2-1: ath9k_htc: USB layer deinitialized [ 2005.867567][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2005.917881][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2005.957569][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2005.997603][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2006.004266][T19272] usb 3-1: Using ep0 maxpacket: 32 [ 2006.017515][T30304] usb 5-1: Using ep0 maxpacket: 32 [ 2006.048558][T15272] pwc: recv_control_msg error -32 req 04 val 1000 [ 2006.067717][ T4237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2006.088090][T15272] pwc: recv_control_msg error -32 req 04 val 1300 [ 2006.117605][ T4237] pwc: recv_control_msg error -32 req 02 val 2700 [ 2006.127783][T15272] pwc: recv_control_msg error -32 req 04 val 1400 [ 2006.167838][ T4237] pwc: recv_control_msg error -32 req 04 val 1700 [ 2006.168012][T15272] pwc: recv_control_msg error -32 req 02 val 2000 [ 2006.208608][ T4237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2006.217550][T15272] pwc: recv_control_msg error -32 req 02 val 2100 [ 2006.237806][T30832] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2006.257803][ T4237] pwc: recv_control_msg error -32 req 04 val 1000 [ 2006.261354][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2006.287588][T19272] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2006.296867][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2006.303500][T19272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.307816][ T4237] pwc: recv_control_msg error -32 req 04 val 1300 [ 2006.311911][T19272] usb 3-1: Product: syz [ 2006.318724][T30304] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2006.322460][T19272] usb 3-1: Manufacturer: syz [ 2006.336283][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2006.343262][T19272] usb 3-1: SerialNumber: syz [ 2006.347661][T30304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.356286][T30304] usb 5-1: Product: syz [ 2006.361484][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2006.361769][T30304] usb 5-1: Manufacturer: syz [ 2006.374403][T19272] usb 3-1: config 0 descriptor?? [ 2006.380760][T30304] usb 5-1: SerialNumber: syz [ 2006.387803][ T4237] pwc: recv_control_msg error -32 req 04 val 1400 [ 2006.397606][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2006.407168][T30304] usb 5-1: config 0 descriptor?? [ 2006.419866][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 2006.425901][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2006.437751][ T4237] pwc: recv_control_msg error -32 req 02 val 2000 [ 2006.447659][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2006.470078][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2006.470840][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2006.490564][ T4237] pwc: recv_control_msg error -32 req 02 val 2100 [ 2006.509928][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2006.530832][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2006.540558][T15272] pwc: Registered as video71. [ 2006.546105][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input103 [ 2006.566756][ T4237] pwc: recv_control_msg error -32 req 02 val 2200 [ 2006.571015][T15272] usb 4-1: USB disconnect, device number 77 [ 2006.639317][ T4237] pwc: recv_control_msg error -71 req 06 val 0600 [ 2006.667765][ T4237] pwc: recv_control_msg error -71 req 04 val 1500 [ 2006.698526][ T4237] pwc: recv_control_msg error -71 req 02 val 2500 [ 2006.728214][ T4237] pwc: recv_control_msg error -71 req 02 val 2400 [ 2006.767195][ T4237] pwc: recv_control_msg error -71 req 02 val 2600 [ 2006.787786][ T4237] pwc: recv_control_msg error -71 req 02 val 2900 [ 2006.807545][ T4237] pwc: recv_control_msg error -71 req 02 val 2800 [ 2006.817699][T19272] pwc: send_video_command error -71 [ 2006.823658][T19272] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2006.831454][T19272] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2006.837569][ T4237] pwc: recv_control_msg error -71 req 04 val 1100 [ 2006.847777][T19272] usb 3-1: USB disconnect, device number 28 [ 2006.848051][T30832] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2006.864713][ T4237] pwc: recv_control_msg error -71 req 04 val 1200 [ 2006.872558][ T4237] pwc: Registered as video71. [ 2006.877982][T30832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.894276][ T4237] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input104 [ 2006.904024][T30832] usb 2-1: Product: syz [ 2006.912964][T30832] usb 2-1: Manufacturer: syz [ 2006.919956][T30832] usb 2-1: SerialNumber: syz [ 2006.926638][ T4237] usb 1-1: USB disconnect, device number 117 [ 2006.968639][T30832] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:40:49 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xe00}, 0x0) 10:40:49 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2007.097619][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 10:40:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xf00}, 0x0) [ 2007.165322][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2007.227749][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2007.280114][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2007.337714][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2007.377885][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2007.418000][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2007.437699][T30832] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2007.437845][T19272] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2007.445661][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2007.488058][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2007.509301][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2007.527622][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2007.557807][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2007.577858][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2007.606449][T21143] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2007.615633][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2007.637647][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2007.657729][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2007.678233][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2007.698228][T19272] usb 1-1: Using ep0 maxpacket: 32 [ 2007.702082][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2007.709939][T30832] usb 4-1: Using ep0 maxpacket: 32 [ 2007.728443][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2007.746909][T30304] pwc: Registered as video71. [ 2007.754549][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input105 [ 2007.768305][T30304] usb 5-1: USB disconnect, device number 124 10:40:50 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2007.977772][T19272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2007.986844][T19272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.001133][T19272] usb 1-1: Product: syz [ 2008.005915][T19272] usb 1-1: Manufacturer: syz [ 2008.012702][T19272] usb 1-1: SerialNumber: syz [ 2008.021784][T21143] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2008.025541][T19272] usb 1-1: config 0 descriptor?? [ 2008.030854][T21143] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2008.040673][T30832] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2008.050126][T30832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.058793][T30832] usb 4-1: Product: syz [ 2008.063103][T30832] usb 4-1: Manufacturer: syz [ 2008.068239][T30832] usb 4-1: SerialNumber: syz [ 2008.069992][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 2008.089236][T30832] usb 4-1: config 0 descriptor?? [ 2008.143355][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2008.223033][T15612] UDC core: couldn't find an available UDC or it's busy: -16 [ 2008.230506][T15612] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2008.307694][T30304] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2008.443587][T14603] usb 2-1: USB disconnect, device number 123 [ 2008.461399][T21143] ath9k_htc: Failed to initialize the device [ 2008.467861][T14603] usb 2-1: ath9k_htc: USB layer deinitialized [ 2008.557476][T30304] usb 5-1: Using ep0 maxpacket: 32 [ 2008.747548][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2008.777780][T30832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2008.787779][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2008.817720][T30832] pwc: recv_control_msg error -32 req 02 val 2700 [ 2008.828491][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2008.837948][T30304] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2008.847018][T30304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.855206][T30304] usb 5-1: Product: syz [ 2008.859599][T30832] pwc: recv_control_msg error -32 req 04 val 1700 [ 2008.866992][T30304] usb 5-1: Manufacturer: syz [ 2008.868316][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2008.872228][T30304] usb 5-1: SerialNumber: syz [ 2008.894011][T30304] usb 5-1: config 0 descriptor?? [ 2008.907634][T30832] pwc: recv_control_msg error -32 req 02 val 2c00 10:40:51 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x128, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x50, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xc8, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0xfa, 0x34, 0x10}, 0x20a, &(0x7f0000000380)={0x5, 0xf, 0x20a, 0x6, [@generic={0xf2, 0x10, 0xa, "f9a08b453e2eea09cf0e4d1a9439d8c57a2ab3e36cd41303448a3fb27db0d3273f5ae6eadd6c4e775dc49cd6a5cceb013b048bc7b33431950e376e602a66ffe33815e111125b82179b3d0227c3367c9d759b85d9dc48ee54e29d23c63015cedfd5c16d153e887f952e5a3ff5627122b9b74d612192257cc9bb73770bed024d181a0ef342781e9091ed286304804c5efc579f8a808120eb67e7887de07c1c2579a5008fb38221cc98e4326097bf34b0ec235cff8c4a5f5e7f36eca1ad01beb680c29718ecb6ac147599c045b1e8375ee804bf5d654a0e1a6d175a673c1da7632d41313c619f1f5ff4c60de4be41140e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x8, 0x7f, 0xfff8, 0x20}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5a1af42cad3a0bfe7725ee1d56f28232"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xee, 0x10, 0x4, "8965186fe149b88619ce881559b60eaea685734d57bd318c04b1cf969f60dee689c4f43d2ea2fb077d218a7015cb084c3166343fc0880f42f4f2a8987591d03a75315b5b2fb6119ed0a150b760201636a77fcdd9ad955b857681b6084db034e009c8f6c16e3426e2b78dad8b50851d2744620d59c092890235945ca18262748106d777f6cf5dd02874797d39d24073d6764476f77d1d75c86b0f8f870e72d1391dd5784702983dadb24b3df01e0ccc6020a9b4d308ab210623ca128a134e4bbece1a5ecf311432966f4b293a226f01b7dd0b00b97cd1361f7d6c7b8f906a1fc45401c18af5b6faf01f72cc"}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x814}}, {0xdd, &(0x7f00000005c0)=@string={0xdd, 0x3, "a1d7f8e85422d723997370e9127b4494184205b4da83bb70b0ddb37ac5b0b4d0f5ac5097933e58668dc0673d1983729040ec2324b7affd0d3cef169cb6fa50eb407fecb9067a38834ac8c2c0a4c5d0d8cf77bb18e17fd2b8f353e7439c8d51f364abdee9dcb063e7e404bbafdd809a41639245f2654a0d5cab364da6ee094a01ec0bf6038c50613c5db550324a623c7643cf8ac08e560c242a9cc68be59b36f01fa195689bc13fb2f19481b66e5da7a21d6514b23b6609342bfc422efea93a48bd964de240941bbb9128018240f08c2f14ddfe41efe7f6b36474c9"}}, {0x9d, &(0x7f00000006c0)=@string={0x9d, 0x3, "7e6e8e013c6980ef6972e3203b23fc5127820b7a01163724b5fbabd957d1b5128e947800bba94326f6a68011c28aca1d1bde389707b3179e317d31b2fe2176cbda849c750d178349ebb93f8ee5a27704781d6cda8a4c7dc299bd56ee18c5942d1667d843aa1f5d056757e44249f0064f62666e0910f8fd6a87eed9fb12c21b381d9901203151611c717a6cb6ccb2e608021352635d2a0821197108"}}, {0xca, &(0x7f0000000780)=@string={0xca, 0x3, "1f491b0ae7a278b058b2b46f315e1f160a393d5d38cc11ea4ca0aa42dbe3d8cd477e44bb1ce986c336c86d68dc9dfb560656491436746ed50e760b026d76aa58d6fd6fdca8fcd53e5a0eb3cfdc8afac065e5dbb0ef9a54ae45935e96dee272eea496e4d5b8e5b753848ce842d3dccd56d154e5d37733e79d6531def3b0c3326e22619fe1f24818d06163adf61748efc1dfefb521b48fb1ee47fdca4b234c9e1868daac53f5d6e42bd0c8ec7cdb3943e5cd9261a876c694557f0b36ac097432e2233c726e9c154234"}}]}) syz_usb_disconnect(r1) 10:40:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x17e9}, 0x0) 10:40:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2008.917570][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 2008.939901][T30304] pwc: Samsung MPC-C10 USB webcam detected. 10:40:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x1f00}, 0x0) [ 2008.965924][T30832] pwc: recv_control_msg error -32 req 04 val 1000 [ 2008.976664][T19272] pwc: recv_control_msg error -32 req 04 val 1300 10:40:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x2000}, 0x0) 10:40:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x4800}, 0x0) [ 2009.027574][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 2009.027623][T30832] pwc: recv_control_msg error -32 req 04 val 1300 [ 2009.067748][T19272] pwc: recv_control_msg error -32 req 02 val 2000 10:40:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x4c00}, 0x0) [ 2009.097757][T30832] pwc: recv_control_msg error -32 req 04 val 1400 [ 2009.107797][T19272] pwc: recv_control_msg error -32 req 02 val 2100 [ 2009.147732][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2009.154789][T30832] pwc: recv_control_msg error -32 req 02 val 2000 [ 2009.167972][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2009.190395][T19272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2009.197720][T30832] pwc: recv_control_msg error -32 req 02 val 2100 [ 2009.207800][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2009.227517][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2009.237540][T30832] pwc: recv_control_msg error -71 req 02 val 2200 [ 2009.247575][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2009.257574][T14603] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2009.258118][T30832] pwc: recv_control_msg error -71 req 06 val 0600 [ 2009.268422][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2009.287599][T21143] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2009.295352][T30832] pwc: recv_control_msg error -71 req 04 val 1500 [ 2009.301446][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2009.317755][T30832] pwc: recv_control_msg error -71 req 02 val 2500 [ 2009.327674][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2009.339289][T30832] pwc: recv_control_msg error -71 req 02 val 2400 [ 2009.347665][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2009.355496][T19272] pwc: Registered as video71. [ 2009.362177][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input106 [ 2009.367730][T30832] pwc: recv_control_msg error -71 req 02 val 2600 [ 2009.395651][T19272] usb 1-1: USB disconnect, device number 118 [ 2009.407714][T30832] pwc: recv_control_msg error -71 req 02 val 2900 [ 2009.438393][T30832] pwc: recv_control_msg error -71 req 02 val 2800 [ 2009.467702][T30832] pwc: recv_control_msg error -71 req 04 val 1100 [ 2009.487905][T30832] pwc: recv_control_msg error -71 req 04 val 1200 [ 2009.496988][T30832] pwc: Registered as video71. [ 2009.497727][T14603] usb 3-1: Using ep0 maxpacket: 32 [ 2009.512974][T30832] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input107 [ 2009.560413][T30832] usb 4-1: USB disconnect, device number 78 [ 2009.577850][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 10:40:51 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x5865}, 0x0) [ 2009.617720][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2009.667922][T30304] pwc: recv_control_msg error -32 req 04 val 1700 10:40:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x6000}, 0x0) [ 2009.709660][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2009.747806][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2009.779245][T14603] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2009.795392][T14603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.803795][T14603] usb 3-1: Product: syz [ 2009.807840][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2009.808270][T14603] usb 3-1: Manufacturer: syz [ 2009.819177][T14603] usb 3-1: SerialNumber: syz [ 2009.828642][T14603] usb 3-1: config 0 descriptor?? [ 2009.856035][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2009.867782][T21143] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2009.872076][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2009.876851][T21143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.876884][T21143] usb 2-1: Product: syz [ 2009.876906][T21143] usb 2-1: Manufacturer: syz [ 2009.876927][T21143] usb 2-1: SerialNumber: syz [ 2009.905016][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2009.928849][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2009.948309][T21143] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2009.957991][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2009.977561][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2009.984065][T30303] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2010.007834][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2010.038505][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2010.058778][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2010.077963][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2010.098449][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2010.118536][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2010.148016][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2010.167728][T30832] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2010.175430][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2010.184919][T30304] pwc: Registered as video71. [ 2010.192755][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input108 [ 2010.206653][T30304] usb 5-1: USB disconnect, device number 125 [ 2010.237570][T30303] usb 1-1: Using ep0 maxpacket: 32 [ 2010.258030][T14603] pwc: send_video_command error -71 [ 2010.263497][T14603] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2010.283629][T14603] Philips webcam: probe of 3-1:0.0 failed with error -71 10:40:52 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2010.310844][T14603] usb 3-1: USB disconnect, device number 29 [ 2010.447785][T30832] usb 4-1: Using ep0 maxpacket: 32 [ 2010.537794][T30303] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2010.546879][T30303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.556236][T30303] usb 1-1: Product: syz [ 2010.560866][T30303] usb 1-1: Manufacturer: syz [ 2010.565836][T30303] usb 1-1: SerialNumber: syz [ 2010.575487][T30303] usb 1-1: config 0 descriptor?? [ 2010.580925][T21143] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2010.641883][T30303] pwc: Samsung MPC-C10 USB webcam detected. [ 2010.757861][T30304] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2010.765796][T30832] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2010.777155][T30832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.786816][T30832] usb 4-1: Product: syz [ 2010.791532][T30832] usb 4-1: Manufacturer: syz [ 2010.796318][T30832] usb 4-1: SerialNumber: syz [ 2010.811598][T30832] usb 4-1: config 0 descriptor?? [ 2010.870191][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2011.000802][T21143] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2011.006481][T21143] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2011.027507][T30304] usb 5-1: Using ep0 maxpacket: 32 [ 2011.202468][T15642] UDC core: couldn't find an available UDC or it's busy: -16 [ 2011.211076][T15642] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2011.308435][T30303] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2011.359909][T30304] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2011.369129][T30303] pwc: recv_control_msg error -32 req 02 val 2700 [ 2011.375698][T30304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.385610][T30304] usb 5-1: Product: syz [ 2011.390525][T30304] usb 5-1: Manufacturer: syz [ 2011.395127][T30304] usb 5-1: SerialNumber: syz [ 2011.403487][T30304] usb 5-1: config 0 descriptor?? [ 2011.408837][T30303] pwc: recv_control_msg error -32 req 04 val 1700 [ 2011.422882][T12111] usb 2-1: USB disconnect, device number 124 [ 2011.451324][T21143] ath9k_htc: Failed to initialize the device [ 2011.457493][T30303] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2011.465729][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2011.472134][T12111] usb 2-1: ath9k_htc: USB layer deinitialized [ 2011.517872][T30303] pwc: recv_control_msg error -32 req 04 val 1000 [ 2011.527775][T30832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2011.558629][T30303] pwc: recv_control_msg error -32 req 04 val 1300 [ 2011.578327][T30832] pwc: recv_control_msg error -32 req 02 val 2700 [ 2011.597985][T30303] pwc: recv_control_msg error -32 req 04 val 1400 [ 2011.617600][T30832] pwc: recv_control_msg error -32 req 04 val 1700 [ 2011.647547][T30303] pwc: recv_control_msg error -32 req 02 val 2000 [ 2011.658202][T30832] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2011.687541][T30303] pwc: recv_control_msg error -71 req 02 val 2100 [ 2011.698726][T30832] pwc: recv_control_msg error -32 req 04 val 1000 [ 2011.707913][T30303] pwc: recv_control_msg error -71 req 02 val 2200 [ 2011.727527][T30303] pwc: recv_control_msg error -71 req 06 val 0600 [ 2011.747653][T30832] pwc: recv_control_msg error -32 req 04 val 1300 [ 2011.754258][T30303] pwc: recv_control_msg error -71 req 04 val 1500 [ 2011.777537][T30303] pwc: recv_control_msg error -71 req 02 val 2500 [ 2011.787778][T30832] pwc: recv_control_msg error -32 req 04 val 1400 [ 2011.809173][T30303] pwc: recv_control_msg error -71 req 02 val 2400 [ 2011.837596][T30832] pwc: recv_control_msg error -32 req 02 val 2000 [ 2011.844335][T30303] pwc: recv_control_msg error -71 req 02 val 2600 10:40:54 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x128, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async, rerun: 32) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x50, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xc8, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0xfa, 0x34, 0x10}, 0x20a, &(0x7f0000000380)={0x5, 0xf, 0x20a, 0x6, [@generic={0xf2, 0x10, 0xa, "f9a08b453e2eea09cf0e4d1a9439d8c57a2ab3e36cd41303448a3fb27db0d3273f5ae6eadd6c4e775dc49cd6a5cceb013b048bc7b33431950e376e602a66ffe33815e111125b82179b3d0227c3367c9d759b85d9dc48ee54e29d23c63015cedfd5c16d153e887f952e5a3ff5627122b9b74d612192257cc9bb73770bed024d181a0ef342781e9091ed286304804c5efc579f8a808120eb67e7887de07c1c2579a5008fb38221cc98e4326097bf34b0ec235cff8c4a5f5e7f36eca1ad01beb680c29718ecb6ac147599c045b1e8375ee804bf5d654a0e1a6d175a673c1da7632d41313c619f1f5ff4c60de4be41140e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x8, 0x7f, 0xfff8, 0x20}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5a1af42cad3a0bfe7725ee1d56f28232"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xee, 0x10, 0x4, "8965186fe149b88619ce881559b60eaea685734d57bd318c04b1cf969f60dee689c4f43d2ea2fb077d218a7015cb084c3166343fc0880f42f4f2a8987591d03a75315b5b2fb6119ed0a150b760201636a77fcdd9ad955b857681b6084db034e009c8f6c16e3426e2b78dad8b50851d2744620d59c092890235945ca18262748106d777f6cf5dd02874797d39d24073d6764476f77d1d75c86b0f8f870e72d1391dd5784702983dadb24b3df01e0ccc6020a9b4d308ab210623ca128a134e4bbece1a5ecf311432966f4b293a226f01b7dd0b00b97cd1361f7d6c7b8f906a1fc45401c18af5b6faf01f72cc"}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x814}}, {0xdd, &(0x7f00000005c0)=@string={0xdd, 0x3, "a1d7f8e85422d723997370e9127b4494184205b4da83bb70b0ddb37ac5b0b4d0f5ac5097933e58668dc0673d1983729040ec2324b7affd0d3cef169cb6fa50eb407fecb9067a38834ac8c2c0a4c5d0d8cf77bb18e17fd2b8f353e7439c8d51f364abdee9dcb063e7e404bbafdd809a41639245f2654a0d5cab364da6ee094a01ec0bf6038c50613c5db550324a623c7643cf8ac08e560c242a9cc68be59b36f01fa195689bc13fb2f19481b66e5da7a21d6514b23b6609342bfc422efea93a48bd964de240941bbb9128018240f08c2f14ddfe41efe7f6b36474c9"}}, {0x9d, &(0x7f00000006c0)=@string={0x9d, 0x3, "7e6e8e013c6980ef6972e3203b23fc5127820b7a01163724b5fbabd957d1b5128e947800bba94326f6a68011c28aca1d1bde389707b3179e317d31b2fe2176cbda849c750d178349ebb93f8ee5a27704781d6cda8a4c7dc299bd56ee18c5942d1667d843aa1f5d056757e44249f0064f62666e0910f8fd6a87eed9fb12c21b381d9901203151611c717a6cb6ccb2e608021352635d2a0821197108"}}, {0xca, &(0x7f0000000780)=@string={0xca, 0x3, "1f491b0ae7a278b058b2b46f315e1f160a393d5d38cc11ea4ca0aa42dbe3d8cd477e44bb1ce986c336c86d68dc9dfb560656491436746ed50e760b026d76aa58d6fd6fdca8fcd53e5a0eb3cfdc8afac065e5dbb0ef9a54ae45935e96dee272eea496e4d5b8e5b753848ce842d3dccd56d154e5d37733e79d6531def3b0c3326e22619fe1f24818d06163adf61748efc1dfefb521b48fb1ee47fdca4b234c9e1868daac53f5d6e42bd0c8ec7cdb3943e5cd9261a876c694557f0b36ac097432e2233c726e9c154234"}}]}) (rerun: 32) syz_usb_disconnect(r1) 10:40:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x6558}, 0x0) 10:40:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2011.869260][T30303] pwc: recv_control_msg error -71 req 02 val 2900 [ 2011.887667][T30832] pwc: recv_control_msg error -32 req 02 val 2100 [ 2011.894434][T30303] pwc: recv_control_msg error -71 req 02 val 2800 10:40:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x6800}, 0x0) [ 2011.946365][T30303] pwc: recv_control_msg error -71 req 04 val 1100 [ 2011.953264][T30832] pwc: recv_control_msg error -71 req 02 val 2200 [ 2011.978022][T30832] pwc: recv_control_msg error -71 req 06 val 0600 10:40:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x6c00}, 0x0) [ 2011.997949][T30303] pwc: recv_control_msg error -71 req 04 val 1200 [ 2012.005216][T30832] pwc: recv_control_msg error -71 req 04 val 1500 [ 2012.015543][T30303] pwc: Registered as video71. [ 2012.027879][T30303] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input109 [ 2012.037834][T30832] pwc: recv_control_msg error -71 req 02 val 2500 10:40:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x7400}, 0x0) [ 2012.053439][T30303] usb 1-1: USB disconnect, device number 119 [ 2012.068780][T30832] pwc: recv_control_msg error -71 req 02 val 2400 [ 2012.079069][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2012.117529][T30832] pwc: recv_control_msg error -71 req 02 val 2600 [ 2012.137646][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2012.157740][T30832] pwc: recv_control_msg error -71 req 02 val 2900 10:40:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x7a00}, 0x0) 10:40:54 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2012.177878][T30832] pwc: recv_control_msg error -71 req 02 val 2800 [ 2012.184503][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2012.218223][T30832] pwc: recv_control_msg error -71 req 04 val 1100 [ 2012.237777][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2012.245712][T30832] pwc: recv_control_msg error -71 req 04 val 1200 [ 2012.259634][T30832] pwc: Registered as video71. [ 2012.272271][T21143] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2012.280046][T12111] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2012.287866][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2012.310683][T30832] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input110 10:40:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x8100}, 0x0) [ 2012.337730][T30304] pwc: recv_control_msg error -71 req 04 val 1300 [ 2012.355417][T30832] usb 4-1: USB disconnect, device number 79 [ 2012.361888][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2012.387552][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2012.408477][T30304] pwc: recv_control_msg error -71 req 02 val 2100 10:40:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xe917}, 0x0) [ 2012.437623][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2012.467632][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2012.497596][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2012.527892][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2012.547979][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2012.567934][T21143] usb 3-1: Using ep0 maxpacket: 32 [ 2012.573531][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2012.598351][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2012.629042][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2012.658947][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2012.677862][T30303] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2012.685735][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2012.693306][T30304] pwc: Registered as video71. [ 2012.699880][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input111 [ 2012.712422][T30304] usb 5-1: USB disconnect, device number 126 10:40:55 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2012.908066][T12111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2012.917165][T12111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.925733][T21143] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2012.934983][T30832] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2012.942772][T30303] usb 1-1: Using ep0 maxpacket: 32 [ 2012.948245][T21143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.956259][T21143] usb 3-1: Product: syz [ 2012.961277][T12111] usb 2-1: Product: syz [ 2012.965464][T12111] usb 2-1: Manufacturer: syz [ 2012.970822][T21143] usb 3-1: Manufacturer: syz [ 2012.975443][T21143] usb 3-1: SerialNumber: syz [ 2012.980402][T12111] usb 2-1: SerialNumber: syz [ 2012.990187][T21143] usb 3-1: config 0 descriptor?? [ 2013.038610][T12111] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2013.050660][T21143] pwc: Samsung MPC-C10 USB webcam detected. [ 2013.187465][T30832] usb 4-1: Using ep0 maxpacket: 32 [ 2013.247473][T30304] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2013.258034][T30303] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2013.267100][T30303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.275532][T30303] usb 1-1: Product: syz [ 2013.280972][T30303] usb 1-1: Manufacturer: syz [ 2013.285592][T30303] usb 1-1: SerialNumber: syz [ 2013.303067][T30303] usb 1-1: config 0 descriptor?? [ 2013.351817][T30303] pwc: Samsung MPC-C10 USB webcam detected. [ 2013.448479][T21143] pwc: send_video_command error -71 [ 2013.453698][T21143] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2013.466748][T21143] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2013.476187][T21143] usb 3-1: USB disconnect, device number 30 [ 2013.497784][T30832] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2013.510851][T30832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.519465][T30304] usb 5-1: Using ep0 maxpacket: 32 [ 2013.525282][T30832] usb 4-1: Product: syz [ 2013.530114][T30832] usb 4-1: Manufacturer: syz [ 2013.535327][T30832] usb 4-1: SerialNumber: syz [ 2013.542931][T30832] usb 4-1: config 0 descriptor?? [ 2013.590418][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2013.677836][T12111] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2013.797983][T30304] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2013.807053][T30304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.820286][T30304] usb 5-1: Product: syz [ 2013.824458][T30304] usb 5-1: Manufacturer: syz [ 2013.830945][T30304] usb 5-1: SerialNumber: syz [ 2013.842005][T30304] usb 5-1: config 0 descriptor?? [ 2013.880494][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2013.882898][T15697] UDC core: couldn't find an available UDC or it's busy: -16 [ 2013.894254][T15697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2013.901573][T12111] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2013.908204][T15697] UDC core: couldn't find an available UDC or it's busy: -16 [ 2013.908915][T12111] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2013.915695][T15697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2013.942621][T15697] UDC core: couldn't find an available UDC or it's busy: -16 [ 2013.951109][T15697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2013.963180][T15697] UDC core: couldn't find an available UDC or it's busy: -16 [ 2013.970762][T15697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2013.984713][T15697] UDC core: couldn't find an available UDC or it's busy: -16 [ 2013.992257][T15697] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2013.998500][T30303] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2014.037855][T30303] pwc: recv_control_msg error -32 req 02 val 2700 [ 2014.080175][T30303] pwc: recv_control_msg error -32 req 04 val 1700 [ 2014.117775][T30303] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2014.160428][T30303] pwc: recv_control_msg error -32 req 04 val 1000 [ 2014.197910][T30303] pwc: recv_control_msg error -32 req 04 val 1300 [ 2014.237861][T30832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2014.244619][T30303] pwc: recv_control_msg error -32 req 04 val 1400 [ 2014.277726][T30832] pwc: recv_control_msg error -32 req 02 val 2700 [ 2014.287850][T30303] pwc: recv_control_msg error -32 req 02 val 2000 [ 2014.318596][T30832] pwc: recv_control_msg error -32 req 04 val 1700 [ 2014.327901][T30303] pwc: recv_control_msg error -71 req 02 val 2100 [ 2014.347483][T30303] pwc: recv_control_msg error -71 req 02 val 2200 [ 2014.358041][T30832] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2014.367763][T30303] pwc: recv_control_msg error -71 req 06 val 0600 [ 2014.387513][T30303] pwc: recv_control_msg error -71 req 04 val 1500 [ 2014.400073][T30832] pwc: recv_control_msg error -32 req 04 val 1000 [ 2014.407529][T30303] pwc: recv_control_msg error -71 req 02 val 2500 [ 2014.427520][T30303] pwc: recv_control_msg error -71 req 02 val 2400 [ 2014.437902][T30832] pwc: recv_control_msg error -32 req 04 val 1300 [ 2014.447865][T30303] pwc: recv_control_msg error -71 req 02 val 2600 [ 2014.467517][T30303] pwc: recv_control_msg error -71 req 02 val 2900 [ 2014.477800][T30832] pwc: recv_control_msg error -32 req 04 val 1400 [ 2014.487892][T30303] pwc: recv_control_msg error -71 req 02 val 2800 [ 2014.507566][T30303] pwc: recv_control_msg error -71 req 04 val 1100 [ 2014.517776][T30832] pwc: recv_control_msg error -32 req 02 val 2000 [ 2014.527825][T30303] pwc: recv_control_msg error -71 req 04 val 1200 [ 2014.545043][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2014.551808][T30303] pwc: Registered as video71. [ 2014.559274][T30832] pwc: recv_control_msg error -71 req 02 val 2100 [ 2014.567114][T30303] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input112 [ 2014.588165][T30832] pwc: recv_control_msg error -71 req 02 val 2200 [ 2014.598627][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2014.607674][T30832] pwc: recv_control_msg error -71 req 06 val 0600 [ 2014.627631][T30832] pwc: recv_control_msg error -71 req 04 val 1500 [ 2014.634467][T30303] usb 1-1: USB disconnect, device number 120 [ 2014.643343][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2014.660244][T30832] pwc: recv_control_msg error -71 req 02 val 2500 [ 2014.679706][T30832] pwc: recv_control_msg error -71 req 02 val 2400 [ 2014.697915][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2014.704972][T30832] pwc: recv_control_msg error -71 req 02 val 2600 [ 2014.737130][T30832] pwc: recv_control_msg error -71 req 02 val 2900 [ 2014.747825][T30304] pwc: recv_control_msg error -71 req 04 val 1000 [ 2014.760055][T30832] pwc: recv_control_msg error -71 req 02 val 2800 [ 2014.767607][T30304] pwc: recv_control_msg error -71 req 04 val 1300 [ 2014.777865][T30832] pwc: recv_control_msg error -71 req 04 val 1100 [ 2014.787601][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2014.797704][T30832] pwc: recv_control_msg error -71 req 04 val 1200 [ 2014.804938][T30832] pwc: Registered as video71. [ 2014.810074][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2014.818592][T30832] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input113 [ 2014.830928][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2014.843999][T30832] usb 4-1: USB disconnect, device number 80 [ 2014.857705][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2014.877769][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2014.908557][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2014.933072][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2014.968805][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2014.987988][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2015.008259][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2015.027581][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2015.047696][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2015.067509][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2015.083280][T30304] pwc: Registered as video71. [ 2015.089708][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input114 [ 2015.129159][T30304] usb 5-1: USB disconnect, device number 127 10:40:57 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x1b, &(0x7f0000000000)=@generic={0x1, 0x2, 0x13, "5cd8f586", "0eebf5e4a44aadebdc178e6b397602083f6fd0"}) 10:40:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xf000}, 0x0) 10:40:57 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:40:57 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2015.220484][T15272] usb 2-1: USB disconnect, device number 125 [ 2015.238406][T12111] ath9k_htc: Failed to initialize the device [ 2015.246035][T15272] usb 2-1: ath9k_htc: USB layer deinitialized 10:40:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x34000}, 0x0) 10:40:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x400300}, 0x0) 10:40:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xf0ffff}, 0x0) 10:40:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x1000000}, 0x0) 10:40:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x2000000}, 0x0) 10:40:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x3000000}, 0x0) [ 2015.557660][T19272] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2015.565540][T14603] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2015.590929][T21700] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2015.707610][T30304] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2015.767493][T15272] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2015.827496][T19272] usb 1-1: Using ep0 maxpacket: 32 [ 2015.832780][T14603] usb 4-1: Using ep0 maxpacket: 32 [ 2015.847528][T21700] usb 3-1: Using ep0 maxpacket: 32 [ 2015.947489][T30304] usb 5-1: Using ep0 maxpacket: 32 [ 2016.097922][T15272] usb 2-1: no configurations [ 2016.102826][T15272] usb 2-1: can't read configurations, error -22 [ 2016.147770][T19272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2016.156996][T14603] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2016.169734][T19272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.178109][T21700] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2016.187533][T14603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.195663][T21700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.205442][T19272] usb 1-1: Product: syz [ 2016.209797][T14603] usb 4-1: Product: syz [ 2016.214210][T21700] usb 3-1: Product: syz [ 2016.218514][T19272] usb 1-1: Manufacturer: syz [ 2016.223313][T14603] usb 4-1: Manufacturer: syz [ 2016.227840][T30304] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2016.228051][T21700] usb 3-1: Manufacturer: syz [ 2016.241538][T30304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.241570][T30304] usb 5-1: Product: syz [ 2016.241590][T30304] usb 5-1: Manufacturer: syz [ 2016.241610][T30304] usb 5-1: SerialNumber: syz [ 2016.263096][T19272] usb 1-1: SerialNumber: syz [ 2016.267965][T15272] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2016.269214][T30304] usb 5-1: config 0 descriptor?? [ 2016.275724][T14603] usb 4-1: SerialNumber: syz [ 2016.287726][T14603] usb 4-1: config 0 descriptor?? [ 2016.293505][T21700] usb 3-1: SerialNumber: syz [ 2016.299221][T19272] usb 1-1: config 0 descriptor?? [ 2016.307526][T21700] usb 3-1: config 0 descriptor?? [ 2016.330616][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2016.350018][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 2016.357909][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2016.365583][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 2016.577963][T15272] usb 2-1: no configurations [ 2016.582612][T15272] usb 2-1: can't read configurations, error -22 [ 2016.589650][T15272] usb usb2-port1: attempt power cycle [ 2016.767856][T21700] pwc: send_video_command error -71 [ 2016.779386][T21700] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2016.786971][T21700] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2016.804836][T21700] usb 3-1: USB disconnect, device number 31 [ 2016.977734][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2016.984407][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2016.987558][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2017.017528][T15272] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2017.037858][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2017.042425][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2017.051004][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2017.087537][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2017.097689][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2017.104328][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2017.127680][T30304] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2017.147731][T30304] pwc: recv_control_msg error -71 req 04 val 1000 [ 2017.147784][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2017.160810][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2017.168457][T30304] pwc: recv_control_msg error -71 req 04 val 1300 [ 2017.188791][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2017.207564][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2017.207928][T15272] usb 2-1: no configurations [ 2017.218808][T19272] pwc: recv_control_msg error -32 req 04 val 1000 [ 2017.225459][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2017.236432][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2017.238849][T15272] usb 2-1: can't read configurations, error -22 [ 2017.267613][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2017.267737][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 2017.280806][T19272] pwc: recv_control_msg error -32 req 04 val 1300 [ 2017.290786][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2017.318568][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2017.337666][T19272] pwc: recv_control_msg error -32 req 04 val 1400 [ 2017.342188][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2017.344752][T14603] pwc: recv_control_msg error -32 req 04 val 1400 [ 2017.367554][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2017.397598][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2017.397685][T19272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2017.410735][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2017.417242][T15272] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2017.417594][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2017.437721][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2017.444300][T19272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2017.447492][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2017.467710][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2017.474368][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2017.477563][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2017.497912][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2017.504478][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2017.507716][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2017.518875][T30304] pwc: Registered as video71. [ 2017.524860][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input115 [ 2017.537830][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2017.544436][T19272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2017.559845][T30304] usb 5-1: USB disconnect, device number 2 [ 2017.567663][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2017.574491][T15272] usb 2-1: no configurations [ 2017.579532][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2017.586598][T15272] usb 2-1: can't read configurations, error -22 [ 2017.600051][T15272] usb usb2-port1: unable to enumerate USB device [ 2017.607689][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2017.614410][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2017.637703][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2017.644344][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2017.667787][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2017.674444][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2017.698622][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2017.705373][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2017.727719][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2017.734554][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2017.767700][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2017.774530][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2017.781806][T14603] pwc: Registered as video71. [ 2017.787507][T19272] pwc: Registered as video72. [ 2017.794999][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input117 [ 2017.805125][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input116 [ 2017.819694][T14603] usb 4-1: USB disconnect, device number 81 [ 2017.826963][T19272] usb 1-1: USB disconnect, device number 121 10:41:00 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x1b, &(0x7f0000000000)=@generic={0x1, 0x2, 0x13, "5cd8f586", "0eebf5e4a44aadebdc178e6b397602083f6fd0"}) 10:41:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x4000000}, 0x0) 10:41:00 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:00 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:00 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x5000000}, 0x0) 10:41:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x6000000}, 0x0) 10:41:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x7000000}, 0x0) 10:41:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x8000000}, 0x0) 10:41:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x9000000}, 0x0) 10:41:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xa000000}, 0x0) [ 2018.638082][T30304] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2018.647732][T30303] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2018.656166][T30832] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2018.663915][T12111] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2018.807581][T19272] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2018.887474][T30304] usb 4-1: Using ep0 maxpacket: 32 [ 2018.907571][T30303] usb 3-1: Using ep0 maxpacket: 32 [ 2018.912905][T30832] usb 1-1: Using ep0 maxpacket: 32 [ 2018.918409][T12111] usb 5-1: Using ep0 maxpacket: 32 [ 2019.117806][T19272] usb 2-1: no configurations [ 2019.122612][T19272] usb 2-1: can't read configurations, error -22 [ 2019.167760][T30304] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2019.177440][T30304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.185612][T30304] usb 4-1: Product: syz [ 2019.190408][T30303] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2019.199844][T30304] usb 4-1: Manufacturer: syz [ 2019.204572][T30303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.212970][T30832] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2019.222239][T12111] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2019.231493][T30304] usb 4-1: SerialNumber: syz [ 2019.236195][T30832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.244347][T12111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.253450][T30303] usb 3-1: Product: syz [ 2019.259699][T30304] usb 4-1: config 0 descriptor?? [ 2019.264776][T30303] usb 3-1: Manufacturer: syz [ 2019.269998][T30832] usb 1-1: Product: syz [ 2019.274173][T30832] usb 1-1: Manufacturer: syz [ 2019.278911][T12111] usb 5-1: Product: syz [ 2019.283084][T12111] usb 5-1: Manufacturer: syz [ 2019.287924][T30303] usb 3-1: SerialNumber: syz [ 2019.293367][T30832] usb 1-1: SerialNumber: syz [ 2019.297479][T19272] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2019.298059][T12111] usb 5-1: SerialNumber: syz [ 2019.311145][T30303] usb 3-1: config 0 descriptor?? [ 2019.318623][T30832] usb 1-1: config 0 descriptor?? [ 2019.330014][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2019.336624][T12111] usb 5-1: config 0 descriptor?? [ 2019.349855][T30303] pwc: Samsung MPC-C10 USB webcam detected. [ 2019.359306][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2019.379171][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 2019.607721][T19272] usb 2-1: no configurations [ 2019.612395][T19272] usb 2-1: can't read configurations, error -22 [ 2019.619555][T19272] usb usb2-port1: attempt power cycle [ 2019.747577][T30303] pwc: send_video_command error -71 [ 2019.753155][T30303] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2019.761295][T30303] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2019.783721][T30303] usb 3-1: USB disconnect, device number 32 [ 2019.987598][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2020.017604][T30832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2020.027715][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2020.038076][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2020.047548][T19272] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2020.057621][T30832] pwc: recv_control_msg error -32 req 02 val 2700 [ 2020.067785][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2020.083467][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 2020.097897][T30832] pwc: recv_control_msg error -32 req 04 val 1700 [ 2020.107631][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2020.137531][T12111] pwc: recv_control_msg error -71 req 04 val 1700 [ 2020.144696][T30832] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2020.151588][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2020.158513][T12111] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2020.183229][T12111] pwc: recv_control_msg error -71 req 04 val 1000 [ 2020.197598][T19272] usb 2-1: no configurations [ 2020.197855][T30832] pwc: recv_control_msg error -32 req 04 val 1000 [ 2020.202645][T19272] usb 2-1: can't read configurations, error -22 [ 2020.208962][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2020.230257][T12111] pwc: recv_control_msg error -71 req 04 val 1300 [ 2020.257633][T12111] pwc: recv_control_msg error -71 req 04 val 1400 [ 2020.277626][T30832] pwc: recv_control_msg error -32 req 04 val 1300 [ 2020.284290][T30304] pwc: recv_control_msg error -32 req 04 val 1400 [ 2020.292275][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 2020.317662][T30832] pwc: recv_control_msg error -32 req 04 val 1400 [ 2020.324203][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 2020.337782][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2020.348389][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 2020.357624][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2020.367485][T19272] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2020.367660][T30832] pwc: recv_control_msg error -71 req 02 val 2000 [ 2020.381942][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 2020.388536][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2020.407550][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 2020.414109][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2020.420838][T30832] pwc: recv_control_msg error -71 req 02 val 2100 [ 2020.427521][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 2020.437526][T30832] pwc: recv_control_msg error -71 req 02 val 2200 [ 2020.447612][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2020.454848][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 2020.461515][T30832] pwc: recv_control_msg error -71 req 06 val 0600 [ 2020.468118][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2020.487551][T30832] pwc: recv_control_msg error -71 req 04 val 1500 [ 2020.494163][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 2020.501894][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2020.508870][T30832] pwc: recv_control_msg error -71 req 02 val 2500 [ 2020.517671][T19272] usb 2-1: no configurations [ 2020.522648][T19272] usb 2-1: can't read configurations, error -22 [ 2020.527611][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2020.529382][T19272] usb usb2-port1: unable to enumerate USB device [ 2020.535986][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 2020.548761][T30832] pwc: recv_control_msg error -71 req 02 val 2400 [ 2020.555349][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2020.567583][T30832] pwc: recv_control_msg error -71 req 02 val 2600 [ 2020.577609][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2020.584950][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 2020.591794][T30832] pwc: recv_control_msg error -71 req 02 val 2900 [ 2020.598565][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2020.617550][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 2020.624187][T30832] pwc: recv_control_msg error -71 req 02 val 2800 [ 2020.635727][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2020.642427][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 2020.650870][T30304] pwc: Registered as video71. [ 2020.656775][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input118 [ 2020.667569][T30832] pwc: recv_control_msg error -71 req 04 val 1100 [ 2020.674411][T12111] pwc: Registered as video72. [ 2020.680110][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input119 [ 2020.690200][T30832] pwc: recv_control_msg error -71 req 04 val 1200 [ 2020.705261][T30832] pwc: Registered as video73. [ 2020.722780][T30304] usb 4-1: USB disconnect, device number 82 [ 2020.740825][T30832] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input120 [ 2020.752069][T12111] usb 5-1: USB disconnect, device number 3 [ 2020.813028][T30832] usb 1-1: USB disconnect, device number 122 10:41:03 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (rerun: 32) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x1b, &(0x7f0000000000)=@generic={0x1, 0x2, 0x13, "5cd8f586", "0eebf5e4a44aadebdc178e6b397602083f6fd0"}) 10:41:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xc000000}, 0x0) 10:41:03 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:03 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:03 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:03 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xe000000}, 0x0) 10:41:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xf000000}, 0x0) 10:41:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x10000000}, 0x0) 10:41:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x1f000000}, 0x0) 10:41:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x20000000}, 0x0) 10:41:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x48000000}, 0x0) [ 2021.667516][T30303] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2021.675200][T30832] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2021.683028][T30304] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2021.690698][T30301] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2021.847570][T12111] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2021.937508][T30304] usb 5-1: Using ep0 maxpacket: 32 [ 2021.942730][T30303] usb 3-1: Using ep0 maxpacket: 32 [ 2021.950459][T30301] usb 4-1: Using ep0 maxpacket: 32 [ 2021.955642][T30832] usb 1-1: Using ep0 maxpacket: 32 [ 2022.127634][T12111] usb 2-1: no configurations [ 2022.132613][T12111] usb 2-1: can't read configurations, error -22 [ 2022.217836][T30304] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2022.226912][T30304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.235251][T30301] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2022.245210][T30303] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2022.254386][T30832] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2022.263744][T30303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.271847][T30832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.279928][T30301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.288068][T30303] usb 3-1: Product: syz [ 2022.292248][T30303] usb 3-1: Manufacturer: syz [ 2022.296842][T30303] usb 3-1: SerialNumber: syz [ 2022.301517][T30832] usb 1-1: Product: syz [ 2022.305687][T30832] usb 1-1: Manufacturer: syz [ 2022.310438][T30304] usb 5-1: Product: syz [ 2022.314619][T30304] usb 5-1: Manufacturer: syz [ 2022.319362][T30301] usb 4-1: Product: syz [ 2022.323540][T30301] usb 4-1: Manufacturer: syz [ 2022.328281][T12111] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2022.335854][T30832] usb 1-1: SerialNumber: syz [ 2022.341069][T30304] usb 5-1: SerialNumber: syz [ 2022.346542][T30301] usb 4-1: SerialNumber: syz [ 2022.354181][T30304] usb 5-1: config 0 descriptor?? [ 2022.360198][T30303] usb 3-1: config 0 descriptor?? [ 2022.366295][T30832] usb 1-1: config 0 descriptor?? [ 2022.372638][T30301] usb 4-1: config 0 descriptor?? [ 2022.400756][T30303] pwc: Samsung MPC-C10 USB webcam detected. [ 2022.419246][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2022.426936][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2022.434942][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 2022.607926][T12111] usb 2-1: no configurations [ 2022.612532][T12111] usb 2-1: can't read configurations, error -22 [ 2022.619408][T12111] usb usb2-port1: attempt power cycle [ 2022.797599][T30303] pwc: send_video_command error -71 [ 2022.802919][T30303] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2022.815580][T30303] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2022.825917][T30303] usb 3-1: USB disconnect, device number 33 [ 2023.037556][T12111] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2023.077579][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2023.084234][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2023.090847][T30832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2023.137638][T30832] pwc: recv_control_msg error -32 req 02 val 2700 [ 2023.144230][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2023.151119][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 2023.177808][T30832] pwc: recv_control_msg error -32 req 04 val 1700 [ 2023.201350][T12111] usb 2-1: no configurations [ 2023.205962][T12111] usb 2-1: can't read configurations, error -22 [ 2023.212694][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 2023.219306][T30304] pwc: recv_control_msg error -71 req 04 val 1700 [ 2023.225877][T30832] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2023.237763][T30304] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2023.257558][T30304] pwc: recv_control_msg error -71 req 04 val 1000 [ 2023.273129][T30832] pwc: recv_control_msg error -32 req 04 val 1000 [ 2023.279825][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2023.286434][T30304] pwc: recv_control_msg error -71 req 04 val 1300 [ 2023.308060][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2023.317671][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 2023.327584][T30832] pwc: recv_control_msg error -32 req 04 val 1300 [ 2023.334123][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2023.357705][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 2023.364716][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2023.371595][T30832] pwc: recv_control_msg error -32 req 04 val 1400 [ 2023.378206][T12111] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2023.399428][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2023.417591][T30301] pwc: recv_control_msg error -32 req 04 val 1400 [ 2023.424206][T30832] pwc: recv_control_msg error -71 req 02 val 2000 [ 2023.431476][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2023.457593][T30832] pwc: recv_control_msg error -71 req 02 val 2100 [ 2023.464183][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2023.477576][T30832] pwc: recv_control_msg error -71 req 02 val 2200 [ 2023.484152][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 2023.491560][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2023.498150][T30832] pwc: recv_control_msg error -71 req 06 val 0600 [ 2023.507782][T12111] usb 2-1: no configurations [ 2023.512408][T12111] usb 2-1: can't read configurations, error -22 [ 2023.519051][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 2023.525596][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2023.532362][T30832] pwc: recv_control_msg error -71 req 04 val 1500 [ 2023.539003][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 2023.545856][T12111] usb usb2-port1: unable to enumerate USB device [ 2023.557536][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2023.564078][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 2023.571426][T30832] pwc: recv_control_msg error -71 req 02 val 2500 [ 2023.578181][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2023.597755][T30832] pwc: recv_control_msg error -71 req 02 val 2400 [ 2023.604761][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 2023.611714][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2023.618316][T30832] pwc: recv_control_msg error -71 req 02 val 2600 [ 2023.637535][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 2023.644097][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2023.651053][T30832] pwc: recv_control_msg error -71 req 02 val 2900 [ 2023.657716][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 2023.678291][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2023.684997][T30832] pwc: recv_control_msg error -71 req 02 val 2800 [ 2023.691756][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 2023.700254][T30304] pwc: Registered as video71. [ 2023.708274][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input121 [ 2023.718119][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 2023.724626][T30832] pwc: recv_control_msg error -71 req 04 val 1100 [ 2023.733603][T30304] usb 5-1: USB disconnect, device number 4 [ 2023.747673][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 2023.754265][T30832] pwc: recv_control_msg error -71 req 04 val 1200 [ 2023.763370][T30832] pwc: Registered as video71. [ 2023.776727][T30832] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input122 [ 2023.786750][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 2023.809643][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 2023.821320][T30301] pwc: Registered as video72. [ 2023.852589][T30832] usb 1-1: USB disconnect, device number 123 [ 2023.863627][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input123 [ 2023.879185][T30301] usb 4-1: USB disconnect, device number 83 10:41:06 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c6127ce915f31f50c3df3c188b8586c0e95cd349e7929fb4e55c2b5ef81f5ea299671afff2ba91fa80f16e28bed18fe85e99de05ae44647bb26be7af27201355400338bd1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb80000002028a39fb6fb212f2b4250deab04002c3bb13d204ce0b8f83c969301eb1fdf6b46e23464c8aab459e38705de4a6565d7df10cd6e867b856193b12585c05a5a8f211d11dec64dde8c8e3a5a7aeadf185e90af8083df7390af"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x4c000000}, 0x0) 10:41:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:06 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:06 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x60000000}, 0x0) 10:41:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x65580000}, 0x0) 10:41:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x68000000}, 0x0) 10:41:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x6c000000}, 0x0) 10:41:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x74000000}, 0x0) 10:41:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x7a000000}, 0x0) [ 2024.737610][T14603] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2024.745446][T15272] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2024.753200][T30410] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2024.760915][T21700] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2024.917452][T19272] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2025.007539][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2025.012781][T30410] usb 3-1: Using ep0 maxpacket: 32 [ 2025.018064][T15272] usb 5-1: Using ep0 maxpacket: 32 [ 2025.023296][T21700] usb 4-1: Using ep0 maxpacket: 32 [ 2025.308283][T21700] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2025.317796][T15272] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2025.326988][T15272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.335275][T30410] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2025.344452][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2025.353831][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.362292][T30410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.370630][T21700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.378887][T15272] usb 5-1: Product: syz [ 2025.383060][T15272] usb 5-1: Manufacturer: syz [ 2025.388178][T14603] usb 1-1: Product: syz [ 2025.392375][T14603] usb 1-1: Manufacturer: syz [ 2025.396965][T14603] usb 1-1: SerialNumber: syz [ 2025.401820][T30410] usb 3-1: Product: syz [ 2025.406001][T30410] usb 3-1: Manufacturer: syz [ 2025.410954][T21700] usb 4-1: Product: syz [ 2025.415328][T21700] usb 4-1: Manufacturer: syz [ 2025.420226][T15272] usb 5-1: SerialNumber: syz [ 2025.425492][T30410] usb 3-1: SerialNumber: syz [ 2025.430602][T21700] usb 4-1: SerialNumber: syz [ 2025.438470][T14603] usb 1-1: config 0 descriptor?? [ 2025.444816][T30410] usb 3-1: config 0 descriptor?? [ 2025.451071][T21700] usb 4-1: config 0 descriptor?? [ 2025.456624][T15272] usb 5-1: config 0 descriptor?? [ 2025.468078][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2025.477133][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.487540][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2025.496237][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 2025.504153][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2025.511478][T30410] pwc: Samsung MPC-C10 USB webcam detected. [ 2025.518804][T19272] usb 2-1: Product: syz [ 2025.522994][T19272] usb 2-1: Manufacturer: syz [ 2025.528288][T19272] usb 2-1: SerialNumber: syz [ 2025.571992][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2025.887621][T30410] pwc: send_video_command error -71 [ 2025.892969][T30410] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2025.901313][T30410] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2025.912179][T30410] usb 3-1: USB disconnect, device number 34 [ 2026.127513][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2026.137631][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2026.147611][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2026.154186][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2026.167926][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 2026.197695][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2026.197863][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2026.211186][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 2026.238222][T15272] pwc: recv_control_msg error -71 req 04 val 1700 [ 2026.257765][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2026.264499][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2026.271245][T15272] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2026.298198][T15272] pwc: recv_control_msg error -71 req 04 val 1000 [ 2026.317821][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 2026.324455][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2026.331161][T15272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2026.358597][T15272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2026.377625][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 2026.384205][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2026.390843][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2026.418310][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2026.437627][T21700] pwc: recv_control_msg error -32 req 04 val 1400 [ 2026.444264][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 2026.450842][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2026.480430][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2026.497726][T21700] pwc: recv_control_msg error -71 req 02 val 2000 [ 2026.504305][T14603] pwc: recv_control_msg error -32 req 04 val 1400 [ 2026.511014][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2026.537981][T21700] pwc: recv_control_msg error -71 req 02 val 2100 [ 2026.544745][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2026.560068][T21699] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2026.565846][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2026.572659][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 2026.579348][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2026.587249][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2026.607595][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2026.614234][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 2026.620884][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2026.647560][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2026.654165][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 2026.660875][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2026.687621][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 2026.694140][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2026.700833][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2026.727644][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2026.737680][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2026.744722][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 2026.760671][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2026.768177][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 2026.775329][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2026.786229][T15272] pwc: Registered as video71. [ 2026.791099][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 2026.800337][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2026.808489][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input124 [ 2026.819560][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2026.828793][T30410] usb 2-1: USB disconnect, device number 12 [ 2026.841242][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 2026.847947][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2026.854710][T21699] ath9k_htc: Failed to initialize the device [ 2026.864686][T15272] usb 5-1: USB disconnect, device number 5 [ 2026.871302][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2026.878027][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 2026.898760][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 2026.906566][T30410] usb 2-1: ath9k_htc: USB layer deinitialized [ 2026.912962][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2026.922226][T21700] pwc: Registered as video72. [ 2026.935341][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input125 [ 2026.945943][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2026.954462][T14603] pwc: Registered as video71. [ 2026.960807][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input126 [ 2026.978386][T21700] usb 4-1: USB disconnect, device number 84 [ 2027.001861][T14603] usb 1-1: USB disconnect, device number 124 10:41:09 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c6127ce915f31f50c3df3c188b8586c0e95cd349e7929fb4e55c2b5ef81f5ea299671afff2ba91fa80f16e28bed18fe85e99de05ae44647bb26be7af27201355400338bd1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb80000002028a39fb6fb212f2b4250deab04002c3bb13d204ce0b8f83c969301eb1fdf6b46e23464c8aab459e38705de4a6565d7df10cd6e867b856193b12585c05a5a8f211d11dec64dde8c8e3a5a7aeadf185e90af8083df7390af"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x81000000}, 0x0) 10:41:09 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:09 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x88a8ffff}, 0x0) 10:41:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x9effffff}, 0x0) 10:41:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xe9170000}, 0x0) 10:41:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0) 10:41:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xffffa888}, 0x0) 10:41:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xfffff000}, 0x0) [ 2027.567653][T21700] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2027.597624][T14603] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2027.610726][T30304] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2027.618429][T30832] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2027.626158][T30301] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2027.807510][T21700] usb 1-1: Using ep0 maxpacket: 32 [ 2027.867651][T30832] usb 3-1: Using ep0 maxpacket: 32 [ 2027.887650][T30304] usb 4-1: Using ep0 maxpacket: 32 [ 2027.892919][T30301] usb 5-1: Using ep0 maxpacket: 32 [ 2028.087527][T21700] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2028.096898][T21700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.108030][T21700] usb 1-1: Product: syz [ 2028.112424][T21700] usb 1-1: Manufacturer: syz [ 2028.117142][T21700] usb 1-1: SerialNumber: syz [ 2028.122296][T14603] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2028.133156][T21700] usb 1-1: config 0 descriptor?? [ 2028.138667][T14603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.146874][T14603] usb 2-1: Product: syz [ 2028.152413][T14603] usb 2-1: Manufacturer: syz [ 2028.157102][T14603] usb 2-1: SerialNumber: syz [ 2028.179141][T21700] pwc: Samsung MPC-C10 USB webcam detected. [ 2028.187765][T30832] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2028.196828][T30832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.205466][T30832] usb 3-1: Product: syz [ 2028.208538][T14603] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2028.210494][T30304] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2028.227035][T30301] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2028.246227][T30832] usb 3-1: Manufacturer: syz [ 2028.257051][T30301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.265194][T30304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.273452][T30832] usb 3-1: SerialNumber: syz [ 2028.283184][T30301] usb 5-1: Product: syz [ 2028.289992][T30304] usb 4-1: Product: syz [ 2028.304367][T30304] usb 4-1: Manufacturer: syz [ 2028.309136][T30301] usb 5-1: Manufacturer: syz [ 2028.313741][T30301] usb 5-1: SerialNumber: syz [ 2028.324577][T30832] usb 3-1: config 0 descriptor?? [ 2028.329686][T30304] usb 4-1: SerialNumber: syz [ 2028.342812][T30304] usb 4-1: config 0 descriptor?? [ 2028.360588][T30301] usb 5-1: config 0 descriptor?? [ 2028.369405][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2028.419289][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2028.430038][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 2028.777775][T30832] pwc: send_video_command error -71 [ 2028.782997][T30832] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2028.787661][T14603] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2028.793230][T30832] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2028.808600][T30832] usb 3-1: USB disconnect, device number 35 [ 2028.837744][T21700] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2028.877738][T21700] pwc: recv_control_msg error -32 req 02 val 2700 [ 2028.927588][T21700] pwc: recv_control_msg error -32 req 04 val 1700 [ 2028.977607][T21700] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2029.001598][T14603] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2029.007559][T14603] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2029.018007][T21700] pwc: recv_control_msg error -32 req 04 val 1000 [ 2029.037805][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2029.059395][T21700] pwc: recv_control_msg error -32 req 04 val 1300 [ 2029.087606][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2029.094306][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2029.107568][T21700] pwc: recv_control_msg error -32 req 04 val 1400 [ 2029.127851][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 2029.147559][T21700] pwc: recv_control_msg error -71 req 02 val 2000 [ 2029.147594][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2029.167616][T21700] pwc: recv_control_msg error -71 req 02 val 2100 [ 2029.167892][T30301] pwc: recv_control_msg error -71 req 04 val 1700 [ 2029.187549][T21700] pwc: recv_control_msg error -71 req 02 val 2200 [ 2029.197883][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2029.207704][T21700] pwc: recv_control_msg error -71 req 06 val 0600 [ 2029.212513][T30301] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2029.223513][T30832] usb 2-1: USB disconnect, device number 13 [ 2029.227547][T21700] pwc: recv_control_msg error -71 req 04 val 1500 [ 2029.240429][T14603] ath9k_htc: Failed to initialize the device [ 2029.246650][T30832] usb 2-1: ath9k_htc: USB layer deinitialized [ 2029.253266][T30301] pwc: recv_control_msg error -71 req 04 val 1000 [ 2029.277615][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2029.279163][T21700] pwc: recv_control_msg error -71 req 02 val 2500 [ 2029.297670][T30301] pwc: recv_control_msg error -71 req 04 val 1300 [ 2029.307613][T21700] pwc: recv_control_msg error -71 req 02 val 2400 [ 2029.317784][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2029.325007][T30301] pwc: recv_control_msg error -71 req 04 val 1400 [ 2029.327610][T21700] pwc: recv_control_msg error -71 req 02 val 2600 [ 2029.348673][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 2029.357808][T21700] pwc: recv_control_msg error -71 req 02 val 2900 [ 2029.367657][T30304] pwc: recv_control_msg error -32 req 04 val 1400 [ 2029.374477][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 2029.381097][T21700] pwc: recv_control_msg error -71 req 02 val 2800 [ 2029.400852][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 2029.409907][T21700] pwc: recv_control_msg error -71 req 04 val 1100 [ 2029.417832][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2029.428232][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 2029.438354][T21700] pwc: recv_control_msg error -71 req 04 val 1200 [ 2029.445825][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2029.452602][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 2029.455015][T21700] pwc: Registered as video71. [ 2029.464502][T21700] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input127 [ 2029.478654][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2029.487209][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 2029.498296][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2029.505014][T21700] usb 1-1: USB disconnect, device number 125 [ 2029.519391][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2029.526061][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 2029.557669][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2029.564351][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 2029.588332][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 2029.597044][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2029.617926][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2029.624558][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 2029.647827][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2029.659495][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 2029.687759][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 2029.694354][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2029.702594][T30301] pwc: Registered as video71. [ 2029.709083][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input128 [ 2029.719563][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2029.729772][T30301] usb 5-1: USB disconnect, device number 6 10:41:11 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c6127ce915f31f50c3df3c188b8586c0e95cd349e7929fb4e55c2b5ef81f5ea299671afff2ba91fa80f16e28bed18fe85e99de05ae44647bb26be7af27201355400338bd1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb80000002028a39fb6fb212f2b4250deab04002c3bb13d204ce0b8f83c969301eb1fdf6b46e23464c8aab459e38705de4a6565d7df10cd6e867b856193b12585c05a5a8f211d11dec64dde8c8e3a5a7aeadf185e90af8083df7390af"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c6127ce915f31f50c3df3c188b8586c0e95cd349e7929fb4e55c2b5ef81f5ea299671afff2ba91fa80f16e28bed18fe85e99de05ae44647bb26be7af27201355400338bd1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb80000002028a39fb6fb212f2b4250deab04002c3bb13d204ce0b8f83c969301eb1fdf6b46e23464c8aab459e38705de4a6565d7df10cd6e867b856193b12585c05a5a8f211d11dec64dde8c8e3a5a7aeadf185e90af8083df7390af"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) 10:41:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0) 10:41:11 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:11 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:11 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2029.737537][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2029.781881][T30304] pwc: Registered as video72. [ 2029.802136][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input129 [ 2029.870224][T30304] usb 4-1: USB disconnect, device number 85 10:41:12 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xffffff9e}, 0x0) 10:41:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0) 10:41:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0xffffffff}, 0x0) 10:41:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x0) [ 2030.047570][T14603] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2030.077832][T30832] usb 3-1: new high-speed USB device number 36 using dummy_hcd 10:41:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 2030.106903][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2030.117707][T12111] usb 2-1: new high-speed USB device number 14 using dummy_hcd 10:41:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 2030.154892][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2030.201593][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2030.218568][T30301] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2030.297585][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2030.337757][T30832] usb 3-1: Using ep0 maxpacket: 32 [ 2030.377588][T30304] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2030.487656][T30301] usb 5-1: Using ep0 maxpacket: 32 [ 2030.577860][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2030.586944][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.600789][T14603] usb 1-1: Product: syz [ 2030.605007][T14603] usb 1-1: Manufacturer: syz [ 2030.611603][T14603] usb 1-1: SerialNumber: syz [ 2030.627728][T30304] usb 4-1: Using ep0 maxpacket: 32 [ 2030.631664][T14603] usb 1-1: config 0 descriptor?? [ 2030.648074][T30832] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2030.657128][T30832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.667735][T30832] usb 3-1: Product: syz [ 2030.672126][T30832] usb 3-1: Manufacturer: syz [ 2030.676845][T30832] usb 3-1: SerialNumber: syz [ 2030.679658][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2030.698378][T30832] usb 3-1: config 0 descriptor?? [ 2030.707669][T12111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2030.716919][T12111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.725566][T12111] usb 2-1: Product: syz [ 2030.730465][T12111] usb 2-1: Manufacturer: syz [ 2030.735273][T12111] usb 2-1: SerialNumber: syz [ 2030.742274][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2030.799067][T12111] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2030.819288][T30301] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2030.834127][T30301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.843142][T30301] usb 5-1: Product: syz [ 2030.847331][T30301] usb 5-1: Manufacturer: syz [ 2030.852283][T30301] usb 5-1: SerialNumber: syz [ 2030.868339][T30301] usb 5-1: config 0 descriptor?? [ 2030.909508][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 2030.947996][T30304] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2030.957419][T30304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.976532][T30304] usb 4-1: Product: syz [ 2030.980967][T30304] usb 4-1: Manufacturer: syz [ 2030.985642][T30304] usb 4-1: SerialNumber: syz [ 2031.003580][T30304] usb 4-1: config 0 descriptor?? [ 2031.063235][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2031.138691][T30832] pwc: send_video_command error -71 [ 2031.143913][T30832] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2031.152533][T30832] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2031.169834][T30832] usb 3-1: USB disconnect, device number 36 [ 2031.351765][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2031.397574][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2031.437792][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2031.477603][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2031.488578][T12111] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2031.522114][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2031.537800][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2031.567606][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 2031.587766][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 2031.619300][T14603] pwc: recv_control_msg error -32 req 04 val 1400 [ 2031.628004][T30301] pwc: recv_control_msg error -71 req 04 val 1700 [ 2031.647746][T30301] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2031.657618][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2031.667645][T30301] pwc: recv_control_msg error -71 req 04 val 1000 [ 2031.686542][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2031.698052][T30301] pwc: recv_control_msg error -71 req 04 val 1300 [ 2031.707518][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2031.720317][T30301] pwc: recv_control_msg error -71 req 04 val 1400 [ 2031.740016][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2031.747697][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2031.754430][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 2031.757720][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2031.778045][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 2031.792188][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2031.807622][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2031.814620][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 2031.817520][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2031.838807][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 2031.851932][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2031.867710][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 2031.874322][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2031.877536][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2031.908342][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2031.911412][T12111] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2031.920604][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 2031.927671][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2031.930460][T12111] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2031.942164][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2031.949375][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2031.958751][T14603] pwc: Registered as video71. [ 2031.967866][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 2031.977692][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input130 [ 2031.990433][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2032.009919][T14603] usb 1-1: USB disconnect, device number 126 [ 2032.017758][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 2032.047801][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 2032.054390][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2032.078455][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 2032.097735][T30304] pwc: recv_control_msg error -32 req 04 val 1400 [ 2032.116386][T15848] UDC core: couldn't find an available UDC or it's busy: -16 [ 2032.117559][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 2032.147949][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2032.156869][T15848] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2032.163876][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 2032.175126][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2032.194239][T30301] pwc: Registered as video71. [ 2032.206966][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2032.227748][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input131 [ 2032.268001][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2032.277052][T30301] usb 5-1: USB disconnect, device number 7 [ 2032.293638][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2032.317891][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2032.337851][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2032.357487][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2032.377502][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2032.391108][T15272] usb 2-1: USB disconnect, device number 14 [ 2032.410757][T12111] ath9k_htc: Failed to initialize the device [ 2032.417086][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2032.423883][T15272] usb 2-1: ath9k_htc: USB layer deinitialized [ 2032.437708][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2032.467925][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2032.481965][T30304] pwc: Registered as video71. [ 2032.497516][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input132 [ 2032.529778][T30304] usb 4-1: USB disconnect, device number 86 10:41:15 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000300)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be9b0cddfcb16d0dbc5f393904341e917af272012954003376d1378ad55905865dfe2432fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24d100800002594000000000000000000ecfb879a7cd5bab4c5cacaeef064a77befe9ad9bce6a8093c7ee11404a855d15fbf45468471c8a6097bda6388e176ecdde1b20b7f58680d577d2bc531baa1cc4725e97d36c2815675a36690881f6332c1af7c11e4c57d5a96f13adbac98f223b9d697b863fae498169cea7650c8cb377cbe83dd05c551c193d5b60a1c79ed4daed07e392c8c9ca7f928bc6a31cc4f69ccb4d3dcf20c1155a37eff31aa1a93b98294ac7de5f3d8e90f7c177ea9e9dc338"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10:41:15 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:15 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:15 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 2032.958390][T15874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) 10:41:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x7}, 0x0) [ 2033.004757][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2033.044475][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 2033.084626][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 2033.127734][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2033.166654][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 2033.187589][T30304] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2033.207660][T12111] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2033.210484][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2033.215339][T30301] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2033.232935][T30832] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2033.236046][T15272] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2033.437585][T30304] usb 3-1: Using ep0 maxpacket: 32 [ 2033.477681][T12111] usb 5-1: Using ep0 maxpacket: 32 [ 2033.487626][T30301] usb 4-1: Using ep0 maxpacket: 32 [ 2033.507470][T15272] usb 1-1: Using ep0 maxpacket: 32 [ 2033.728001][T30304] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2033.737965][T30304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.746149][T30304] usb 3-1: Product: syz [ 2033.751140][T30304] usb 3-1: Manufacturer: syz [ 2033.755886][T30304] usb 3-1: SerialNumber: syz [ 2033.761359][T30832] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2033.771170][T12111] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2033.780469][T30301] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2033.799400][T30304] usb 3-1: config 0 descriptor?? [ 2033.805596][T30301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.814237][T12111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.822462][T30832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.827635][T15272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2033.831159][T12111] usb 5-1: Product: syz [ 2033.843979][T30832] usb 2-1: Product: syz [ 2033.848449][T30301] usb 4-1: Product: syz [ 2033.852734][T30301] usb 4-1: Manufacturer: syz [ 2033.853007][T15272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.857501][T30832] usb 2-1: Manufacturer: syz [ 2033.857548][T30832] usb 2-1: SerialNumber: syz [ 2033.877223][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2033.880815][T15272] usb 1-1: Product: syz [ 2033.883907][T12111] usb 5-1: Manufacturer: syz [ 2033.892476][T30301] usb 4-1: SerialNumber: syz [ 2033.898292][T12111] usb 5-1: SerialNumber: syz [ 2033.898370][T15272] usb 1-1: Manufacturer: syz [ 2033.904528][T30301] usb 4-1: config 0 descriptor?? [ 2033.918400][T15272] usb 1-1: SerialNumber: syz [ 2033.929892][T12111] usb 5-1: config 0 descriptor?? [ 2033.938590][T15272] usb 1-1: config 0 descriptor?? [ 2033.958628][T30832] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2033.972957][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 2033.981604][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 2033.990755][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2034.267565][T30304] pwc: send_video_command error -71 [ 2034.272861][T30304] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2034.286063][T30304] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2034.302293][T30304] usb 3-1: USB disconnect, device number 37 [ 2034.557595][T30832] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2034.617574][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2034.624147][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2034.637731][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2034.667618][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 2034.674233][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 2034.687597][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2034.717788][T12111] pwc: recv_control_msg error -71 req 04 val 1700 [ 2034.724346][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 2034.740089][T12111] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2034.748993][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2034.757935][T12111] pwc: recv_control_msg error -71 req 04 val 1000 [ 2034.778004][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2034.787650][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2034.787692][T12111] pwc: recv_control_msg error -71 req 04 val 1300 [ 2034.817642][T30301] pwc: recv_control_msg error -32 req 04 val 1000 [ 2034.825117][T12111] pwc: recv_control_msg error -71 req 04 val 1400 [ 2034.837692][T15272] pwc: recv_control_msg error -32 req 04 val 1000 [ 2034.847524][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 2034.862020][T30301] pwc: recv_control_msg error -32 req 04 val 1300 [ 2034.868569][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 2034.878021][T15272] pwc: recv_control_msg error -32 req 04 val 1300 [ 2034.890938][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 2034.907698][T30301] pwc: recv_control_msg error -71 req 04 val 1400 [ 2034.923383][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 2034.930158][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 2034.942684][T15272] pwc: recv_control_msg error -32 req 04 val 1400 [ 2034.948031][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 2034.958125][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 2034.967755][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 2034.981767][T30832] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2034.987558][T30832] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2034.995505][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 2034.997510][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2035.002426][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 2035.027962][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 2035.034483][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 2035.040105][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2035.057758][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 2035.064405][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 2035.078000][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2035.087642][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 2035.094223][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 2035.107904][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2035.118209][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 2035.124791][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 2035.137593][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2035.147827][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 2035.154410][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 2035.168633][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2035.177809][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 2035.184496][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 2035.185346][T30410] usb 2-1: USB disconnect, device number 15 [ 2035.194810][T12111] pwc: Registered as video71. [ 2035.199728][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2035.207009][T30832] ath9k_htc: Failed to initialize the device [ 2035.214367][T30410] usb 2-1: ath9k_htc: USB layer deinitialized [ 2035.227106][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input133 [ 2035.245125][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2035.247477][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 2035.268987][T12111] usb 5-1: USB disconnect, device number 8 [ 2035.275040][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2035.277659][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 2035.298348][T30301] pwc: Registered as video71. [ 2035.304693][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input134 [ 2035.317777][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2035.337527][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2035.358010][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2035.375214][T15272] pwc: Registered as video72. [ 2035.386624][T30301] usb 4-1: USB disconnect, device number 87 [ 2035.404561][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input135 [ 2035.495056][T15272] usb 1-1: USB disconnect, device number 127 10:41:17 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) 10:41:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xc}, 0x0) 10:41:17 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:41:17 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xe}, 0x0) [ 2035.729204][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 2035.790178][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 2035.832578][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x0) [ 2035.884387][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x4c}, 0x0) [ 2035.926044][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 2035.971824][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2036.007555][T12111] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2036.017641][T30301] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2036.017680][T14603] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2036.033021][T30410] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2036.040073][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2036.137519][T15272] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2036.247450][T12111] usb 5-1: Using ep0 maxpacket: 32 [ 2036.317520][T30410] usb 3-1: Using ep0 maxpacket: 32 [ 2036.323071][T14603] usb 4-1: Using ep0 maxpacket: 32 [ 2036.407669][T15272] usb 1-1: Using ep0 maxpacket: 32 [ 2036.527727][T12111] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2036.537052][T12111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.550673][T30301] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2036.560612][T12111] usb 5-1: Product: syz [ 2036.564897][T30301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.573739][T12111] usb 5-1: Manufacturer: syz [ 2036.578770][T12111] usb 5-1: SerialNumber: syz [ 2036.583498][T30301] usb 2-1: Product: syz [ 2036.590029][T12111] usb 5-1: config 0 descriptor?? [ 2036.595278][T30301] usb 2-1: Manufacturer: syz [ 2036.600134][T30301] usb 2-1: SerialNumber: syz [ 2036.628027][T30410] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2036.637231][T14603] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2036.639931][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 2036.647106][T30410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.653331][T30301] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2036.661701][T14603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.677981][T30410] usb 3-1: Product: syz [ 2036.682838][T14603] usb 4-1: Product: syz [ 2036.693686][T30410] usb 3-1: Manufacturer: syz [ 2036.702077][T14603] usb 4-1: Manufacturer: syz [ 2036.710269][T30410] usb 3-1: SerialNumber: syz [ 2036.717191][T14603] usb 4-1: SerialNumber: syz [ 2036.730684][T30410] usb 3-1: config 0 descriptor?? [ 2036.738164][T15272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2036.749240][T15272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.762615][T14603] usb 4-1: config 0 descriptor?? [ 2036.768481][T15272] usb 1-1: Product: syz [ 2036.772755][T15272] usb 1-1: Manufacturer: syz [ 2036.777481][T15272] usb 1-1: SerialNumber: syz [ 2036.790062][T15272] usb 1-1: config 0 descriptor?? [ 2036.820046][T30410] pwc: Samsung MPC-C10 USB webcam detected. [ 2036.827814][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2036.835927][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2037.198634][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.205025][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.238272][T30410] pwc: send_video_command error -71 [ 2037.243504][T30410] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2037.247733][T30301] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2037.251339][T30410] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2037.278647][T30410] usb 3-1: USB disconnect, device number 38 [ 2037.297714][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2037.337569][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 2037.377568][T12111] pwc: recv_control_msg error -71 req 04 val 1700 [ 2037.397623][T12111] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2037.417556][T12111] pwc: recv_control_msg error -71 req 04 val 1000 [ 2037.437562][T12111] pwc: recv_control_msg error -71 req 04 val 1300 [ 2037.447664][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2037.457759][T12111] pwc: recv_control_msg error -71 req 04 val 1400 [ 2037.477537][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 2037.487746][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2037.498257][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 2037.507686][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2037.517951][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 2037.528189][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2037.547587][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 2037.557773][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2037.567847][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 2037.588043][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 2037.588177][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2037.617697][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2037.618304][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 2037.639092][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2037.647835][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 2037.667608][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2037.671403][T30301] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2037.680536][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 2037.687147][T30301] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2037.687605][T15272] pwc: recv_control_msg error -32 req 04 val 1000 [ 2037.707679][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 2037.717657][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 2037.727899][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 2037.750550][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 2037.757610][T15272] pwc: recv_control_msg error -32 req 04 val 1300 [ 2037.763934][T12111] pwc: Registered as video71. [ 2037.770628][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input136 [ 2037.777551][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2037.788103][T12111] usb 5-1: USB disconnect, device number 9 [ 2037.807734][T15272] pwc: recv_control_msg error -32 req 04 val 1400 [ 2037.827782][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2037.850763][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2037.867721][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2037.876676][T15906] UDC core: couldn't find an available UDC or it's busy: -16 [ 2037.887624][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2037.894410][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2037.901615][T15906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2037.919538][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2037.927612][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2037.947634][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2037.967721][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2037.976296][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2037.987533][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2037.997652][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2038.012279][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2038.018847][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2038.037513][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2038.044030][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2038.067657][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2038.074309][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2038.089375][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2038.107556][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2038.116178][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2038.132019][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2038.138582][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2038.145777][T14603] pwc: Registered as video71. [ 2038.157508][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input137 [ 2038.167812][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2038.175502][T30410] usb 2-1: USB disconnect, device number 16 [ 2038.183129][T15272] pwc: Registered as video72. [ 2038.189259][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input138 [ 2038.190777][T30301] ath9k_htc: Failed to initialize the device [ 2038.203013][T14603] usb 4-1: USB disconnect, device number 88 [ 2038.211269][T30410] usb 2-1: ath9k_htc: USB layer deinitialized [ 2038.264732][T15272] usb 1-1: USB disconnect, device number 2 10:41:20 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x68}, 0x0) 10:41:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:41:20 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:20 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:20 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x6c}, 0x0) [ 2038.696430][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x74}, 0x0) [ 2038.751081][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x7a}, 0x0) 10:41:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 2038.792390][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x300}, 0x0) 10:41:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 2038.957654][T30301] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2038.967918][T14603] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2038.975644][T15272] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2038.977833][T12111] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2038.997653][T30410] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2039.197558][T30301] usb 3-1: Using ep0 maxpacket: 32 [ 2039.227517][T12111] usb 5-1: Using ep0 maxpacket: 32 [ 2039.237947][T15272] usb 4-1: Using ep0 maxpacket: 32 [ 2039.243272][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2039.477651][T30301] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2039.487028][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.495599][T30301] usb 3-1: Product: syz [ 2039.500145][T30301] usb 3-1: Manufacturer: syz [ 2039.504859][T30301] usb 3-1: SerialNumber: syz [ 2039.510220][T12111] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2039.523055][T30301] usb 3-1: config 0 descriptor?? [ 2039.531985][T12111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.540668][T12111] usb 5-1: Product: syz [ 2039.545391][T12111] usb 5-1: Manufacturer: syz [ 2039.550740][T12111] usb 5-1: SerialNumber: syz [ 2039.559960][T12111] usb 5-1: config 0 descriptor?? [ 2039.577721][T15272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2039.579725][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 2039.587311][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2039.600114][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 2039.604465][T15272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.621200][T15272] usb 4-1: Product: syz [ 2039.625492][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.635682][T15272] usb 4-1: Manufacturer: syz [ 2039.644048][T15272] usb 4-1: SerialNumber: syz [ 2039.651024][T30410] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2039.660221][T14603] usb 1-1: Product: syz [ 2039.664405][T14603] usb 1-1: Manufacturer: syz [ 2039.669138][T30410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.677133][T30410] usb 2-1: Product: syz [ 2039.682200][T14603] usb 1-1: SerialNumber: syz [ 2039.687869][T15272] usb 4-1: config 0 descriptor?? [ 2039.693609][T30410] usb 2-1: Manufacturer: syz [ 2039.699467][T30410] usb 2-1: SerialNumber: syz [ 2039.704108][T14603] usb 1-1: config 0 descriptor?? [ 2039.731272][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2039.748590][T30410] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2039.760295][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2039.987724][T30301] pwc: send_video_command error -71 [ 2039.992965][T30301] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2040.001914][T30301] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2040.020595][T30301] usb 3-1: USB disconnect, device number 39 [ 2040.267526][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2040.307547][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 2040.347576][T12111] pwc: recv_control_msg error -71 req 04 val 1700 [ 2040.368731][T12111] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2040.387586][T12111] pwc: recv_control_msg error -71 req 04 val 1000 [ 2040.397694][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2040.397878][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2040.407510][T12111] pwc: recv_control_msg error -71 req 04 val 1300 [ 2040.437590][T12111] pwc: recv_control_msg error -71 req 04 val 1400 [ 2040.447841][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2040.456985][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2040.461155][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 2040.487677][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 2040.489158][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2040.517668][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2040.518375][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 2040.537735][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2040.547707][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 2040.557901][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2040.567508][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 2040.587571][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2040.596986][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 2040.611669][T15272] pwc: recv_control_msg error -32 req 04 val 1000 [ 2040.620359][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 2040.627616][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2040.638206][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 2040.657526][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 2040.657557][T15272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2040.674179][T21699] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2040.677719][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 2040.680120][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2040.694336][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 2040.698508][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 2040.727934][T15272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2040.734514][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 2040.742516][T12111] pwc: Registered as video71. [ 2040.747970][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2040.754974][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2040.756113][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input139 [ 2040.777814][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2040.785183][T12111] usb 5-1: USB disconnect, device number 10 [ 2040.791426][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2040.817935][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2040.824617][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2040.851702][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2040.858594][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2040.902965][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2040.909547][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2040.921773][T30410] usb 2-1: USB disconnect, device number 17 [ 2040.941308][T21699] ath9k_htc: Failed to initialize the device [ 2040.947598][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2040.954121][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2040.961243][T30410] usb 2-1: ath9k_htc: USB layer deinitialized [ 2040.997688][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2041.004286][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2041.027529][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2041.034081][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2041.057543][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2041.067978][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2041.081875][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2041.088590][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2041.117758][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2041.124518][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2041.147542][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2041.154205][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2041.162189][T15272] pwc: Registered as video71. [ 2041.176396][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input140 [ 2041.186522][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2041.201471][T14603] pwc: Registered as video72. [ 2041.208363][T15272] usb 4-1: USB disconnect, device number 89 [ 2041.222254][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input141 [ 2041.259334][T14603] usb 1-1: USB disconnect, device number 3 10:41:23 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x178, &(0x7f0000000240)={[{0x82, 0x4e00, "d1eb451286d15b7ae0d0944c642d680f48287110f78aa7ab8beea9a8f7cc18fbea8d533127136043daa4cc8cefd654474b9a324204c3de57cf0fbced05354058a901b2d6754553b76dacac4699b6cf031deb1da00c309c7f2265328bb1f38af6dbd301ff59710ecb7b8e694257eab8c2a2b70e5f8f3f79fd3a06eca5c39704c18586"}, {0x19, 0x4e00, "f43f922b7a0c3ac5b23e63aaa769dce64fb60f68af0074f340"}, {0xf, 0x4e00, "98882bb0d63b37befd8e8dbddfb3f7f50dcf7136e9d448ffa7daec9a1d8819fdabee39db13f90df098773a173664dbc3ef2402e6fcabf9f75259d990f4d5d84bfddfaeabdef128c76b73e3f40c82706eaba7b7b3e96c6fd32ed5443868de7688edd6236e723f3a69c7da6811e28b3814af86ca"}, {0x1f, 0x4e00, "eee317e989517e2462bcbd4ce393013fda2f6c3299a4ec2e9294ac73734ac6"}, {0x4b, 0x4e00, "f0e4d31e269fbcb0a86abf676b28a1eb95247529772f3153cfe4a56f0999e5e5b10f30778cc69906edf4d8ebc7f0"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 10:41:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:41:23 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:23 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x700}, 0x0) [ 2041.479928][T15959] __nla_validate_parse: 4 callbacks suppressed [ 2041.479947][T15959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x0) 10:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 2041.532197][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2041.570320][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 2041.614578][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 2041.659006][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 2041.706593][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2041.737480][T21699] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2041.746711][T15977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2041.757860][T19272] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2041.765625][T30410] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2041.773539][T15272] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2041.847559][T14603] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2041.987799][T21699] usb 3-1: Using ep0 maxpacket: 32 [ 2042.037481][T15272] usb 4-1: Using ep0 maxpacket: 32 [ 2042.042712][T30410] usb 5-1: Using ep0 maxpacket: 32 [ 2042.121524][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2042.277908][T21699] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2042.286970][T21699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.295738][T21699] usb 3-1: Product: syz [ 2042.300820][T21699] usb 3-1: Manufacturer: syz [ 2042.305440][T21699] usb 3-1: SerialNumber: syz [ 2042.315347][T21699] usb 3-1: config 0 descriptor?? [ 2042.338234][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2042.347313][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.355473][T15272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2042.364827][T30410] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2042.376397][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 2042.383374][T30410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.391646][T19272] usb 2-1: Product: syz [ 2042.395819][T19272] usb 2-1: Manufacturer: syz [ 2042.400868][T15272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.408988][T30410] usb 5-1: Product: syz [ 2042.413786][T19272] usb 2-1: SerialNumber: syz [ 2042.418799][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2042.427921][T30410] usb 5-1: Manufacturer: syz [ 2042.432532][T30410] usb 5-1: SerialNumber: syz [ 2042.438117][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.446137][T14603] usb 1-1: Product: syz [ 2042.451886][T15272] usb 4-1: Product: syz [ 2042.456074][T15272] usb 4-1: Manufacturer: syz [ 2042.461248][T15272] usb 4-1: SerialNumber: syz [ 2042.466828][T30410] usb 5-1: config 0 descriptor?? [ 2042.472760][T14603] usb 1-1: Manufacturer: syz [ 2042.480933][T15272] usb 4-1: config 0 descriptor?? [ 2042.486026][T14603] usb 1-1: SerialNumber: syz [ 2042.491573][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2042.505121][T14603] usb 1-1: config 0 descriptor?? [ 2042.520251][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2042.539382][T30410] pwc: Samsung MPC-C10 USB webcam detected. [ 2042.549449][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2042.787601][T21699] pwc: send_video_command error -71 [ 2042.792991][T21699] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2042.801050][T21699] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2042.811551][T21699] usb 3-1: USB disconnect, device number 40 [ 2043.147708][T19272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2043.197776][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2043.204471][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2043.211022][T30410] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2043.267997][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2043.274680][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2043.281612][T30410] pwc: recv_control_msg error -32 req 02 val 2700 [ 2043.307815][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2043.347630][T30410] pwc: recv_control_msg error -71 req 04 val 1700 [ 2043.354200][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2043.361137][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2043.388129][T30410] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2043.407575][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2043.414145][T15272] pwc: recv_control_msg error -32 req 04 val 1000 [ 2043.420930][T30410] pwc: recv_control_msg error -71 req 04 val 1000 [ 2043.457754][T30410] pwc: recv_control_msg error -71 req 04 val 1300 [ 2043.487742][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2043.494332][T15272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2043.500941][T30410] pwc: recv_control_msg error -71 req 04 val 1400 [ 2043.527759][T15272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2043.534338][T30410] pwc: recv_control_msg error -71 req 02 val 2000 [ 2043.547906][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 2043.567688][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2043.574584][T30410] pwc: recv_control_msg error -71 req 02 val 2100 [ 2043.590412][T19272] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2043.596103][T19272] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2043.604748][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2043.611735][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2043.618273][T30410] pwc: recv_control_msg error -71 req 02 val 2200 [ 2043.637566][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2043.644415][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2043.651835][T30410] pwc: recv_control_msg error -71 req 06 val 0600 [ 2043.658600][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2043.677961][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2043.684497][T30410] pwc: recv_control_msg error -71 req 04 val 1500 [ 2043.695950][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2043.702667][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2043.737750][T30410] pwc: recv_control_msg error -71 req 02 val 2500 [ 2043.744661][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2043.751192][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2043.781828][T30410] pwc: recv_control_msg error -71 req 02 val 2400 [ 2043.788566][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2043.795192][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2043.806068][T21699] usb 2-1: USB disconnect, device number 18 [ 2043.830549][T19272] ath9k_htc: Failed to initialize the device [ 2043.836862][T30410] pwc: recv_control_msg error -71 req 02 val 2600 [ 2043.843543][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2043.850635][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2043.857189][T21699] usb 2-1: ath9k_htc: USB layer deinitialized [ 2043.887742][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2043.894543][T30410] pwc: recv_control_msg error -71 req 02 val 2900 [ 2043.901220][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2043.908460][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2043.927650][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2043.934306][T30410] pwc: recv_control_msg error -71 req 02 val 2800 [ 2043.941321][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2043.948434][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2043.977626][T30410] pwc: recv_control_msg error -71 req 04 val 1100 [ 2043.984220][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2043.991291][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2043.997971][T30410] pwc: recv_control_msg error -71 req 04 val 1200 [ 2044.006731][T15272] pwc: Registered as video72. [ 2044.012514][T30410] pwc: Registered as video71. [ 2044.018466][T30410] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input142 [ 2044.028285][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2044.035918][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input143 [ 2044.057573][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2044.066231][T15272] usb 4-1: USB disconnect, device number 90 [ 2044.074217][T30410] usb 5-1: USB disconnect, device number 11 [ 2044.085100][T14603] pwc: Registered as video73. [ 2044.099929][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input144 [ 2044.143821][T14603] usb 1-1: USB disconnect, device number 4 10:41:26 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x178, &(0x7f0000000240)={[{0x82, 0x4e00, "d1eb451286d15b7ae0d0944c642d680f48287110f78aa7ab8beea9a8f7cc18fbea8d533127136043daa4cc8cefd654474b9a324204c3de57cf0fbced05354058a901b2d6754553b76dacac4699b6cf031deb1da00c309c7f2265328bb1f38af6dbd301ff59710ecb7b8e694257eab8c2a2b70e5f8f3f79fd3a06eca5c39704c18586"}, {0x19, 0x4e00, "f43f922b7a0c3ac5b23e63aaa769dce64fb60f68af0074f340"}, {0xf, 0x4e00, "98882bb0d63b37befd8e8dbddfb3f7f50dcf7136e9d448ffa7daec9a1d8819fdabee39db13f90df098773a173664dbc3ef2402e6fcabf9f75259d990f4d5d84bfddfaeabdef128c76b73e3f40c82706eaba7b7b3e96c6fd32ed5443868de7688edd6236e723f3a69c7da6811e28b3814af86ca"}, {0x1f, 0x4e00, "eee317e989517e2462bcbd4ce393013fda2f6c3299a4ec2e9294ac73734ac6"}, {0x4b, 0x4e00, "f0e4d31e269fbcb0a86abf676b28a1eb95247529772f3153cfe4a56f0999e5e5b10f30778cc69906edf4d8ebc7f0"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x17e9}, 0x0) 10:41:26 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) [ 2044.368981][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x0) [ 2044.425908][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) [ 2044.474598][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 10:41:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 10:41:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 2044.618203][T30304] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2044.627685][T30301] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2044.647618][T15272] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2044.677725][T30410] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2044.797518][T14603] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2044.857523][T30304] usb 4-1: Using ep0 maxpacket: 32 [ 2044.868110][T30301] usb 3-1: Using ep0 maxpacket: 32 [ 2044.907594][T15272] usb 5-1: Using ep0 maxpacket: 32 [ 2045.057749][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2045.138431][T30304] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2045.147982][T30301] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2045.157049][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.165842][T30304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.174227][T30301] usb 3-1: Product: syz [ 2045.179462][T30304] usb 4-1: Product: syz [ 2045.183803][T30301] usb 3-1: Manufacturer: syz [ 2045.188816][T30304] usb 4-1: Manufacturer: syz [ 2045.193547][T30301] usb 3-1: SerialNumber: syz [ 2045.199244][T30304] usb 4-1: SerialNumber: syz [ 2045.207000][T30301] usb 3-1: config 0 descriptor?? [ 2045.220352][T30304] usb 4-1: config 0 descriptor?? [ 2045.247771][T30410] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2045.257268][T15272] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2045.259914][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 2045.266526][T30410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.274483][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2045.281552][T15272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.295785][T15272] usb 5-1: Product: syz [ 2045.300761][T30410] usb 2-1: Product: syz [ 2045.305036][T15272] usb 5-1: Manufacturer: syz [ 2045.310247][T30410] usb 2-1: Manufacturer: syz [ 2045.314967][T15272] usb 5-1: SerialNumber: syz [ 2045.320322][T30410] usb 2-1: SerialNumber: syz [ 2045.349276][T15272] usb 5-1: config 0 descriptor?? [ 2045.378436][T30410] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2045.387640][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2045.396677][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.410390][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2045.435403][T14603] usb 1-1: Product: syz [ 2045.443311][T14603] usb 1-1: Manufacturer: syz [ 2045.449927][T14603] usb 1-1: SerialNumber: syz [ 2045.458402][T14603] usb 1-1: config 0 descriptor?? [ 2045.510391][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2045.657601][T30301] pwc: send_video_command error -71 [ 2045.662951][T30301] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2045.675487][T30301] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2045.695638][T30301] usb 3-1: USB disconnect, device number 41 [ 2045.897636][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2045.941826][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2045.987603][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2046.027585][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2046.057581][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2046.067609][T30304] pwc: recv_control_msg error -71 req 04 val 1000 [ 2046.087558][T30304] pwc: recv_control_msg error -71 req 04 val 1300 [ 2046.107520][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2046.107765][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2046.127653][T30410] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2046.127731][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2046.167537][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2046.168716][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2046.180605][T15272] pwc: recv_control_msg error -71 req 04 val 1700 [ 2046.187786][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2046.197759][T15272] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2046.208508][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2046.218701][T15272] pwc: recv_control_msg error -71 req 04 val 1000 [ 2046.228508][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2046.247599][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2046.247752][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2046.260883][T15272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2046.267596][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2046.287574][T15272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2046.288243][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2046.307652][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2046.318016][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2046.326690][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2046.334691][T30832] usb 2-1: USB disconnect, device number 19 [ 2046.341184][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2046.360148][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2046.367601][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2046.387657][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2046.387702][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2046.401175][T30304] pwc: Registered as video71. [ 2046.401278][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2046.429269][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input145 [ 2046.437531][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2046.447779][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2046.467536][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2046.476387][T30304] usb 4-1: USB disconnect, device number 91 [ 2046.493787][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2046.500419][T14603] pwc: recv_control_msg error -32 req 04 val 1300 [ 2046.528031][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2046.547648][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2046.554255][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2046.587539][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2046.594277][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2046.617545][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2046.624179][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2046.657552][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2046.664212][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2046.697678][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2046.697863][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2046.714050][T15272] pwc: Registered as video71. [ 2046.724371][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2046.739082][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input146 [ 2046.756422][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2046.774321][T15272] usb 5-1: USB disconnect, device number 12 [ 2046.780473][T14603] pwc: recv_control_msg error -71 req 02 val 2400 10:41:29 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x178, &(0x7f0000000240)={[{0x82, 0x4e00, "d1eb451286d15b7ae0d0944c642d680f48287110f78aa7ab8beea9a8f7cc18fbea8d533127136043daa4cc8cefd654474b9a324204c3de57cf0fbced05354058a901b2d6754553b76dacac4699b6cf031deb1da00c309c7f2265328bb1f38af6dbd301ff59710ecb7b8e694257eab8c2a2b70e5f8f3f79fd3a06eca5c39704c18586"}, {0x19, 0x4e00, "f43f922b7a0c3ac5b23e63aaa769dce64fb60f68af0074f340"}, {0xf, 0x4e00, "98882bb0d63b37befd8e8dbddfb3f7f50dcf7136e9d448ffa7daec9a1d8819fdabee39db13f90df098773a173664dbc3ef2402e6fcabf9f75259d990f4d5d84bfddfaeabdef128c76b73e3f40c82706eaba7b7b3e96c6fd32ed5443868de7688edd6236e723f3a69c7da6811e28b3814af86ca"}, {0x1f, 0x4e00, "eee317e989517e2462bcbd4ce393013fda2f6c3299a4ec2e9294ac73734ac6"}, {0x4b, 0x4e00, "f0e4d31e269fbcb0a86abf676b28a1eb95247529772f3153cfe4a56f0999e5e5b10f30778cc69906edf4d8ebc7f0"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async, rerun: 32) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (rerun: 32) 10:41:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 10:41:29 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="8500004e2d81f7c855ae1af21f0da257e98c6127ce915f31f50c3df3c188b8586c0e95cd349e7929fb4e55c2b5ef81f5ea299671afff2ba91fa80f16e28bed18fe85e99de05ae44647bb26be7af27201355400338bd1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb80000002028a39fb6fb212f2b4250deab04002c3bb13d204ce0b8f83c969301eb1fdf6b46e23464c8aab459e38705de4a6565d7df10cd6e867b856193b12585c05a5a8f211d11dec64dde8c8e3a5a7aeadf185e90af8083df7390af"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:29 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:29 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2046.807437][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2046.837701][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2046.881957][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2046.885318][T16016] __nla_validate_parse: 4 callbacks suppressed [ 2046.885338][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2046.911947][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2046.938237][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2046.946331][T14603] pwc: Registered as video71. [ 2046.952341][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input147 [ 2046.983283][T14603] usb 1-1: USB disconnect, device number 5 10:41:29 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x6800}, 0x0) 10:41:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) [ 2047.067244][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x7400}, 0x0) [ 2047.137628][T30301] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2047.146884][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2047.156626][T21699] usb 4-1: new high-speed USB device number 92 using dummy_hcd 10:41:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) [ 2047.196104][T16027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2047.208388][T30410] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2047.215388][T30410] ath9k_htc: Failed to initialize the device 10:41:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x8100}, 0x0) [ 2047.241894][T30832] usb 2-1: ath9k_htc: USB layer deinitialized [ 2047.260094][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xe917}, 0x0) [ 2047.300595][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2047.327685][T15272] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2047.342039][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2047.427444][T21699] usb 4-1: Using ep0 maxpacket: 32 [ 2047.477920][T14603] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2047.587457][T15272] usb 5-1: Using ep0 maxpacket: 32 [ 2047.597765][T30832] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2047.657554][T30301] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2047.666800][T30301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.675227][T30301] usb 3-1: Product: syz [ 2047.679932][T30301] usb 3-1: Manufacturer: syz [ 2047.684797][T30301] usb 3-1: SerialNumber: syz [ 2047.728395][T30301] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2047.737902][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2047.758181][T21699] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2047.767678][T21699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.775682][T21699] usb 4-1: Product: syz [ 2047.781154][T21699] usb 4-1: Manufacturer: syz [ 2047.785767][T21699] usb 4-1: SerialNumber: syz [ 2047.799659][T21699] usb 4-1: config 0 descriptor?? [ 2047.839909][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 2047.898053][T15272] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2047.907133][T15272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.921193][T15272] usb 5-1: Product: syz [ 2047.925379][T15272] usb 5-1: Manufacturer: syz [ 2047.932824][T15272] usb 5-1: SerialNumber: syz [ 2047.943670][T15272] usb 5-1: config 0 descriptor?? [ 2047.989237][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2048.087637][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2048.096717][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.105237][T14603] usb 1-1: Product: syz [ 2048.109751][T14603] usb 1-1: Manufacturer: syz [ 2048.114366][T14603] usb 1-1: SerialNumber: syz [ 2048.117883][T30832] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2048.128115][T14603] usb 1-1: config 0 descriptor?? [ 2048.137927][T30832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.146459][T30832] usb 2-1: Product: syz [ 2048.151134][T30832] usb 2-1: Manufacturer: syz [ 2048.156085][T30832] usb 2-1: SerialNumber: syz [ 2048.172538][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2048.208221][T30832] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2048.297586][T30301] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2048.497697][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2048.537574][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 2048.588479][T21699] pwc: recv_control_msg error -32 req 04 val 1700 [ 2048.617656][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2048.641660][T21699] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2048.677684][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2048.684462][T21699] pwc: recv_control_msg error -71 req 04 val 1000 [ 2048.708629][T21699] pwc: recv_control_msg error -71 req 04 val 1300 [ 2048.727587][T15272] pwc: recv_control_msg error -71 req 04 val 1700 [ 2048.734192][T21699] pwc: recv_control_msg error -71 req 04 val 1400 [ 2048.750239][T30301] usb 3-1: ath9k_htc: Invalid TX pipe: 0 [ 2048.755947][T30301] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2048.767542][T15272] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2048.774102][T21699] pwc: recv_control_msg error -71 req 02 val 2000 [ 2048.787563][T15272] pwc: recv_control_msg error -71 req 04 val 1000 [ 2048.797933][T30832] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2048.807722][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2048.814416][T21699] pwc: recv_control_msg error -71 req 02 val 2100 [ 2048.821394][T15272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2048.847572][T21699] pwc: recv_control_msg error -71 req 02 val 2200 [ 2048.854369][T15272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2048.867575][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2048.877762][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 2048.884400][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2048.907560][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2048.914148][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 2048.920870][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2048.947664][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 2048.954307][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2048.959822][T30304] usb 3-1: USB disconnect, device number 42 [ 2048.970888][T30301] ath9k_htc: Failed to initialize the device [ 2048.977884][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2048.983971][T30304] usb 3-1: ath9k_htc: USB layer deinitialized [ 2048.984494][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2048.996867][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 2049.020351][T30832] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2049.026047][T30832] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2049.038028][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 2049.044746][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2049.067623][T14603] pwc: recv_control_msg error -32 req 04 val 1000 [ 2049.074278][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 2049.081215][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2049.107620][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 2049.115423][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2049.127515][T14603] pwc: recv_control_msg error -71 req 04 val 1300 [ 2049.137676][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 2049.144327][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2049.158077][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2049.187796][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 2049.194397][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2049.201607][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2049.209338][T21699] pwc: Registered as video71. [ 2049.229430][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input148 [ 2049.239397][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2049.246068][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2049.261106][T21699] usb 4-1: USB disconnect, device number 92 [ 2049.277703][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2049.284955][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2049.307549][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2049.314268][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2049.330043][T15272] pwc: Registered as video71. [ 2049.339088][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input149 [ 2049.354253][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2049.364384][T15272] usb 5-1: USB disconnect, device number 13 [ 2049.387822][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2049.427501][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2049.447509][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2049.477521][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2049.521758][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2049.557685][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2049.577528][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2049.585828][T14603] pwc: Registered as video71. [ 2049.592928][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input150 [ 2049.609418][T14603] usb 1-1: USB disconnect, device number 6 10:41:32 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x64, &(0x7f0000000240)=@generic={0x8, 0x2, 0x5c, "ea6a457f", "fb315b25612a07c85f4f433979b8df08751a9f9b0be7745dc26cbf9bf4a4a31c488d02f3c057e4ad5d2cbecc0ef2885e70c33b97a9ec49f1f28958404f727dc503b5725675bcd64cef01376d5acfad620c9f7c1213592af3d0c0ddca"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 10:41:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:32 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2050.368188][T14603] usb 2-1: USB disconnect, device number 20 [ 2050.383976][T30832] ath9k_htc: Failed to initialize the device 10:41:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 2050.415379][T14603] usb 2-1: ath9k_htc: USB layer deinitialized [ 2050.416945][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x400300}, 0x0) [ 2050.495401][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 10:41:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 2050.537856][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 10:41:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 2050.697533][T12111] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2050.712140][T30304] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2050.727813][T21699] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2050.735576][T15272] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2050.849067][T14603] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2050.937590][T12111] usb 3-1: Using ep0 maxpacket: 32 [ 2050.957660][T30304] usb 4-1: Using ep0 maxpacket: 32 [ 2050.997456][T15272] usb 1-1: Using ep0 maxpacket: 32 [ 2051.002695][T21699] usb 5-1: Using ep0 maxpacket: 32 [ 2051.217699][T12111] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2051.226969][T12111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.235352][T12111] usb 3-1: Product: syz [ 2051.240212][T30304] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2051.249520][T12111] usb 3-1: Manufacturer: syz [ 2051.254255][T30304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.262463][T12111] usb 3-1: SerialNumber: syz [ 2051.268198][T30304] usb 4-1: Product: syz [ 2051.272384][T30304] usb 4-1: Manufacturer: syz [ 2051.276987][T30304] usb 4-1: SerialNumber: syz [ 2051.283662][T12111] usb 3-1: config 0 descriptor?? [ 2051.297703][T30304] usb 4-1: config 0 descriptor?? [ 2051.318185][T21699] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2051.330110][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 2051.334977][T15272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2051.346359][T21699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.351465][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2051.358020][T15272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.376878][T21699] usb 5-1: Product: syz [ 2051.383613][T15272] usb 1-1: Product: syz [ 2051.388593][T21699] usb 5-1: Manufacturer: syz [ 2051.393355][T15272] usb 1-1: Manufacturer: syz [ 2051.398492][T21699] usb 5-1: SerialNumber: syz [ 2051.403198][T15272] usb 1-1: SerialNumber: syz [ 2051.408557][T14603] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2051.427168][T21699] usb 5-1: config 0 descriptor?? [ 2051.432599][T14603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.442960][T15272] usb 1-1: config 0 descriptor?? [ 2051.448501][T14603] usb 2-1: Product: syz [ 2051.452675][T14603] usb 2-1: Manufacturer: syz [ 2051.457268][T14603] usb 2-1: SerialNumber: syz [ 2051.499767][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 2051.507975][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2051.515581][T14603] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2052.007562][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2052.014293][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2052.047542][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 2052.057893][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2052.087683][T12111] pwc: recv_control_msg error -32 req 04 val 1700 [ 2052.097723][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2052.127603][T12111] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2052.137755][T30304] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2052.158943][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2052.166201][T30304] pwc: recv_control_msg error -71 req 04 val 1000 [ 2052.166737][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2052.173047][T12111] pwc: recv_control_msg error -32 req 04 val 1000 [ 2052.187579][T14603] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2052.197836][T30304] pwc: recv_control_msg error -71 req 04 val 1300 [ 2052.207916][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 2052.217635][T12111] pwc: recv_control_msg error -32 req 04 val 1300 [ 2052.224276][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2052.237950][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2052.247571][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2052.258075][T21699] pwc: recv_control_msg error -71 req 04 val 1700 [ 2052.267584][T12111] pwc: recv_control_msg error -32 req 04 val 1400 [ 2052.277869][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2052.287696][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2052.294416][T21699] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2052.301146][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2052.307853][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 2052.317791][T21699] pwc: recv_control_msg error -71 req 04 val 1000 [ 2052.327718][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 2052.334337][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2052.347685][T21699] pwc: recv_control_msg error -71 req 04 val 1300 [ 2052.354214][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2052.357532][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 2052.367308][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2052.381786][T21699] pwc: recv_control_msg error -71 req 04 val 1400 [ 2052.387569][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 2052.397982][T15272] pwc: recv_control_msg error -71 req 04 val 1000 [ 2052.406097][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2052.412833][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 2052.417569][T21699] pwc: recv_control_msg error -71 req 02 val 2000 [ 2052.428297][T15272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2052.437648][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2052.437672][T21699] pwc: recv_control_msg error -71 req 02 val 2100 [ 2052.444411][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 2052.457564][T15272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2052.477685][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2052.485029][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 2052.487702][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2052.497468][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2052.498830][T21699] pwc: recv_control_msg error -71 req 02 val 2200 [ 2052.517804][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 2052.524454][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2052.537948][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2052.546413][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 2052.547612][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2052.559452][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 2052.568400][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2052.575182][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 2052.577514][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 2052.588259][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2052.597126][T30304] pwc: Registered as video71. [ 2052.608003][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2052.608593][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input151 [ 2052.615949][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 2052.629931][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 2052.657696][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2052.664885][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 2052.677607][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 2052.689072][T30304] usb 4-1: USB disconnect, device number 93 [ 2052.695345][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2052.702579][T12111] pwc: Registered as video72. [ 2052.703000][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 2052.708416][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input152 [ 2052.728011][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 2052.734684][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2052.757159][T12111] usb 3-1: USB disconnect, device number 43 [ 2052.767897][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 2052.775408][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2052.821216][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 2052.827869][T14603] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2052.833566][T14603] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2052.842138][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2052.867800][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2052.874509][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 2052.892640][T21699] pwc: Registered as video71. [ 2052.897788][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2052.918896][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input153 [ 2052.947751][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2052.966495][T15272] pwc: Registered as video72. [ 2052.978216][T21699] usb 5-1: USB disconnect, device number 14 [ 2052.991458][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input154 [ 2053.045244][T15272] usb 1-1: USB disconnect, device number 7 [ 2053.059479][T19272] usb 2-1: USB disconnect, device number 21 [ 2053.071702][T14603] ath9k_htc: Failed to initialize the device [ 2053.095959][T19272] usb 2-1: ath9k_htc: USB layer deinitialized 10:41:35 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x64, &(0x7f0000000240)=@generic={0x8, 0x2, 0x5c, "ea6a457f", "fb315b25612a07c85f4f433979b8df08751a9f9b0be7745dc26cbf9bf4a4a31c488d02f3c057e4ad5d2cbecc0ef2885e70c33b97a9ec49f1f28958404f727dc503b5725675bcd64cef01376d5acfad620c9f7c1213592af3d0c0ddca"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x64, &(0x7f0000000240)=@generic={0x8, 0x2, 0x5c, "ea6a457f", "fb315b25612a07c85f4f433979b8df08751a9f9b0be7745dc26cbf9bf4a4a31c488d02f3c057e4ad5d2cbecc0ef2885e70c33b97a9ec49f1f28958404f727dc503b5725675bcd64cef01376d5acfad620c9f7c1213592af3d0c0ddca"}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) 10:41:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10:41:35 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:35 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 2053.581014][T16072] __nla_validate_parse: 4 callbacks suppressed [ 2053.581036][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) [ 2053.653274][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 10:41:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 2053.701468][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2053.740913][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) [ 2053.782001][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 2053.826271][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2053.847648][T15272] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2053.877575][T12111] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2053.878588][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2053.887542][T30304] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2053.895183][T21699] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2053.910462][T19272] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2054.127557][T15272] usb 1-1: Using ep0 maxpacket: 32 [ 2054.137503][T12111] usb 3-1: Using ep0 maxpacket: 32 [ 2054.147572][T30304] usb 4-1: Using ep0 maxpacket: 32 [ 2054.177550][T21699] usb 5-1: Using ep0 maxpacket: 32 [ 2054.418040][T12111] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2054.427131][T12111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.435383][T30304] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2054.444764][T30304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.453025][T12111] usb 3-1: Product: syz [ 2054.457218][T12111] usb 3-1: Manufacturer: syz [ 2054.462177][T30304] usb 4-1: Product: syz [ 2054.466350][T30304] usb 4-1: Manufacturer: syz [ 2054.467780][T15272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2054.471290][T12111] usb 3-1: SerialNumber: syz [ 2054.480549][T15272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.486093][T30304] usb 4-1: SerialNumber: syz [ 2054.493082][T15272] usb 1-1: Product: syz [ 2054.502719][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2054.512437][T15272] usb 1-1: Manufacturer: syz [ 2054.517273][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.525865][T21699] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2054.527026][T12111] usb 3-1: config 0 descriptor?? [ 2054.537695][T15272] usb 1-1: SerialNumber: syz [ 2054.544741][T21699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.554590][T19272] usb 2-1: Product: syz [ 2054.557784][T30304] usb 4-1: config 0 descriptor?? [ 2054.565304][T15272] usb 1-1: config 0 descriptor?? [ 2054.570743][T21699] usb 5-1: Product: syz [ 2054.575032][T19272] usb 2-1: Manufacturer: syz [ 2054.580101][T21699] usb 5-1: Manufacturer: syz [ 2054.584911][T19272] usb 2-1: SerialNumber: syz [ 2054.589979][T21699] usb 5-1: SerialNumber: syz [ 2054.609641][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2054.609644][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 2054.610098][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2054.620044][T21699] usb 5-1: config 0 descriptor?? [ 2054.648544][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2054.683816][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 2055.081465][T21699] pwc: send_video_command error -71 [ 2055.086709][T21699] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2055.094352][T21699] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 2055.107296][T21699] usb 5-1: USB disconnect, device number 15 [ 2055.247531][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2055.257711][T14603] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2055.267567][T12111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2055.278042][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2055.288490][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2055.307659][T12111] pwc: recv_control_msg error -32 req 02 val 2700 [ 2055.327560][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2055.328366][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2055.347626][T12111] pwc: recv_control_msg error -32 req 04 val 1700 [ 2055.368991][T30304] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2055.381897][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2055.387716][T12111] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2055.394855][T30304] pwc: recv_control_msg error -71 req 04 val 1000 [ 2055.419236][T30304] pwc: recv_control_msg error -71 req 04 val 1300 [ 2055.428068][T15272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2055.437658][T12111] pwc: recv_control_msg error -32 req 04 val 1000 [ 2055.444336][T30304] pwc: recv_control_msg error -71 req 04 val 1400 [ 2055.467870][T30304] pwc: recv_control_msg error -71 req 02 val 2000 [ 2055.477627][T12111] pwc: recv_control_msg error -32 req 04 val 1300 [ 2055.487785][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2055.487854][T15272] pwc: recv_control_msg error -71 req 04 val 1000 [ 2055.508597][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2055.522035][T15272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2055.523382][T12111] pwc: recv_control_msg error -32 req 04 val 1400 [ 2055.535425][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2055.547627][T15272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2055.567571][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2055.567692][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2055.574179][T12111] pwc: recv_control_msg error -71 req 02 val 2000 [ 2055.592235][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2055.607627][T12111] pwc: recv_control_msg error -71 req 02 val 2100 [ 2055.607900][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2055.622820][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2055.630860][T12111] pwc: recv_control_msg error -71 req 02 val 2200 [ 2055.642926][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2055.657839][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2055.664738][T12111] pwc: recv_control_msg error -71 req 06 val 0600 [ 2055.677979][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2055.687566][T12111] pwc: recv_control_msg error -71 req 04 val 1500 [ 2055.694413][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2055.707841][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2055.717860][T12111] pwc: recv_control_msg error -71 req 02 val 2500 [ 2055.725013][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2055.737629][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2055.747585][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2055.754295][T12111] pwc: recv_control_msg error -71 req 02 val 2400 [ 2055.767659][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2055.777830][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2055.784426][T12111] pwc: recv_control_msg error -71 req 02 val 2600 [ 2055.794111][T30304] pwc: Registered as video71. [ 2055.797623][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2055.807634][T12111] pwc: recv_control_msg error -71 req 02 val 2900 [ 2055.815554][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input155 [ 2055.827666][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2055.847830][T12111] pwc: recv_control_msg error -71 req 02 val 2800 [ 2055.858073][T30304] usb 4-1: USB disconnect, device number 94 [ 2055.871047][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2055.880816][T12111] pwc: recv_control_msg error -71 req 04 val 1100 [ 2055.907455][T14603] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2055.907524][T12111] pwc: recv_control_msg error -71 req 04 val 1200 [ 2055.913144][T14603] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2055.913327][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2055.940465][T12111] pwc: Registered as video71. [ 2055.953907][T12111] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input156 [ 2055.969802][T12111] usb 3-1: USB disconnect, device number 44 [ 2055.985302][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2056.017592][T15272] pwc: Registered as video71. [ 2056.031148][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input157 [ 2056.058800][T15272] usb 1-1: USB disconnect, device number 8 [ 2056.103952][T16075] UDC core: couldn't find an available UDC or it's busy: -16 [ 2056.130144][T16075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2056.383365][T15272] usb 2-1: USB disconnect, device number 22 [ 2056.391506][T14603] ath9k_htc: Failed to initialize the device [ 2056.400524][T15272] usb 2-1: ath9k_htc: USB layer deinitialized 10:41:39 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x64, &(0x7f0000000240)=@generic={0x8, 0x2, 0x5c, "ea6a457f", "fb315b25612a07c85f4f433979b8df08751a9f9b0be7745dc26cbf9bf4a4a31c488d02f3c057e4ad5d2cbecc0ef2885e70c33b97a9ec49f1f28958404f727dc503b5725675bcd64cef01376d5acfad620c9f7c1213592af3d0c0ddca"}) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 10:41:39 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) [ 2056.935525][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 2056.985786][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 2057.029231][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) 10:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) [ 2057.187664][T15272] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2057.207656][T30410] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2057.215407][T21699] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2057.223099][T14603] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2057.230713][T19272] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2057.457868][T15272] usb 4-1: Using ep0 maxpacket: 32 [ 2057.497594][T30410] usb 5-1: Using ep0 maxpacket: 32 [ 2057.502957][T21699] usb 3-1: Using ep0 maxpacket: 32 [ 2057.508365][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2057.798480][T15272] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2057.807739][T15272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.815751][T15272] usb 4-1: Product: syz [ 2057.821008][T15272] usb 4-1: Manufacturer: syz [ 2057.825607][T15272] usb 4-1: SerialNumber: syz [ 2057.834611][T15272] usb 4-1: config 0 descriptor?? [ 2057.840508][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2057.849867][T21699] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2057.849904][T21699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.849933][T21699] usb 3-1: Product: syz [ 2057.849952][T21699] usb 3-1: Manufacturer: syz [ 2057.876576][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2057.885876][T30410] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2057.895111][T30410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.903443][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.911714][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.919968][T30410] usb 5-1: Product: syz [ 2057.924144][T30410] usb 5-1: Manufacturer: syz [ 2057.931247][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2057.937750][T19272] usb 2-1: Product: syz [ 2057.941934][T19272] usb 2-1: Manufacturer: syz [ 2057.946536][T19272] usb 2-1: SerialNumber: syz [ 2057.951340][T14603] usb 1-1: Product: syz [ 2057.955559][T14603] usb 1-1: Manufacturer: syz [ 2057.960222][T30410] usb 5-1: SerialNumber: syz [ 2057.965397][T21699] usb 3-1: SerialNumber: syz [ 2057.970130][T14603] usb 1-1: SerialNumber: syz [ 2057.977888][T30410] usb 5-1: config 0 descriptor?? [ 2057.996000][T14603] usb 1-1: config 0 descriptor?? [ 2058.001584][T21699] usb 3-1: config 0 descriptor?? [ 2058.021413][T30410] pwc: Samsung MPC-C10 USB webcam detected. [ 2058.040077][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 2058.046799][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2058.057933][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2058.417822][T30410] pwc: send_video_command error -71 [ 2058.423080][T30410] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2058.431426][T30410] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 2058.444822][T30410] usb 5-1: USB disconnect, device number 16 [ 2058.451824][T21699] pwc: send_video_command error -71 [ 2058.457535][T21699] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2058.465132][T21699] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2058.496623][T21699] usb 3-1: USB disconnect, device number 45 [ 2058.577500][T15272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2058.617860][T15272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2058.661522][T15272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2058.668449][T19272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2058.717676][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2058.724391][T15272] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2058.747587][T15272] pwc: recv_control_msg error -71 req 04 val 1000 [ 2058.767643][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2058.774563][T15272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2058.807757][T15272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2058.827616][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2058.834342][T15272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2058.857702][T15272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2058.877749][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2058.884374][T15272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2058.917619][T14603] pwc: recv_control_msg error -71 req 04 val 1000 [ 2058.924216][T15272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2058.937841][T14603] pwc: recv_control_msg error -71 req 04 val 1300 [ 2058.951459][T15272] pwc: recv_control_msg error -71 req 04 val 1500 [ 2058.977627][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2058.984304][T15272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2059.010015][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2059.016581][T15272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2059.038155][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2059.044962][T15272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2059.067601][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2059.074168][T15272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2059.083061][T12111] usb 2-1: USB disconnect, device number 23 [ 2059.107597][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2059.114219][T15272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2059.127562][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2059.137602][T15272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2059.147546][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2059.157573][T15272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2059.164820][T15272] pwc: Registered as video71. [ 2059.169756][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2059.176914][T15272] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input158 [ 2059.187522][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2059.195730][T15272] usb 4-1: USB disconnect, device number 95 [ 2059.207591][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2059.232014][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2059.257546][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2059.277582][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2059.286465][T14603] pwc: Registered as video71. [ 2059.297321][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input159 [ 2059.317682][T14603] usb 1-1: USB disconnect, device number 9 10:41:41 executing program 1: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d80f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b858e10e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954008c76d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a666ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8000000"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x2e, &(0x7f0000000000)=@generic={0x4, 0x2, 0x26, "47994b64", "61a03ff80c8e461a802fa90002332503647efd43c4daf7b1f0404c3d527582aa52a73abd91a8"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 10:41:41 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:41 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 2059.611224][T16131] __nla_validate_parse: 4 callbacks suppressed [ 2059.611246][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 2059.676548][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) [ 2059.721742][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) [ 2059.763507][T19272] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2059.771761][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2059.774343][T19272] ath9k_htc: Failed to initialize the device [ 2059.795919][T12111] usb 2-1: ath9k_htc: USB layer deinitialized 10:41:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) [ 2059.828744][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) [ 2059.875771][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2059.887751][T14603] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2059.897714][T30832] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2059.907614][T30304] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2059.927534][T15272] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2059.952217][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:42 executing program 1: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d80f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b858e10e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954008c76d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a666ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8000000"]) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x2e, &(0x7f0000000000)=@generic={0x4, 0x2, 0x26, "47994b64", "61a03ff80c8e461a802fa90002332503647efd43c4daf7b1f0404c3d527582aa52a73abd91a8"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) [ 2060.137474][T30832] usb 4-1: Using ep0 maxpacket: 32 [ 2060.147709][T30304] usb 3-1: Using ep0 maxpacket: 32 [ 2060.157465][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2060.177608][T15272] usb 5-1: Using ep0 maxpacket: 32 [ 2060.189229][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2060.417515][T30832] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2060.426880][T30832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.435788][T30304] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2060.445239][T30832] usb 4-1: Product: syz [ 2060.449713][T30304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.457945][T30832] usb 4-1: Manufacturer: syz [ 2060.462743][T30832] usb 4-1: SerialNumber: syz [ 2060.467595][T30304] usb 3-1: Product: syz [ 2060.477858][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2060.481198][T30832] usb 4-1: config 0 descriptor?? [ 2060.489282][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.492014][T30304] usb 3-1: Manufacturer: syz [ 2060.504839][T15272] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2060.505172][T30304] usb 3-1: SerialNumber: syz [ 2060.523499][T15272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.528410][T30304] usb 3-1: config 0 descriptor?? [ 2060.539607][T15272] usb 5-1: Product: syz [ 2060.539853][T30832] pwc: Samsung MPC-C10 USB webcam detected. [ 2060.544096][T14603] usb 1-1: Product: syz [ 2060.554792][T15272] usb 5-1: Manufacturer: syz [ 2060.561492][T14603] usb 1-1: Manufacturer: syz [ 2060.566299][T15272] usb 5-1: SerialNumber: syz [ 2060.571284][T14603] usb 1-1: SerialNumber: syz [ 2060.578112][T15272] usb 5-1: config 0 descriptor?? [ 2060.596466][T14603] usb 1-1: config 0 descriptor?? [ 2060.599910][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2060.631675][T15272] pwc: Samsung MPC-C10 USB webcam detected. [ 2060.650075][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2061.047566][T15272] pwc: send_video_command error -71 [ 2061.053027][T15272] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2061.061244][T15272] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 2061.071244][T15272] usb 5-1: USB disconnect, device number 17 [ 2061.197639][T30832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2061.237503][T30832] pwc: recv_control_msg error -32 req 02 val 2700 [ 2061.267621][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2061.277794][T30832] pwc: recv_control_msg error -32 req 04 val 1700 [ 2061.287652][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2061.308244][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2061.317780][T30832] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2061.337609][T30832] pwc: recv_control_msg error -71 req 04 val 1000 [ 2061.337670][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2061.347725][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2061.357614][T30832] pwc: recv_control_msg error -71 req 04 val 1300 [ 2061.382646][T30832] pwc: recv_control_msg error -71 req 04 val 1400 [ 2061.397609][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2061.397636][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2061.415670][T30832] pwc: recv_control_msg error -71 req 02 val 2000 [ 2061.440522][T30832] pwc: recv_control_msg error -71 req 02 val 2100 [ 2061.447981][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2061.457595][T30832] pwc: recv_control_msg error -71 req 02 val 2200 [ 2061.464190][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2061.477596][T30832] pwc: recv_control_msg error -71 req 06 val 0600 10:41:43 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) [ 2061.497545][T30832] pwc: recv_control_msg error -71 req 04 val 1500 [ 2061.501196][T14603] pwc: recv_control_msg error -71 req 04 val 1000 [ 2061.507942][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2061.527872][T30832] pwc: recv_control_msg error -71 req 02 val 2500 [ 2061.547583][T14603] pwc: recv_control_msg error -71 req 04 val 1300 [ 2061.554332][T30832] pwc: recv_control_msg error -71 req 02 val 2400 [ 2061.567661][T30304] pwc: recv_control_msg error -32 req 04 val 1400 [ 2061.567688][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2061.577816][T30832] pwc: recv_control_msg error -71 req 02 val 2600 [ 2061.597828][T30832] pwc: recv_control_msg error -71 req 02 val 2900 [ 2061.598032][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2061.607742][T30304] pwc: recv_control_msg error -32 req 02 val 2000 [ 2061.617861][T30832] pwc: recv_control_msg error -71 req 02 val 2800 [ 2061.627586][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2061.637550][T30832] pwc: recv_control_msg error -71 req 04 val 1100 [ 2061.657611][T30304] pwc: recv_control_msg error -71 req 02 val 2100 [ 2061.657614][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2061.658719][T30832] pwc: recv_control_msg error -71 req 04 val 1200 [ 2061.678135][T30304] pwc: recv_control_msg error -71 req 02 val 2200 [ 2061.687595][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2061.696730][T30832] pwc: Registered as video71. [ 2061.701564][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2061.717854][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2061.727647][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2061.737661][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2061.741623][T30832] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input160 [ 2061.756260][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2061.767606][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2061.787508][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2061.787694][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2061.807543][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2061.807675][T30832] usb 4-1: USB disconnect, device number 96 [ 2061.829094][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2061.847756][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2061.867522][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2061.867717][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2061.887715][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2061.897884][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2061.907547][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2061.914223][T14603] pwc: Registered as video71. [ 2061.929379][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2061.930908][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input161 [ 2061.940682][T30304] pwc: Registered as video72. [ 2061.977111][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input162 [ 2062.025596][T14603] usb 1-1: USB disconnect, device number 10 [ 2062.028697][T30304] usb 3-1: USB disconnect, device number 46 10:41:44 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x128, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x50, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xc8, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x1, 0xfa, 0x34, 0x10}, 0x20a, &(0x7f0000000380)={0x5, 0xf, 0x20a, 0x6, [@generic={0xf2, 0x10, 0xa, "f9a08b453e2eea09cf0e4d1a9439d8c57a2ab3e36cd41303448a3fb27db0d3273f5ae6eadd6c4e775dc49cd6a5cceb013b048bc7b33431950e376e602a66ffe33815e111125b82179b3d0227c3367c9d759b85d9dc48ee54e29d23c63015cedfd5c16d153e887f952e5a3ff5627122b9b74d612192257cc9bb73770bed024d181a0ef342781e9091ed286304804c5efc579f8a808120eb67e7887de07c1c2579a5008fb38221cc98e4326097bf34b0ec235cff8c4a5f5e7f36eca1ad01beb680c29718ecb6ac147599c045b1e8375ee804bf5d654a0e1a6d175a673c1da7632d41313c619f1f5ff4c60de4be41140e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x8, 0x7f, 0xfff8, 0x20}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5a1af42cad3a0bfe7725ee1d56f28232"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xee, 0x10, 0x4, "8965186fe149b88619ce881559b60eaea685734d57bd318c04b1cf969f60dee689c4f43d2ea2fb077d218a7015cb084c3166343fc0880f42f4f2a8987591d03a75315b5b2fb6119ed0a150b760201636a77fcdd9ad955b857681b6084db034e009c8f6c16e3426e2b78dad8b50851d2744620d59c092890235945ca18262748106d777f6cf5dd02874797d39d24073d6764476f77d1d75c86b0f8f870e72d1391dd5784702983dadb24b3df01e0ccc6020a9b4d308ab210623ca128a134e4bbece1a5ecf311432966f4b293a226f01b7dd0b00b97cd1361f7d6c7b8f906a1fc45401c18af5b6faf01f72cc"}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x814}}, {0xdd, &(0x7f00000005c0)=@string={0xdd, 0x3, "a1d7f8e85422d723997370e9127b4494184205b4da83bb70b0ddb37ac5b0b4d0f5ac5097933e58668dc0673d1983729040ec2324b7affd0d3cef169cb6fa50eb407fecb9067a38834ac8c2c0a4c5d0d8cf77bb18e17fd2b8f353e7439c8d51f364abdee9dcb063e7e404bbafdd809a41639245f2654a0d5cab364da6ee094a01ec0bf6038c50613c5db550324a623c7643cf8ac08e560c242a9cc68be59b36f01fa195689bc13fb2f19481b66e5da7a21d6514b23b6609342bfc422efea93a48bd964de240941bbb9128018240f08c2f14ddfe41efe7f6b36474c9"}}, {0x9d, &(0x7f00000006c0)=@string={0x9d, 0x3, "7e6e8e013c6980ef6972e3203b23fc5127820b7a01163724b5fbabd957d1b5128e947800bba94326f6a68011c28aca1d1bde389707b3179e317d31b2fe2176cbda849c750d178349ebb93f8ee5a27704781d6cda8a4c7dc299bd56ee18c5942d1667d843aa1f5d056757e44249f0064f62666e0910f8fd6a87eed9fb12c21b381d9901203151611c717a6cb6ccb2e608021352635d2a0821197108"}}, {0xca, &(0x7f0000000780)=@string={0xca, 0x3, "1f491b0ae7a278b058b2b46f315e1f160a393d5d38cc11ea4ca0aa42dbe3d8cd477e44bb1ce986c336c86d68dc9dfb560656491436746ed50e760b026d76aa58d6fd6fdca8fcd53e5a0eb3cfdc8afac065e5dbb0ef9a54ae45935e96dee272eea496e4d5b8e5b753848ce842d3dccd56d154e5d37733e79d6531def3b0c3326e22619fe1f24818d06163adf61748efc1dfefb521b48fb1ee47fdca4b234c9e1868daac53f5d6e42bd0c8ec7cdb3943e5cd9261a876c694557f0b36ac097432e2233c726e9c154234"}}]}) syz_usb_disconnect(r1) 10:41:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 10:41:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:44 executing program 1: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB="8500004e2d80f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b858e10e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954008c76d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a666ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8000000"]) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x2e, &(0x7f0000000000)=@generic={0x4, 0x2, 0x26, "47994b64", "61a03ff80c8e461a802fa90002332503647efd43c4daf7b1f0404c3d527582aa52a73abd91a8"}) (async) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:41:44 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:44 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:41:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 2062.241350][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xe9170000}, 0x0) 10:41:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 2062.297127][T16177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) 10:41:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 10:41:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 2062.547496][T21699] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2062.657607][T30304] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2062.667518][T14603] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2062.802371][T21699] usb 4-1: Using ep0 maxpacket: 32 [ 2062.937463][T14603] usb 1-1: Using ep0 maxpacket: 32 [ 2063.107931][T21699] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2063.117112][T21699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.130734][T21699] usb 4-1: Product: syz [ 2063.134913][T21699] usb 4-1: Manufacturer: syz [ 2063.140906][T21699] usb 4-1: SerialNumber: syz [ 2063.153146][T21699] usb 4-1: config 0 descriptor?? [ 2063.187611][T30304] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2063.196874][T30304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.205655][T30304] usb 3-1: Product: syz [ 2063.210469][T30304] usb 3-1: Manufacturer: syz [ 2063.210751][T21699] pwc: Samsung MPC-C10 USB webcam detected. [ 2063.215192][T30304] usb 3-1: SerialNumber: syz [ 2063.237640][T14603] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2063.246942][T14603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.259918][T14603] usb 1-1: Product: syz [ 2063.264156][T14603] usb 1-1: Manufacturer: syz [ 2063.271688][T14603] usb 1-1: SerialNumber: syz [ 2063.272012][T30304] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2063.292570][T14603] usb 1-1: config 0 descriptor?? [ 2063.341063][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2063.847628][T21699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2063.857581][T30304] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2063.887657][T21699] pwc: recv_control_msg error -32 req 02 val 2700 [ 2063.927957][T21699] pwc: recv_control_msg error -32 req 04 val 1700 [ 2063.977553][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2063.984155][T21699] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2064.007549][T21699] pwc: recv_control_msg error -71 req 04 val 1000 [ 2064.017697][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2064.027812][T21699] pwc: recv_control_msg error -71 req 04 val 1300 [ 2064.057594][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2064.077813][T21699] pwc: recv_control_msg error -71 req 04 val 1400 [ 2064.107567][T21699] pwc: recv_control_msg error -71 req 02 val 2000 [ 2064.137555][T14603] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2064.144267][T21699] pwc: recv_control_msg error -71 req 02 val 2100 [ 2064.167644][T21699] pwc: recv_control_msg error -71 req 02 val 2200 [ 2064.197606][T14603] pwc: recv_control_msg error -71 req 04 val 1000 [ 2064.204254][T21699] pwc: recv_control_msg error -71 req 06 val 0600 [ 2064.227537][T14603] pwc: recv_control_msg error -71 req 04 val 1300 [ 2064.234126][T21699] pwc: recv_control_msg error -71 req 04 val 1500 [ 2064.267544][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2064.274108][T21699] pwc: recv_control_msg error -71 req 02 val 2500 [ 2064.307596][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2064.314267][T21699] pwc: recv_control_msg error -71 req 02 val 2400 [ 2064.337583][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2064.341302][T30304] usb 3-1: ath9k_htc: Invalid TX pipe: 0 [ 2064.344278][T21699] pwc: recv_control_msg error -71 req 02 val 2600 [ 2064.353398][T30304] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2064.367629][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2064.374364][T21699] pwc: recv_control_msg error -71 req 02 val 2900 [ 2064.407560][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2064.414315][T21699] pwc: recv_control_msg error -71 req 02 val 2800 [ 2064.440079][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2064.446716][T21699] pwc: recv_control_msg error -71 req 04 val 1100 [ 2064.483851][T21699] pwc: recv_control_msg error -71 req 04 val 1200 [ 2064.490681][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2064.498728][T21699] pwc: Registered as video71. [ 2064.504124][T21699] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input163 [ 2064.514471][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2064.524031][T21699] usb 4-1: USB disconnect, device number 97 [ 2064.537568][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2064.546561][T16175] UDC core: couldn't find an available UDC or it's busy: -16 [ 2064.565031][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2064.577478][T16175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2064.607549][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2064.637670][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2064.659904][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2064.667289][T14603] pwc: Registered as video71. [ 2064.674022][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input164 [ 2064.689115][T14603] usb 1-1: USB disconnect, device number 11 [ 2064.806155][T21699] usb 3-1: USB disconnect, device number 47 [ 2064.820480][T30304] ath9k_htc: Failed to initialize the device [ 2064.826743][T21699] usb 3-1: ath9k_htc: USB layer deinitialized 10:41:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:47 executing program 4: syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 10:41:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 10:41:47 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect(0x3, 0x78, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x89, 0x2c, 0x84, 0x40, 0x7ab, 0xfccd, 0x5ddc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x9, 0xc6, 0x0, 0x7f, [{{0x9, 0x4, 0x60, 0x1, 0x1, 0xd6, 0x66, 0x7e, 0x32, [@hid_hid={0x9, 0x21, 0x0, 0x73, 0x1, {0x22, 0x4ec}}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x5, 0x7f, "09edb4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x4, 0x2, 0x1, "55adc1687a3aedd133"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x3, "b5417f303be784bb"}, @as_header={0x7, 0x24, 0x1, 0x2c, 0xa5}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}], [{{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x5, 0x2, 0xc0}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x40, 0x7, 0x6, 0x20, 0x48}, 0x3e, &(0x7f00000002c0)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "cedeba4d533b38c367920fbe99b03442"}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x7fff, 0xf000, 0x4, [0xc000]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x81, 0xc1, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6c, 0x1, 0x9}]}, 0x9, [{0xde, &(0x7f0000000300)=@string={0xde, 0x3, "4e01e44390cc9882b275f9b63aa46e846402a32f7630546d83141ab8d81c01a37eb40fc19169603c6566d1c88a87c1fa86fe941a30238c272c2d8af9698a895cbed1b6bf4c480aae12d0a60594b2d0dbc978d503f42a7e080166eb239e56d81d5613fdcf3d3b8f6c6a36a1b07f12314cf77e4545fbfe34a71ff74af0f1284742e6a14b5ad4d8ff4ce3770962fb6562050d1127061c2ee31f5c6ffd7d1421f090f51e903d3ce735c2677d1d187d88c00fd741b69c293353f6011603b2afa6626b21f31b85003bef983faa9bb24f1c3144ba65e0130924402b3cc64e69"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x302f}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "4a8cd91c961d79d707228deaac651fce955045c0954d8ce9d76aa0dee295a04ef4c22d81e22e2245441bf033a40cd88799d4d9052abecd3b493c62e286ac7ab32ff6704d1ea5cde9025b0b29a00af095048acdbfd071a2bc6213b246da388d260ed6a820b78f02741982f0cb446f17d04bd4eca1d96469ce48c18d17e4f49739b895fa14873fe36595e10b98bc5d78789fe6bf68c749ff9ac31c24d41c76feaec1474fc62aaa0f5d411d7b1efc95154ae259bdb2f196178e9e26233b9583cd42eb35d1532ad3a97b137a2762e65c430e63137a7a04bb431290b24a457402df681c3e20a0cff1b5099dea1d"}}, {0x69, &(0x7f0000000540)=@string={0x69, 0x3, "dd9d0b4e32c0c89b692ed969070fda06e994a9392ce39bf4e1ef9ececea4f6bcf79ff27333d5acf99361cc9eb2652869515430bc00a3a371c8ff3e080710c45bf2453a0e91d74134c852746ca5ff39db4d115050e43718c34d18c770881ebfe9813742c09d1dff"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf0395a26b57ea279}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x458}}, {0xc1, &(0x7f0000000680)=@string={0xc1, 0x3, "01a2dc28f31939ec4f11b5ea12382a70b3f37cd3ef0363d12dd2ece2627a6533e59715edc8578b7ee77b49cb66a9961f7d57ff773301ef8b53702bc84d168d5ea6d2bd7f77079b0e3459212de82310d0cc70dfc3b75cb2dc6f9f18f48a49c2926ea12456e9040e8fba4014b2b52ba77417a83a8da95975783863620adba23c6ebb44c5096898f579cf3e9980a64c19a809145f1704a4287d15df240b67abee8af89fd0247ad2e62162a60271fe081c568fb4cefeae3c1ca686ccae0f97147b"}}, {0x65, &(0x7f0000000780)=@string={0x65, 0x3, "6cd931f8f03be21c63b28d2539557fc0d3584332d2037dfa17bb8b5b85b295f6c094b253da740f2c86871078e7950a765b53d9de16f407c522ccc7211244d5206c8040bbde0feb951f50eafc3e50969f5574fb670e9555d1da46dc37483b8d50adf42d"}}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000880)=@ready={0x0, 0x0, 0x8, "bce6eae3", {0x1, 0x7ff, 0x8, 0x3f, 0x80}}) 10:41:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:47 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 2065.360260][T16197] __nla_validate_parse: 5 callbacks suppressed [ 2065.360281][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) [ 2065.415259][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x0) [ 2065.456382][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x2) 10:41:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x3) [ 2065.500814][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2065.539761][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x4) [ 2065.614363][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2065.627978][T30301] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2065.652812][T21699] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2065.660656][T14603] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2065.667755][T30304] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2065.867473][T30301] usb 1-1: Using ep0 maxpacket: 32 [ 2065.907959][T30304] usb 3-1: Using ep0 maxpacket: 32 [ 2065.947491][T14603] usb 4-1: Using ep0 maxpacket: 32 [ 2066.147580][T30301] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2066.156966][T30301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.165725][T30301] usb 1-1: Product: syz [ 2066.171080][T30301] usb 1-1: Manufacturer: syz [ 2066.175889][T30301] usb 1-1: SerialNumber: syz [ 2066.183624][T30301] usb 1-1: config 0 descriptor?? [ 2066.189374][T30304] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2066.198924][T30304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.207087][T30304] usb 3-1: Product: syz [ 2066.211740][T30304] usb 3-1: Manufacturer: syz [ 2066.216501][T30304] usb 3-1: SerialNumber: syz [ 2066.230276][T30304] usb 3-1: config 0 descriptor?? [ 2066.239595][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 2066.271375][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2066.271507][T21699] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2066.286662][T14603] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2066.295779][T14603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.304228][T21699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.312673][T14603] usb 4-1: Product: syz [ 2066.316849][T14603] usb 4-1: Manufacturer: syz [ 2066.321993][T21699] usb 2-1: Product: syz [ 2066.326181][T21699] usb 2-1: Manufacturer: syz [ 2066.331145][T14603] usb 4-1: SerialNumber: syz [ 2066.345746][T14603] usb 4-1: config 0 descriptor?? [ 2066.350803][T21699] usb 2-1: SerialNumber: syz [ 2066.389945][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2066.408323][T21699] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2066.897641][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2066.937724][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2066.944368][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 2066.977670][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2066.987543][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 2067.027589][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2067.034159][T30301] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2067.037857][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2067.077535][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2067.084165][T30301] pwc: recv_control_msg error -71 req 04 val 1000 [ 2067.097656][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2067.106795][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2067.107554][T30301] pwc: recv_control_msg error -71 req 04 val 1300 [ 2067.127751][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2067.149177][T30301] pwc: recv_control_msg error -71 req 04 val 1400 [ 2067.167557][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 2067.174179][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2067.178944][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2067.198884][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 2067.217571][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 2067.224192][T30304] pwc: recv_control_msg error -32 req 04 val 1400 [ 2067.244594][T14603] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2067.251263][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 2067.267712][T30304] pwc: recv_control_msg error -32 req 02 val 2000 [ 2067.271562][T14603] pwc: recv_control_msg error -71 req 04 val 1000 [ 2067.277850][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 2067.297552][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 2067.307502][T30304] pwc: recv_control_msg error -32 req 02 val 2100 [ 2067.317841][T14603] pwc: recv_control_msg error -71 req 04 val 1300 [ 2067.329662][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 2067.338861][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2067.347840][T30304] pwc: recv_control_msg error -32 req 02 val 2200 [ 2067.357849][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 2067.377574][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 2067.377644][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2067.387740][T30304] pwc: recv_control_msg error -71 req 06 val 0600 [ 2067.400307][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 2067.427561][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 2067.427583][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2067.434183][T30304] pwc: recv_control_msg error -71 req 04 val 1500 [ 2067.477556][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 2067.477634][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2067.484147][T30304] pwc: recv_control_msg error -71 req 02 val 2500 [ 2067.515636][T30301] pwc: Registered as video71. [ 2067.523545][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input165 [ 2067.531081][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2067.533807][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2067.539900][T21699] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2067.555555][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2067.557532][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2067.578052][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2067.597716][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2067.597787][T30301] usb 1-1: USB disconnect, device number 12 [ 2067.628509][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2067.637885][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2067.658093][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2067.667573][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2067.697541][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2067.697707][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2067.747780][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2067.753068][T16199] UDC core: couldn't find an available UDC or it's busy: -16 [ 2067.762281][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2067.762856][T30304] pwc: Registered as video71. [ 2067.778053][T16199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2067.788011][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2067.801174][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input166 [ 2067.810002][T16199] UDC core: couldn't find an available UDC or it's busy: -16 [ 2067.820001][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2067.825915][T16199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2067.830308][T14603] pwc: Registered as video72. [ 2067.847083][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input167 [ 2067.872956][T30304] usb 3-1: USB disconnect, device number 48 [ 2067.915931][T30301] usb 2-1: USB disconnect, device number 24 [ 2067.923698][T14603] usb 4-1: USB disconnect, device number 98 [ 2067.934804][T21699] ath9k_htc: Failed to initialize the device [ 2067.941573][T30301] usb 2-1: ath9k_htc: USB layer deinitialized 10:41:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x5) 10:41:50 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async, rerun: 32) syz_usb_connect(0x3, 0x78, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x89, 0x2c, 0x84, 0x40, 0x7ab, 0xfccd, 0x5ddc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x9, 0xc6, 0x0, 0x7f, [{{0x9, 0x4, 0x60, 0x1, 0x1, 0xd6, 0x66, 0x7e, 0x32, [@hid_hid={0x9, 0x21, 0x0, 0x73, 0x1, {0x22, 0x4ec}}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x5, 0x7f, "09edb4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x4, 0x2, 0x1, "55adc1687a3aedd133"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x3, "b5417f303be784bb"}, @as_header={0x7, 0x24, 0x1, 0x2c, 0xa5}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}], [{{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x5, 0x2, 0xc0}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x40, 0x7, 0x6, 0x20, 0x48}, 0x3e, &(0x7f00000002c0)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "cedeba4d533b38c367920fbe99b03442"}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x7fff, 0xf000, 0x4, [0xc000]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x81, 0xc1, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6c, 0x1, 0x9}]}, 0x9, [{0xde, &(0x7f0000000300)=@string={0xde, 0x3, "4e01e44390cc9882b275f9b63aa46e846402a32f7630546d83141ab8d81c01a37eb40fc19169603c6566d1c88a87c1fa86fe941a30238c272c2d8af9698a895cbed1b6bf4c480aae12d0a60594b2d0dbc978d503f42a7e080166eb239e56d81d5613fdcf3d3b8f6c6a36a1b07f12314cf77e4545fbfe34a71ff74af0f1284742e6a14b5ad4d8ff4ce3770962fb6562050d1127061c2ee31f5c6ffd7d1421f090f51e903d3ce735c2677d1d187d88c00fd741b69c293353f6011603b2afa6626b21f31b85003bef983faa9bb24f1c3144ba65e0130924402b3cc64e69"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x302f}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "4a8cd91c961d79d707228deaac651fce955045c0954d8ce9d76aa0dee295a04ef4c22d81e22e2245441bf033a40cd88799d4d9052abecd3b493c62e286ac7ab32ff6704d1ea5cde9025b0b29a00af095048acdbfd071a2bc6213b246da388d260ed6a820b78f02741982f0cb446f17d04bd4eca1d96469ce48c18d17e4f49739b895fa14873fe36595e10b98bc5d78789fe6bf68c749ff9ac31c24d41c76feaec1474fc62aaa0f5d411d7b1efc95154ae259bdb2f196178e9e26233b9583cd42eb35d1532ad3a97b137a2762e65c430e63137a7a04bb431290b24a457402df681c3e20a0cff1b5099dea1d"}}, {0x69, &(0x7f0000000540)=@string={0x69, 0x3, "dd9d0b4e32c0c89b692ed969070fda06e994a9392ce39bf4e1ef9ececea4f6bcf79ff27333d5acf99361cc9eb2652869515430bc00a3a371c8ff3e080710c45bf2453a0e91d74134c852746ca5ff39db4d115050e43718c34d18c770881ebfe9813742c09d1dff"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf0395a26b57ea279}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x458}}, {0xc1, &(0x7f0000000680)=@string={0xc1, 0x3, "01a2dc28f31939ec4f11b5ea12382a70b3f37cd3ef0363d12dd2ece2627a6533e59715edc8578b7ee77b49cb66a9961f7d57ff773301ef8b53702bc84d168d5ea6d2bd7f77079b0e3459212de82310d0cc70dfc3b75cb2dc6f9f18f48a49c2926ea12456e9040e8fba4014b2b52ba77417a83a8da95975783863620adba23c6ebb44c5096898f579cf3e9980a64c19a809145f1704a4287d15df240b67abee8af89fd0247ad2e62162a60271fe081c568fb4cefeae3c1ca686ccae0f97147b"}}, {0x65, &(0x7f0000000780)=@string={0x65, 0x3, "6cd931f8f03be21c63b28d2539557fc0d3584332d2037dfa17bb8b5b85b295f6c094b253da740f2c86871078e7950a765b53d9de16f407c522ccc7211244d5206c8040bbde0feb951f50eafc3e50969f5574fb670e9555d1da46dc37483b8d50adf42d"}}]}) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000880)=@ready={0x0, 0x0, 0x8, "bce6eae3", {0x1, 0x7ff, 0x8, 0x3f, 0x80}}) 10:41:50 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:50 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x6) [ 2068.436806][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2068.462372][T16233] UDC core: couldn't find an available UDC or it's busy: -16 [ 2068.463924][T16234] UDC core: couldn't find an available UDC or it's busy: -16 [ 2068.470419][T16233] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:41:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x7) [ 2068.486701][T16233] UDC core: couldn't find an available UDC or it's busy: -16 [ 2068.488489][T30304] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2068.498515][T16233] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2068.511119][T14603] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2068.519993][T16234] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2068.529872][T16233] UDC core: couldn't find an available UDC or it's busy: -16 [ 2068.539776][T16233] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2068.549408][T16233] UDC core: couldn't find an available UDC or it's busy: -16 [ 2068.557262][T16233] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:41:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x8) 10:41:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x9) 10:41:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0xa) [ 2068.618511][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0xc) [ 2068.687441][T19272] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2068.695541][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2068.737757][T21699] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2068.749993][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2068.760229][T30304] usb 3-1: Using ep0 maxpacket: 32 [ 2068.767743][T14603] usb 4-1: Using ep0 maxpacket: 32 [ 2068.951760][T19272] usb 1-1: Using ep0 maxpacket: 32 [ 2069.037567][T30304] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2069.046798][T30304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.058126][T14603] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2069.061036][T30304] usb 3-1: Product: syz [ 2069.067207][T14603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.073790][T30304] usb 3-1: Manufacturer: syz [ 2069.080778][T14603] usb 4-1: Product: syz [ 2069.087471][T30304] usb 3-1: SerialNumber: syz [ 2069.089438][T14603] usb 4-1: Manufacturer: syz [ 2069.098084][T14603] usb 4-1: SerialNumber: syz [ 2069.107675][T30304] usb 3-1: config 0 descriptor?? [ 2069.112872][T14603] usb 4-1: config 0 descriptor?? [ 2069.159171][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2069.170255][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2069.307763][T19272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2069.316913][T19272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.325017][T19272] usb 1-1: Product: syz [ 2069.329544][T19272] usb 1-1: Manufacturer: syz [ 2069.334245][T19272] usb 1-1: SerialNumber: syz [ 2069.350393][T19272] usb 1-1: config 0 descriptor?? [ 2069.357944][T21699] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2069.367023][T21699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.382098][T21699] usb 2-1: Product: syz [ 2069.386303][T21699] usb 2-1: Manufacturer: syz [ 2069.393563][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 2069.400142][T21699] usb 2-1: SerialNumber: syz [ 2069.452403][T21699] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2069.597791][T30304] pwc: send_video_command error -71 [ 2069.603609][T30304] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2069.619539][T30304] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2069.633578][T30304] usb 3-1: USB disconnect, device number 49 [ 2069.837603][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2069.887583][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2069.938706][T14603] pwc: recv_control_msg error -32 req 04 val 1700 [ 2069.987889][T14603] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2070.010894][T14603] pwc: recv_control_msg error -71 req 04 val 1000 [ 2070.037795][T14603] pwc: recv_control_msg error -71 req 04 val 1300 [ 2070.058720][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2070.065445][T14603] pwc: recv_control_msg error -71 req 04 val 1400 10:41:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 2070.097424][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2070.107707][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2070.131360][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2070.147760][T21699] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2070.158050][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2070.164984][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2070.187614][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2070.197764][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2070.207862][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2070.231321][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2070.248427][T19272] pwc: recv_control_msg error -71 req 04 val 1000 [ 2070.267727][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2070.274335][T19272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2070.297539][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2070.304213][T19272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2070.328644][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2070.335312][T19272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2070.352899][T15272] usb 2-1: USB disconnect, device number 25 [ 2070.362273][T19272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2070.370021][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2070.387667][T30304] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2070.388273][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2070.402178][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2070.437566][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2070.444733][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2070.451663][T14603] pwc: Registered as video71. [ 2070.457165][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input168 [ 2070.471494][T14603] usb 4-1: USB disconnect, device number 99 [ 2070.487659][T19272] pwc: recv_control_msg error -71 req 04 val 1500 10:41:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0xe) [ 2070.513289][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2070.537618][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2070.555173][T16249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2070.567770][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2070.587519][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2070.616105][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2070.637720][T30304] usb 3-1: Using ep0 maxpacket: 32 [ 2070.647759][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2070.667949][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2070.677204][T19272] pwc: Registered as video71. [ 2070.683142][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input169 [ 2070.711992][T19272] usb 1-1: USB disconnect, device number 13 10:41:53 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0xf) 10:41:53 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect(0x3, 0x78, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x89, 0x2c, 0x84, 0x40, 0x7ab, 0xfccd, 0x5ddc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x9, 0xc6, 0x0, 0x7f, [{{0x9, 0x4, 0x60, 0x1, 0x1, 0xd6, 0x66, 0x7e, 0x32, [@hid_hid={0x9, 0x21, 0x0, 0x73, 0x1, {0x22, 0x4ec}}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x5, 0x7f, "09edb4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x4, 0x2, 0x1, "55adc1687a3aedd133"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x3, "b5417f303be784bb"}, @as_header={0x7, 0x24, 0x1, 0x2c, 0xa5}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}], [{{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x5, 0x2, 0xc0}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x40, 0x7, 0x6, 0x20, 0x48}, 0x3e, &(0x7f00000002c0)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "cedeba4d533b38c367920fbe99b03442"}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x7fff, 0xf000, 0x4, [0xc000]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x81, 0xc1, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6c, 0x1, 0x9}]}, 0x9, [{0xde, &(0x7f0000000300)=@string={0xde, 0x3, "4e01e44390cc9882b275f9b63aa46e846402a32f7630546d83141ab8d81c01a37eb40fc19169603c6566d1c88a87c1fa86fe941a30238c272c2d8af9698a895cbed1b6bf4c480aae12d0a60594b2d0dbc978d503f42a7e080166eb239e56d81d5613fdcf3d3b8f6c6a36a1b07f12314cf77e4545fbfe34a71ff74af0f1284742e6a14b5ad4d8ff4ce3770962fb6562050d1127061c2ee31f5c6ffd7d1421f090f51e903d3ce735c2677d1d187d88c00fd741b69c293353f6011603b2afa6626b21f31b85003bef983faa9bb24f1c3144ba65e0130924402b3cc64e69"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x302f}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "4a8cd91c961d79d707228deaac651fce955045c0954d8ce9d76aa0dee295a04ef4c22d81e22e2245441bf033a40cd88799d4d9052abecd3b493c62e286ac7ab32ff6704d1ea5cde9025b0b29a00af095048acdbfd071a2bc6213b246da388d260ed6a820b78f02741982f0cb446f17d04bd4eca1d96469ce48c18d17e4f49739b895fa14873fe36595e10b98bc5d78789fe6bf68c749ff9ac31c24d41c76feaec1474fc62aaa0f5d411d7b1efc95154ae259bdb2f196178e9e26233b9583cd42eb35d1532ad3a97b137a2762e65c430e63137a7a04bb431290b24a457402df681c3e20a0cff1b5099dea1d"}}, {0x69, &(0x7f0000000540)=@string={0x69, 0x3, "dd9d0b4e32c0c89b692ed969070fda06e994a9392ce39bf4e1ef9ececea4f6bcf79ff27333d5acf99361cc9eb2652869515430bc00a3a371c8ff3e080710c45bf2453a0e91d74134c852746ca5ff39db4d115050e43718c34d18c770881ebfe9813742c09d1dff"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf0395a26b57ea279}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x458}}, {0xc1, &(0x7f0000000680)=@string={0xc1, 0x3, "01a2dc28f31939ec4f11b5ea12382a70b3f37cd3ef0363d12dd2ece2627a6533e59715edc8578b7ee77b49cb66a9961f7d57ff773301ef8b53702bc84d168d5ea6d2bd7f77079b0e3459212de82310d0cc70dfc3b75cb2dc6f9f18f48a49c2926ea12456e9040e8fba4014b2b52ba77417a83a8da95975783863620adba23c6ebb44c5096898f579cf3e9980a64c19a809145f1704a4287d15df240b67abee8af89fd0247ad2e62162a60271fe081c568fb4cefeae3c1ca686ccae0f97147b"}}, {0x65, &(0x7f0000000780)=@string={0x65, 0x3, "6cd931f8f03be21c63b28d2539557fc0d3584332d2037dfa17bb8b5b85b295f6c094b253da740f2c86871078e7950a765b53d9de16f407c522ccc7211244d5206c8040bbde0feb951f50eafc3e50969f5574fb670e9555d1da46dc37483b8d50adf42d"}}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000880)=@ready={0x0, 0x0, 0x8, "bce6eae3", {0x1, 0x7ff, 0x8, 0x3f, 0x80}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) (async) syz_usb_connect(0x3, 0x78, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x89, 0x2c, 0x84, 0x40, 0x7ab, 0xfccd, 0x5ddc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x9, 0xc6, 0x0, 0x7f, [{{0x9, 0x4, 0x60, 0x1, 0x1, 0xd6, 0x66, 0x7e, 0x32, [@hid_hid={0x9, 0x21, 0x0, 0x73, 0x1, {0x22, 0x4ec}}, @uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x5, 0x7f, "09edb4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x4, 0x2, 0x1, "55adc1687a3aedd133"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x3, "b5417f303be784bb"}, @as_header={0x7, 0x24, 0x1, 0x2c, 0xa5}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}], [{{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x5, 0x2, 0xc0}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x40, 0x7, 0x6, 0x20, 0x48}, 0x3e, &(0x7f00000002c0)={0x5, 0xf, 0x3e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "cedeba4d533b38c367920fbe99b03442"}, @ssp_cap={0x10, 0x10, 0xa, 0x1f, 0x1, 0x7fff, 0xf000, 0x4, [0xc000]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x81, 0xc1, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x6c, 0x1, 0x9}]}, 0x9, [{0xde, &(0x7f0000000300)=@string={0xde, 0x3, "4e01e44390cc9882b275f9b63aa46e846402a32f7630546d83141ab8d81c01a37eb40fc19169603c6566d1c88a87c1fa86fe941a30238c272c2d8af9698a895cbed1b6bf4c480aae12d0a60594b2d0dbc978d503f42a7e080166eb239e56d81d5613fdcf3d3b8f6c6a36a1b07f12314cf77e4545fbfe34a71ff74af0f1284742e6a14b5ad4d8ff4ce3770962fb6562050d1127061c2ee31f5c6ffd7d1421f090f51e903d3ce735c2677d1d187d88c00fd741b69c293353f6011603b2afa6626b21f31b85003bef983faa9bb24f1c3144ba65e0130924402b3cc64e69"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x302f}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "4a8cd91c961d79d707228deaac651fce955045c0954d8ce9d76aa0dee295a04ef4c22d81e22e2245441bf033a40cd88799d4d9052abecd3b493c62e286ac7ab32ff6704d1ea5cde9025b0b29a00af095048acdbfd071a2bc6213b246da388d260ed6a820b78f02741982f0cb446f17d04bd4eca1d96469ce48c18d17e4f49739b895fa14873fe36595e10b98bc5d78789fe6bf68c749ff9ac31c24d41c76feaec1474fc62aaa0f5d411d7b1efc95154ae259bdb2f196178e9e26233b9583cd42eb35d1532ad3a97b137a2762e65c430e63137a7a04bb431290b24a457402df681c3e20a0cff1b5099dea1d"}}, {0x69, &(0x7f0000000540)=@string={0x69, 0x3, "dd9d0b4e32c0c89b692ed969070fda06e994a9392ce39bf4e1ef9ececea4f6bcf79ff27333d5acf99361cc9eb2652869515430bc00a3a371c8ff3e080710c45bf2453a0e91d74134c852746ca5ff39db4d115050e43718c34d18c770881ebfe9813742c09d1dff"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf0395a26b57ea279}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x458}}, {0xc1, &(0x7f0000000680)=@string={0xc1, 0x3, "01a2dc28f31939ec4f11b5ea12382a70b3f37cd3ef0363d12dd2ece2627a6533e59715edc8578b7ee77b49cb66a9961f7d57ff773301ef8b53702bc84d168d5ea6d2bd7f77079b0e3459212de82310d0cc70dfc3b75cb2dc6f9f18f48a49c2926ea12456e9040e8fba4014b2b52ba77417a83a8da95975783863620adba23c6ebb44c5096898f579cf3e9980a64c19a809145f1704a4287d15df240b67abee8af89fd0247ad2e62162a60271fe081c568fb4cefeae3c1ca686ccae0f97147b"}}, {0x65, &(0x7f0000000780)=@string={0x65, 0x3, "6cd931f8f03be21c63b28d2539557fc0d3584332d2037dfa17bb8b5b85b295f6c094b253da740f2c86871078e7950a765b53d9de16f407c522ccc7211244d5206c8040bbde0feb951f50eafc3e50969f5574fb670e9555d1da46dc37483b8d50adf42d"}}]}) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000a40)=ANY=[@ANYBLOB="120140005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xe9, &(0x7f0000000000)=ANY=[]) (async) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000880)=@ready={0x0, 0x0, 0x8, "bce6eae3", {0x1, 0x7ff, 0x8, 0x3f, 0x80}}) (async) 10:41:53 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x10) 10:41:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x48) [ 2070.927944][T30304] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2070.931153][T16262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2070.937027][T30304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.937062][T30304] usb 3-1: Product: syz [ 2070.937083][T30304] usb 3-1: Manufacturer: syz [ 2070.973765][T30304] usb 3-1: SerialNumber: syz 10:41:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x4c) [ 2070.986093][T30304] usb 3-1: config 0 descriptor?? [ 2070.988595][T14603] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2071.004574][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2071.029759][T30304] pwc: Samsung MPC-C10 USB webcam detected. 10:41:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x60) [ 2071.051395][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x68) [ 2071.102308][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2071.140771][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2071.207728][T21699] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2071.215441][T21699] ath9k_htc: Failed to initialize the device [ 2071.222560][T15272] usb 2-1: ath9k_htc: USB layer deinitialized [ 2071.267523][T14603] usb 4-1: Using ep0 maxpacket: 32 [ 2071.292811][T19272] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2071.557576][T19272] usb 1-1: Using ep0 maxpacket: 32 [ 2071.608267][T14603] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2071.617474][T15272] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2071.625313][T14603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.633764][T14603] usb 4-1: Product: syz [ 2071.638444][T14603] usb 4-1: Manufacturer: syz [ 2071.643065][T14603] usb 4-1: SerialNumber: syz [ 2071.654466][T14603] usb 4-1: config 0 descriptor?? [ 2071.700278][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2071.707546][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2071.747526][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2071.788093][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2071.827531][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2071.868132][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2071.882573][T19272] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2071.891770][T19272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.900131][T19272] usb 1-1: Product: syz [ 2071.907766][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2071.907783][T19272] usb 1-1: Manufacturer: syz [ 2071.919661][T19272] usb 1-1: SerialNumber: syz [ 2071.928407][T19272] usb 1-1: config 0 descriptor?? [ 2071.948391][T30304] pwc: recv_control_msg error -32 req 04 val 1400 [ 2071.969926][T19272] pwc: Samsung MPC-C10 USB webcam detected. [ 2071.987777][T30304] pwc: recv_control_msg error -32 req 02 val 2000 [ 2072.027528][T30304] pwc: recv_control_msg error -32 req 02 val 2100 [ 2072.067533][T30304] pwc: recv_control_msg error -32 req 02 val 2200 [ 2072.108368][T30304] pwc: recv_control_msg error -32 req 06 val 0600 [ 2072.147751][T30304] pwc: recv_control_msg error -32 req 04 val 1500 [ 2072.187525][T30304] pwc: recv_control_msg error -32 req 02 val 2500 [ 2072.217624][T15272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2072.226708][T15272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.235025][T15272] usb 2-1: Product: syz [ 2072.239697][T15272] usb 2-1: Manufacturer: syz [ 2072.244308][T15272] usb 2-1: SerialNumber: syz [ 2072.245663][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2072.279019][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2072.297741][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2072.298313][T15272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2072.317708][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2072.337537][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2072.357730][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2072.357928][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2072.372207][T30304] pwc: Registered as video71. [ 2072.379480][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input170 [ 2072.408002][T30304] usb 3-1: USB disconnect, device number 50 [ 2072.409056][T14603] pwc: recv_control_msg error -32 req 02 val 2700 [ 2072.491995][T14603] pwc: recv_control_msg error -71 req 04 val 1700 [ 2072.517499][T14603] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2072.538856][T14603] pwc: recv_control_msg error -71 req 04 val 1000 [ 2072.558342][T14603] pwc: recv_control_msg error -71 req 04 val 1300 [ 2072.577813][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2072.607709][T19272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2072.614438][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2072.637763][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2072.657541][T19272] pwc: recv_control_msg error -32 req 02 val 2700 [ 2072.664170][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2072.697675][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2072.717651][T19272] pwc: recv_control_msg error -32 req 04 val 1700 [ 2072.724710][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2072.747544][T14603] pwc: recv_control_msg error -71 req 02 val 2500 10:41:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 2072.767557][T19272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2072.774132][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2072.802920][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2072.818075][T19272] pwc: recv_control_msg error -71 req 04 val 1000 [ 2072.841447][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2072.848126][T19272] pwc: recv_control_msg error -71 req 04 val 1300 [ 2072.867560][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2072.874187][T19272] pwc: recv_control_msg error -71 req 04 val 1400 [ 2072.887640][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2072.898324][T19272] pwc: recv_control_msg error -71 req 02 val 2000 [ 2072.907814][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2072.915357][T14603] pwc: Registered as video71. [ 2072.920516][T19272] pwc: recv_control_msg error -71 req 02 val 2100 [ 2072.929473][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input171 [ 2072.939492][T19272] pwc: recv_control_msg error -71 req 02 val 2200 [ 2072.946109][T15272] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2072.965279][T14603] usb 4-1: USB disconnect, device number 100 [ 2072.971520][T19272] pwc: recv_control_msg error -71 req 06 val 0600 [ 2073.007561][T19272] pwc: recv_control_msg error -71 req 04 val 1500 10:41:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x6c) 10:41:55 executing program 4: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2073.027558][T19272] pwc: recv_control_msg error -71 req 02 val 2500 [ 2073.057861][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2073.071351][T19272] pwc: recv_control_msg error -71 req 02 val 2400 [ 2073.077548][T30304] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2073.097592][T19272] pwc: recv_control_msg error -71 req 02 val 2600 [ 2073.127962][T19272] pwc: recv_control_msg error -71 req 02 val 2900 [ 2073.147835][T19272] pwc: recv_control_msg error -71 req 02 val 2800 [ 2073.167595][T19272] pwc: recv_control_msg error -71 req 04 val 1100 [ 2073.188812][T19272] pwc: recv_control_msg error -71 req 04 val 1200 [ 2073.201539][T19272] pwc: Registered as video71. [ 2073.207312][T19272] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input172 [ 2073.241162][T19272] usb 1-1: USB disconnect, device number 14 [ 2073.327759][T30304] usb 3-1: Using ep0 maxpacket: 32 [ 2073.371563][T15272] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2073.377270][T15272] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2073.537662][T14603] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2073.572030][T16260] UDC core: couldn't find an available UDC or it's busy: -16 [ 2073.579517][T16260] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2073.588898][T16260] UDC core: couldn't find an available UDC or it's busy: -16 [ 2073.596303][T16260] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2073.607808][T30304] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2073.611587][T16260] UDC core: couldn't find an available UDC or it's busy: -16 [ 2073.616882][T30304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.616915][T30304] usb 3-1: Product: syz [ 2073.616936][T30304] usb 3-1: Manufacturer: syz [ 2073.616957][T30304] usb 3-1: SerialNumber: syz [ 2073.619155][T16285] UDC core: couldn't find an available UDC or it's busy: -16 [ 2073.630028][T16286] UDC core: couldn't find an available UDC or it's busy: -16 [ 2073.640039][T30304] usb 3-1: config 0 descriptor?? [ 2073.648271][T16260] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2073.662001][T16285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2073.667227][T16286] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:41:55 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x8c, &(0x7f0000000180)={[{0x85, 0x4e00, "2d81f7c855ae1af21f0da257e98c612761c745f48e71ce915f31f50c3df3c188b8586c0e95cd349e792957668a7bb5ef81f5ea299671afff2ba91fa80f16e44647bb26be7af272012954003376d1d0a3ca2f05865dfe244abbf37d00866e2d5132fa6d402de7a676ecf6842dad6fae4f806b1c8ca6f7daa24de11806152594d55ce9f9acb8"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x80, &(0x7f0000000240)=@generic={0x6, 0x0, 0x78, "025ae4c2", "f96e93c0ddc769795822b9ecf19e5eabaf7fa35e1cf8e7c7a7ddc91f7c002124a4a43c305892265ac19be6497c3595dfb7407accea1d4bde147f67c8ca42bb88d64c1fabc97c894e1194aa5a90288d6764482aa172b436cdf5e79a6a3e19f4057c467d3bbe5f10adc35969ea8e60fb22df25abbace348afd"}) 10:41:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x74) 10:41:55 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:55 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x0, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2073.702480][T19272] usb 2-1: USB disconnect, device number 26 [ 2073.709784][T30304] pwc: Samsung MPC-C10 USB webcam detected. [ 2073.719354][T15272] ath9k_htc: Failed to initialize the device 10:41:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x7a) [ 2073.743594][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2073.762877][T19272] usb 2-1: ath9k_htc: USB layer deinitialized 10:41:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0xf0) [ 2073.817578][T14603] usb 4-1: Using ep0 maxpacket: 32 [ 2073.819473][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x300) 10:41:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x500) [ 2073.868312][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2074.007474][T30301] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2074.077621][T21699] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2074.147569][T14603] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2074.157423][T19272] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2074.166035][T14603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.174677][T14603] usb 4-1: Product: syz [ 2074.179276][T14603] usb 4-1: Manufacturer: syz [ 2074.183941][T14603] usb 4-1: SerialNumber: syz [ 2074.198147][T14603] usb 4-1: config 0 descriptor?? [ 2074.242381][T14603] pwc: Samsung MPC-C10 USB webcam detected. [ 2074.247659][T30301] usb 1-1: Using ep0 maxpacket: 32 [ 2074.277522][T21699] usb 5-1: device descriptor read/64, error 18 [ 2074.387630][T30304] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2074.427648][T30304] pwc: recv_control_msg error -32 req 02 val 2700 [ 2074.467726][T30304] pwc: recv_control_msg error -32 req 04 val 1700 [ 2074.507502][T30304] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2074.527940][T30301] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2074.537019][T30301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.550621][T30304] pwc: recv_control_msg error -32 req 04 val 1000 [ 2074.557246][T30301] usb 1-1: Product: syz [ 2074.563324][T30301] usb 1-1: Manufacturer: syz [ 2074.574242][T30301] usb 1-1: SerialNumber: syz [ 2074.577473][T21699] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2074.583758][T30301] usb 1-1: config 0 descriptor?? [ 2074.594936][T30304] pwc: recv_control_msg error -32 req 04 val 1300 [ 2074.639686][T30301] pwc: Samsung MPC-C10 USB webcam detected. [ 2074.645723][T30304] pwc: recv_control_msg error -32 req 04 val 1400 [ 2074.687582][T30304] pwc: recv_control_msg error -32 req 02 val 2000 [ 2074.718002][T19272] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2074.727091][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.727596][T30304] pwc: recv_control_msg error -32 req 02 val 2100 [ 2074.736030][T19272] usb 2-1: Product: syz [ 2074.746220][T19272] usb 2-1: Manufacturer: syz [ 2074.751644][T19272] usb 2-1: SerialNumber: syz [ 2074.787574][T30304] pwc: recv_control_msg error -32 req 02 val 2200 [ 2074.797470][T21699] usb 5-1: device descriptor read/64, error 18 [ 2074.809783][T19272] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2074.827629][T30304] pwc: recv_control_msg error -32 req 06 val 0600 [ 2074.867587][T30304] pwc: recv_control_msg error -32 req 04 val 1500 [ 2074.897703][T14603] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2074.907527][T30304] pwc: recv_control_msg error -32 req 02 val 2500 [ 2074.917859][T21699] usb usb5-port1: attempt power cycle [ 2074.937905][T14603] pwc: recv_control_msg error -71 req 02 val 2700 [ 2074.947710][T30304] pwc: recv_control_msg error -71 req 02 val 2400 [ 2074.967906][T30304] pwc: recv_control_msg error -71 req 02 val 2600 [ 2074.968270][T14603] pwc: recv_control_msg error -71 req 04 val 1700 [ 2074.987553][T30304] pwc: recv_control_msg error -71 req 02 val 2900 [ 2074.998856][T14603] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2075.007596][T30304] pwc: recv_control_msg error -71 req 02 val 2800 [ 2075.027568][T30304] pwc: recv_control_msg error -71 req 04 val 1100 [ 2075.027804][T14603] pwc: recv_control_msg error -71 req 04 val 1000 [ 2075.047479][T30304] pwc: recv_control_msg error -71 req 04 val 1200 [ 2075.055072][T30304] pwc: Registered as video71. [ 2075.066166][T30304] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input173 [ 2075.067501][T14603] pwc: recv_control_msg error -71 req 04 val 1300 [ 2075.105433][T30304] usb 3-1: USB disconnect, device number 51 [ 2075.107865][T14603] pwc: recv_control_msg error -71 req 04 val 1400 [ 2075.147757][T14603] pwc: recv_control_msg error -71 req 02 val 2000 [ 2075.177540][T14603] pwc: recv_control_msg error -71 req 02 val 2100 [ 2075.217852][T14603] pwc: recv_control_msg error -71 req 02 val 2200 [ 2075.237658][T14603] pwc: recv_control_msg error -71 req 06 val 0600 [ 2075.260026][T14603] pwc: recv_control_msg error -71 req 04 val 1500 [ 2075.277647][T14603] pwc: recv_control_msg error -71 req 02 val 2500 [ 2075.297577][T14603] pwc: recv_control_msg error -71 req 02 val 2400 [ 2075.297594][T30301] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2075.327547][T14603] pwc: recv_control_msg error -71 req 02 val 2600 [ 2075.337806][T21699] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2075.337836][T30301] pwc: recv_control_msg error -32 req 02 val 2700 [ 2075.359201][T14603] pwc: recv_control_msg error -71 req 02 val 2900 [ 2075.387489][T14603] pwc: recv_control_msg error -71 req 02 val 2800 [ 2075.387566][T30301] pwc: recv_control_msg error -32 req 04 val 1700 [ 2075.407886][T14603] pwc: recv_control_msg error -71 req 04 val 1100 [ 2075.428512][T14603] pwc: recv_control_msg error -71 req 04 val 1200 [ 2075.437760][T30301] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2075.444830][T14603] pwc: Registered as video71. [ 2075.450290][T21699] usb 5-1: Invalid ep0 maxpacket: 0 [ 2075.457842][T30301] pwc: recv_control_msg error -71 req 04 val 1000 [ 2075.460998][T14603] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input174 10:41:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10:41:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x600) 10:41:57 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x70, 0x0, 0x20, 0x55d, 0x9000, 0xf15f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x4f, 0x4}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2075.497826][T30301] pwc: recv_control_msg error -71 req 04 val 1300 [ 2075.497836][T21590] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:41:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32, @ANYBLOB="00010800f7ffffff"], 0x30}}, 0x700) [ 2075.551668][T14603] usb 4-1: USB disconnect, device number 101 [ 2075.567678][T30301] pwc: recv_control_msg error -71 req 04 val 1400 [ 2075.598345][T21699] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2075.601814][T30301] pwc: recv_control_msg error -71 req 02 val 2000 [ 2075.638163][T30301] pwc: recv_control_msg error -71 req 02 val 2100 [ 2075.645929][T16315] __nla_validate_parse: 3 callbacks suppressed [ 2075.645948][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2075.663132][T30301] pwc: recv_control_msg error -71 req 02 val 2200 [ 2075.687519][T30301] pwc: recv_control_msg error -71 req 06 val 0600 [ 2075.697612][T21699] usb 5-1: Invalid ep0 maxpacket: 0 [ 2075.703579][T21699] usb usb5-port1: unable to enumerate USB device [ 2075.717671][T30301] pwc: recv_control_msg error -71 req 04 val 1500 [ 2075.737595][T30301] pwc: recv_control_msg error -71 req 02 val 2500 [ 2075.757640][T30301] pwc: recv_control_msg error -71 req 02 val 2400 [ 2075.777502][T30301] pwc: recv_control_msg error -71 req 02 val 2600 [ 2075.797486][T30301] pwc: recv_control_msg error -71 req 02 val 2900 [ 2075.817829][T30301] pwc: recv_control_msg error -71 req 02 val 2800 [ 2075.837572][T30301] pwc: recv_control_msg error -71 req 04 val 1100 [ 2075.857627][T30301] pwc: recv_control_msg error -71 req 04 val 1200 [ 2075.864870][T30301] pwc: Registered as video71. [ 2075.875391][T30301] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input175 [ 2075.887680][T12111] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2075.915223][T30301] usb 1-1: USB disconnect, device number 15 [ 2075.931927][T21590] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 2075.937995][T21590] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2075.967858][T14603] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2076.137548][ C1] INFO: trying to register non-static key. [ 2076.143384][ C1] The code is fine but needs lockdep annotation, or maybe [ 2076.150471][ C1] you didn't initialize this object before use? [ 2076.156687][ C1] turning off the locking correctness validator. [ 2076.157484][T12111] usb 3-1: Using ep0 maxpacket: 32 [ 2076.162997][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.16.0-rc6-syzkaller #0 [ 2076.163032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2076.186121][ C1] Call Trace: [ 2076.189394][ C1] [ 2076.192247][ C1] dump_stack_lvl+0xcd/0x134 [ 2076.196939][ C1] register_lock_class+0xf79/0x10c0 [ 2076.202153][ C1] ? mark_lock+0xef/0x17b0 [ 2076.206593][ C1] ? mark_lock+0xef/0x17b0 [ 2076.211006][ C1] ? mark_lock+0xef/0x17b0 [ 2076.215422][ C1] ? is_dynamic_key+0x1a0/0x1a0 [ 2076.220264][ C1] ? lock_chain_count+0x20/0x20 [ 2076.225103][ C1] ? lock_chain_count+0x20/0x20 [ 2076.229945][ C1] ? lock_chain_count+0x20/0x20 [ 2076.234791][ C1] __lock_acquire+0x105/0x54a0 [ 2076.239669][ C1] ? __lock_acquire+0x162f/0x54a0 [ 2076.244727][ C1] ? lock_chain_count+0x20/0x20 [ 2076.249578][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2076.255559][ C1] lock_acquire+0x1ab/0x510 [ 2076.260051][ C1] ? ath9k_htc_rxep+0x31/0x210 [ 2076.264889][ C1] ? lock_release+0x720/0x720 [ 2076.269571][ C1] ? find_held_lock+0x2d/0x110 [ 2076.274365][ C1] _raw_spin_lock_irqsave+0x39/0x50 [ 2076.279559][ C1] ? ath9k_htc_rxep+0x31/0x210 [ 2076.284317][ C1] ath9k_htc_rxep+0x31/0x210 [ 2076.288908][ C1] ? ath9k_rx_tasklet+0x680/0x680 [ 2076.293958][ C1] ath9k_htc_rx_msg+0x2e4/0xb70 [ 2076.298876][ C1] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2076.304595][ C1] ath9k_hif_usb_reg_in_cb+0x1ac/0x630 [ 2076.310077][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 2076.315522][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 2076.320709][ C1] dummy_timer+0x11f9/0x32b0 [ 2076.325331][ C1] ? dummy_dequeue+0x500/0x500 [ 2076.330084][ C1] ? dummy_dequeue+0x500/0x500 [ 2076.334840][ C1] call_timer_fn+0x1a5/0x6b0 [ 2076.339425][ C1] ? add_timer_on+0x4a0/0x4a0 [ 2076.340934][T30301] usb 2-1: USB disconnect, device number 27 [ 2076.344120][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 2076.354833][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2076.360031][ C1] ? dummy_dequeue+0x500/0x500 [ 2076.364782][ C1] __run_timers.part.0+0x675/0xa20 [ 2076.369893][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 2076.374671][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 2076.379916][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 2076.384789][ C1] run_timer_softirq+0xb3/0x1d0 [ 2076.389684][ C1] __do_softirq+0x29b/0x9c2 [ 2076.394220][ C1] __irq_exit_rcu+0x123/0x180 [ 2076.398891][ C1] irq_exit_rcu+0x5/0x20 [ 2076.403239][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 2076.408872][ C1] [ 2076.411832][ C1] [ 2076.414747][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2076.420718][ C1] RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 [ 2076.426579][ C1] Code: 89 de e8 6d 5e 30 f8 84 db 75 ac e8 84 5a 30 f8 e8 cf 9e 36 f8 eb 0c e8 78 5a 30 f8 0f 00 2d d1 c4 c9 00 e8 6c 5a 30 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 e7 5c 30 f8 48 85 db [ 2076.446178][ C1] RSP: 0018:ffffc90000d57d18 EFLAGS: 00000293 [ 2076.447667][T12111] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=f1.5f [ 2076.452239][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2076.452260][ C1] RDX: ffff888011915700 RSI: ffffffff89474854 RDI: 0000000000000000 [ 2076.463302][T12111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.469228][ C1] RBP: ffff888011a74864 R08: 0000000000000001 R09: 0000000000000001 [ 2076.469248][ C1] R10: ffffffff817de748 R11: 0000000000000000 R12: 0000000000000001 [ 2076.469263][ C1] R13: ffff888011a74800 R14: ffff888011a74864 R15: ffff888145ef5804 [ 2076.469287][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 2076.480910][T12111] usb 3-1: Product: syz [ 2076.485199][ C1] ? acpi_idle_do_entry+0x1c4/0x250 [ 2076.493468][T12111] usb 3-1: Manufacturer: syz [ 2076.501123][ C1] ? acpi_idle_do_entry+0x1c4/0x250 [ 2076.501157][ C1] acpi_idle_enter+0x361/0x500 [ 2076.501256][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 2076.512212][T12111] usb 3-1: SerialNumber: syz [ 2076.514231][ C1] cpuidle_enter+0x4a/0xa0 [ 2076.526479][T12111] usb 3-1: config 0 descriptor?? [ 2076.528153][ C1] do_idle+0x3e8/0x590 [ 2076.528189][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 2076.528222][ C1] cpu_startup_entry+0x14/0x20 [ 2076.528253][ C1] start_secondary+0x265/0x340 [ 2076.528286][ C1] ? set_cpu_sibling_map+0x1e90/0x1e90 [ 2076.573069][T12111] pwc: Samsung MPC-C10 USB webcam detected. [ 2076.575699][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 2076.592879][ C1] [ 2076.595898][ C1] BUG: unable to handle page fault for address: ffffffffffffffc8 [ 2076.603593][ C1] #PF: supervisor read access in kernel mode [ 2076.609550][ C1] #PF: error_code(0x0000) - not-present page [ 2076.615514][ C1] PGD b88f067 P4D b88f067 PUD b891067 PMD 0 [ 2076.621491][ C1] Oops: 0000 [#1] PREEMPT SMP KASAN [ 2076.626676][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.16.0-rc6-syzkaller #0 [ 2076.634641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2076.644686][ C1] RIP: 0010:ath9k_htc_rxep+0xb5/0x210 [ 2076.650064][ C1] Code: 8b 43 38 48 8d 58 c8 49 39 c4 0f 84 ee 00 00 00 e8 10 07 5f fc 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 74 06 0f 8e 0a 01 00 00 <44> 0f b6 3b 31 ff 44 89 fe e8 cd 0a 5f fc 45 84 ff 75 a8 e8 e3 06 [ 2076.669674][ C1] RSP: 0018:ffffc90000dc09b8 EFLAGS: 00010046 [ 2076.675752][ C1] RAX: 0000000000000000 RBX: ffffffffffffffc8 RCX: ffffc90001d02000 [ 2076.683709][ C1] RDX: 0000000000040000 RSI: ffffffff85189bb0 RDI: ffffc90000dc0928 [ 2076.691669][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000003 [ 2076.699626][ C1] R10: fffff520001b8125 R11: 0000000000000000 R12: ffff888033e3b718 [ 2076.707593][ C1] R13: ffff888033e3b2e0 R14: ffff888033e3b728 R15: ffff88803201a5a8 [ 2076.715583][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 2076.724513][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2076.731092][ C1] CR2: ffffffffffffffc8 CR3: 000000007c9af000 CR4: 00000000003506e0 [ 2076.739060][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2076.747055][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2076.755052][ C1] Call Trace: [ 2076.758337][ C1] [ 2076.761170][ C1] ? ath9k_rx_tasklet+0x680/0x680 [ 2076.766190][ C1] ath9k_htc_rx_msg+0x2e4/0xb70 [ 2076.771035][ C1] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2076.776779][ C1] ath9k_hif_usb_reg_in_cb+0x1ac/0x630 [ 2076.782265][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 2076.787641][ C1] usb_hcd_giveback_urb+0x367/0x410 [ 2076.792869][ C1] dummy_timer+0x11f9/0x32b0 [ 2076.797461][ C1] ? dummy_dequeue+0x500/0x500 [ 2076.802251][ C1] ? dummy_dequeue+0x500/0x500 [ 2076.807002][ C1] call_timer_fn+0x1a5/0x6b0 [ 2076.811581][ C1] ? add_timer_on+0x4a0/0x4a0 [ 2076.816250][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 2076.821107][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2076.826296][ C1] ? dummy_dequeue+0x500/0x500 [ 2076.831048][ C1] __run_timers.part.0+0x675/0xa20 [ 2076.836150][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 2076.840909][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 2076.846141][ C1] ? sched_clock_cpu+0x15/0x1f0 [ 2076.850983][ C1] run_timer_softirq+0xb3/0x1d0 [ 2076.855822][ C1] __do_softirq+0x29b/0x9c2 [ 2076.860318][ C1] __irq_exit_rcu+0x123/0x180 [ 2076.864986][ C1] irq_exit_rcu+0x5/0x20 [ 2076.869220][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 2076.874875][ C1] [ 2076.877797][ C1] [ 2076.880734][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2076.886708][ C1] RIP: 0010:acpi_idle_do_entry+0x1c6/0x250 [ 2076.892504][ C1] Code: 89 de e8 6d 5e 30 f8 84 db 75 ac e8 84 5a 30 f8 e8 cf 9e 36 f8 eb 0c e8 78 5a 30 f8 0f 00 2d d1 c4 c9 00 e8 6c 5a 30 f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 e7 5c 30 f8 48 85 db [ 2076.912103][ C1] RSP: 0018:ffffc90000d57d18 EFLAGS: 00000293 [ 2076.918157][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2076.926116][ C1] RDX: ffff888011915700 RSI: ffffffff89474854 RDI: 0000000000000000 [ 2076.934080][ C1] RBP: ffff888011a74864 R08: 0000000000000001 R09: 0000000000000001 [ 2076.942038][ C1] R10: ffffffff817de748 R11: 0000000000000000 R12: 0000000000000001 [ 2076.949994][ C1] R13: ffff888011a74800 R14: ffff888011a74864 R15: ffff888145ef5804 [ 2076.957961][ C1] ? trace_hardirqs_on+0x38/0x1c0 [ 2076.963012][ C1] ? acpi_idle_do_entry+0x1c4/0x250 [ 2076.968205][ C1] ? acpi_idle_do_entry+0x1c4/0x250 [ 2076.973424][ C1] acpi_idle_enter+0x361/0x500 [ 2076.978182][ C1] cpuidle_enter_state+0x1b1/0xc80 [ 2076.983285][ C1] cpuidle_enter+0x4a/0xa0 [ 2076.987694][ C1] do_idle+0x3e8/0x590 [ 2076.991779][ C1] ? arch_cpu_idle_exit+0x30/0x30 [ 2076.996795][ C1] cpu_startup_entry+0x14/0x20 [ 2077.001549][ C1] start_secondary+0x265/0x340 [ 2077.006304][ C1] ? set_cpu_sibling_map+0x1e90/0x1e90 [ 2077.011752][ C1] secondary_startup_64_no_verify+0xb0/0xbb [ 2077.017648][ C1] [ 2077.020670][ C1] Modules linked in: [ 2077.024545][ C1] CR2: ffffffffffffffc8 [ 2077.028687][ C1] ---[ end trace 572071921da133df ]--- [ 2077.034243][ C1] RIP: 0010:ath9k_htc_rxep+0xb5/0x210 [ 2077.039608][ C1] Code: 8b 43 38 48 8d 58 c8 49 39 c4 0f 84 ee 00 00 00 e8 10 07 5f fc 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 74 06 0f 8e 0a 01 00 00 <44> 0f b6 3b 31 ff 44 89 fe e8 cd 0a 5f fc 45 84 ff 75 a8 e8 e3 06 [ 2077.059202][ C1] RSP: 0018:ffffc90000dc09b8 EFLAGS: 00010046 [ 2077.065255][ C1] RAX: 0000000000000000 RBX: ffffffffffffffc8 RCX: ffffc90001d02000 [ 2077.073318][ C1] RDX: 0000000000040000 RSI: ffffffff85189bb0 RDI: ffffc90000dc0928 [ 2077.081281][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000003 [ 2077.089249][ C1] R10: fffff520001b8125 R11: 0000000000000000 R12: ffff888033e3b718 [ 2077.097237][ C1] R13: ffff888033e3b2e0 R14: ffff888033e3b728 R15: ffff88803201a5a8 [ 2077.105200][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 2077.114122][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2077.120693][ C1] CR2: ffffffffffffffc8 CR3: 000000007c9af000 CR4: 00000000003506e0 [ 2077.128663][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2077.136652][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2077.144614][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 2077.152071][ C1] Kernel Offset: disabled [ 2077.156382][ C1] Rebooting in 86400 seconds..