0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1285.868488][ T7] usb 4-1: USB disconnect, device number 9 [ 1285.928079][ T7003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.939068][ T7003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.948944][ T7003] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1285.961950][ T7003] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1285.971198][ T7003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.988373][ T7003] usb 5-1: config 0 descriptor?? [ 1286.057480][T29987] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1286.307666][T29987] usb 6-1: Using ep0 maxpacket: 8 [ 1286.367584][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1286.374653][ T32] ath9k_htc: Failed to initialize the device [ 1286.382192][ T7235] usb 1-1: ath9k_htc: USB layer deinitialized [ 1286.427555][T29987] usb 6-1: config 5 has an invalid interface number: 36 but max is 1 [ 1286.435683][T29987] usb 6-1: config 5 has an invalid descriptor of length 149, skipping remainder of the config [ 1286.446154][T29987] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 1286.455099][T29987] usb 6-1: config 5 has no interface number 0 [ 1286.457171][T17352] udc-core: couldn't find an available UDC or it's busy [ 1286.468457][T17352] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1286.499314][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.506126][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.513044][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.519960][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.526744][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.533965][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.540931][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.548123][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.554913][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.561786][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.568632][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.575415][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.582283][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.589133][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.595925][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.602773][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.609611][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.616425][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.617662][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1286.623257][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.632348][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.639180][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.647128][ T5] usb 2-1: Product: syz [ 1286.653918][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.658070][ T5] usb 2-1: Manufacturer: syz [ 1286.664846][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.669442][ T5] usb 2-1: SerialNumber: syz [ 1286.676169][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.687650][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.694434][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.701284][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.708126][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.714912][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.721754][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.728411][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1286.728590][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.743430][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.750278][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.757067][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.763923][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.770782][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.777506][ T2608] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1286.777617][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.787073][ T2608] ath9k_htc: Failed to initialize the device [ 1286.791205][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.791239][ T7003] isku 0003:1E7D:3264.0027: unknown main item tag 0x0 [ 1286.811407][ T7003] isku 0003:1E7D:3264.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.4-1/input0 [ 1286.827629][ T7439] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1286.827889][ T7235] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1286.836717][ T7439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.851530][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 1286.852524][ T7439] usb 3-1: Product: syz [ 1286.862784][ T7439] usb 3-1: Manufacturer: syz [ 1286.867431][ T7439] usb 3-1: SerialNumber: syz 10:24:18 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000001200), 0x2, 0x80100) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000001400)={0x3, 0xffffffff, 0x6cb1c64f, 0x5, 0x1, 0x4}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000140)={0x2, 0xffffffff, 0x9}) r1 = syz_open_dev$hiddev(&(0x7f0000001200), 0x2, 0x80100) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000001400)={0x3, 0xffffffff, 0x6cb1c64f, 0x5, 0x1, 0x4}) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000300)={0x3, 0x2, 0xaef, 0xff, 0x20, 0x7, 0x6, 0xfffffffc, 0x8, 0x800, 0xfff, 0x100, 0x101, 0x359}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffbff, 0x400002) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x2, 0x1c, 0xde, 0x5, "c347161449d801a9f938cbe9ca4666f17474244ed887f99a10efc0c77e63f31d"}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000040)={0x1, 0xd0, &(0x7f0000000200)="8bbca4cbd3b0f0bd75abe1d0b8bf568285b362ac2b313abcf29106680ca13b771dc40e60a32f235bd8d3d525082c4d07a6a4815b1796c9621753812711316b54679307869a8b63674df4c1d2c1ede4e2ef5225f0a9e32c0afeb21ec3928c2b071f7e75d567a46fe11619803344a9712dd8461b0bf40e9c21a1cf552d247ddf4d05533205e2bcbd68d6ef3fad0e4b03f53b2e24f60e19a536f854d675e190f6d160d885775423f8b322f16ab156cc648ad8f5d8681cec5931ef73eac19e43b1d4d0a4439a34da558dcd56ced22e5e6047"}) [ 1286.928827][ T7439] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1286.947919][T29987] usb 6-1: New USB device found, idVendor=19d2, idProduct=0396, bcdDevice=da.34 [ 1286.957061][T29987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.965143][T29987] usb 6-1: Product: syz [ 1286.969366][T29987] usb 6-1: Manufacturer: syz [ 1286.973987][T29987] usb 6-1: SerialNumber: syz [ 1287.139014][T29681] usb 5-1: USB disconnect, device number 64 10:24:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5ebfb638105e100002a00004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff200000100004ecc0100000000004ef90000000100004eca0000000100004e000000040100004ef10000000100004e2f0000000100004e92000000"]) [ 1287.234998][ T2105] usb 2-1: USB disconnect, device number 64 [ 1287.257586][ T5] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1287.266582][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1287.274987][ T2105] usb 2-1: ath9k_htc: USB layer deinitialized [ 1287.299315][T29987] option 6-1:5.36: GSM modem (1-port) converter detected [ 1287.335651][T29987] usb 6-1: USB disconnect, device number 36 [ 1287.348415][ T7235] usb 1-1: device descriptor read/64, error -71 [ 1287.356793][T29987] option 6-1:5.36: device disconnected [ 1287.587484][ T7439] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:24:18 executing program 4: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x101841) write$hidraw(r0, &(0x7f0000000080)="f6", 0x1) r1 = syz_open_dev$hidraw(&(0x7f0000001200), 0x8, 0x2e8181) read$hidraw(r1, &(0x7f00000000c0)=""/178, 0xb2) write$hidraw(r0, &(0x7f0000000040)="83", 0x40fff) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x105f81) r2 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x6, 0x600000) read$hidraw(r2, &(0x7f0000000200)=""/4096, 0x1000) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x123040) read$hidraw(r3, &(0x7f0000000040)=""/62, 0xfffffe4d) write$hidraw(r3, &(0x7f0000000180)="56666979d8edd5c63cd6df9b5a50906e4263f53ed9b94de0d178186168e5150e4b4f30a21eac99ca1f2d9cbbada6319afe1e4bab984c0e35e3a0d56349e6", 0x3e) [ 1287.627881][ T7] usb 4-1: too many configurations: 221, using maximum allowed: 8 10:24:18 executing program 4: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1e1842) write$hidraw(r0, &(0x7f0000000080)='X', 0xffffffb7) write$hidraw(0xffffffffffffffff, &(0x7f0000000040)="c5", 0xfdef) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000000)) [ 1287.717961][ T2105] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1287.817907][ T7235] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1288.009541][ T17] usb 3-1: USB disconnect, device number 119 [ 1288.037768][T29987] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1288.068290][ T2105] usb 2-1: too many configurations: 186, using maximum allowed: 8 10:24:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffed9, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xffffffffffffff93, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffdd1}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4}}, {0x9d, &(0x7f0000000880)=ANY=[@ANYBLOB="9d039589d9dc008deae30428f72ba366e37f6f119df463d469f90ccddd2766e365cc39cddaac92d87519deb22a1043e806807776d18f2f2f5b16bdec5a1ea00100000026270e7038c98066802f8fa862859da978b761543a59205c7fecf2a598be5eee6db4ddf8c55931b318ed1845c82661d1fc9665e1bea79a45e5eb8ae6861c"]}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f00000003c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "ce3c64f8", {0x3, 0x106, 0x0, 0x0, 0x0, 0x0, 0x3f}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000001100)=@conn_svc_rsp={0x0, 0x0, 0xa, "1748d0b7", {0x3, 0x103, 0x0, 0xfa, 0x3, 0x3, 0x1f}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x6, 0x7, 0x0, 0x0, "48ca183f5608494de3dbaf754c2b010ec8ab1b2357653cf87dc9a855b6102a09"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000002c0)={0x1, 0x17, 0x0, 0xb28, "ff1479ac72ca50edec091c633715bf2c6bc62543cf42b14d1f4250106723326c"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000006c0)={0x1, 0x15, 0x0, 0x800000, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000005c0)={0x5f, 0x0, 0x0, 0x9, "991d78cef69f7128de3b1fd0db7d0f16f6f14d5ac1a792f9a7bcf09f9aad0fe8"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000600)=ANY=[@ANYBLOB="12011001000000206a05025040004000030109022d00010106d001090400ba010301023109213f00010122cc0d09058103400081092009050203100008485b"], &(0x7f00000010c0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x0, 0x79, 0x8, 0x8, 0x6}, 0xa3, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x3, [{0xc9, &(0x7f0000000780)=@string={0xc9, 0x3, "7b3165337290b81bcd3d3d373b8c03ab9a914fa24c81733443bdae12a2affd896a21550e244cafa786c98e9ee1959c82613562d1104c840d7b850da4bb4fb554b93f09b25b2162dfafa29bc15093c20f0a76aa2aadb7b47d038e34c7c9d84644f329ceece9bd07aead60084fee5db3d27fd2358f0102bc4fcdd86d4f6bcfccd3fb2caf43a59fb3fb013110ee1c664c846460aee892500d22db077da53fd8d3ad80208e8de2803e2c791c14ac7fcf0847a31186f2546bd684e101225925d81b84881d19b60a896c"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x809}}]}) [ 1288.169691][ T33] audit: type=1800 audit(1624530259.282:3124): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name=48C7C060 dev="sda1" ino=14082 res=0 errno=0 [ 1288.297687][T29987] usb 6-1: Using ep0 maxpacket: 8 [ 1288.437561][T29987] usb 6-1: config 5 has an invalid interface number: 36 but max is 1 [ 1288.445739][T29987] usb 6-1: config 5 has an invalid descriptor of length 149, skipping remainder of the config [ 1288.456729][T29987] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 1288.465862][T29987] usb 6-1: config 5 has no interface number 0 10:24:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x2000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000000c0)=""/158) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="1500004e7ad9fa6915e50000000000000002638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e9200000078dbe62250cc66e259dced325989b708c36cad324d24dea9865ad4080bfd6d3b65f150d95116f5e53c486cd11cdf77aa88f30502a43d89df51e5e0eb47e035fe5bd20f42ceffdfbe35970eb4b9dc92a2"]) [ 1288.487946][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1288.497870][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.506070][ T7] usb 4-1: Product: syz [ 1288.510585][ T7] usb 4-1: Manufacturer: syz [ 1288.515208][ T7] usb 4-1: SerialNumber: syz [ 1288.527454][T29681] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1288.568850][ T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1288.607449][ T7439] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1288.614709][ T7439] ath9k_htc: Failed to initialize the device [ 1288.622340][ T17] usb 3-1: ath9k_htc: USB layer deinitialized [ 1288.648346][T29987] usb 6-1: New USB device found, idVendor=19d2, idProduct=0396, bcdDevice=da.34 [ 1288.657664][T29987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.665787][T29987] usb 6-1: Product: syz [ 1288.667829][ T7235] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1288.670580][T29987] usb 6-1: Manufacturer: syz [ 1288.679837][ T7235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.684356][T29987] usb 6-1: SerialNumber: syz [ 1288.692428][ T7235] usb 1-1: Product: syz [ 1288.701189][ T7235] usb 1-1: Manufacturer: syz [ 1288.705808][ T7235] usb 1-1: SerialNumber: syz 10:24:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005113b108d219960334da0102030109021b0002050000200904240000cc078fb195866941d3733899009fe9b11279ff712360fdf5b6fcd1f0774ef38b277e8f3213b7ff3b0aec93e45fb352c5c51761f746d0213bd8cdba9b7a973f9990e99beaa8fe86854825c249583fd6243963646caac1729c66"], 0x0) [ 1288.748807][ T7235] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1288.757549][T29987] usb 6-1: can't set config #5, error -71 [ 1288.774049][T29987] usb 6-1: USB disconnect, device number 37 [ 1288.817691][T29681] usb 5-1: too many configurations: 210, using maximum allowed: 8 [ 1288.907522][ T2105] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1288.916692][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.925479][ T2105] usb 2-1: Product: syz [ 1288.929824][ T2105] usb 2-1: Manufacturer: syz [ 1288.934410][ T2105] usb 2-1: SerialNumber: syz [ 1288.944227][ T2608] usb 4-1: USB disconnect, device number 10 10:24:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1288.953741][ T7] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1288.970250][ T2608] usb 4-1: ath9k_htc: USB layer deinitialized 10:24:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1289.008291][ T2105] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1289.047603][ T17] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1289.247482][T29987] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1289.357464][ T7235] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1289.387704][ T17] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1289.437619][ T2608] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1289.517472][T29987] usb 6-1: Using ep0 maxpacket: 8 [ 1289.573850][ T32] usb 1-1: USB disconnect, device number 38 [ 1289.591752][ T2105] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1289.617853][T29681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1289.626920][T29681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.635217][T29681] usb 5-1: Product: syz [ 1289.639505][T29681] usb 5-1: Manufacturer: syz [ 1289.644185][T29681] usb 5-1: SerialNumber: syz [ 1289.657937][T29987] usb 6-1: config 5 has an invalid interface number: 36 but max is 1 [ 1289.666039][T29987] usb 6-1: config 5 has an invalid descriptor of length 149, skipping remainder of the config [ 1289.676571][T29987] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 1289.685537][T29987] usb 6-1: config 5 has no interface number 0 [ 1289.688452][T29681] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1289.737611][ T2608] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1289.867767][T29987] usb 6-1: New USB device found, idVendor=19d2, idProduct=0396, bcdDevice=da.34 [ 1289.876951][T29987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.884999][T29987] usb 6-1: Product: syz [ 1289.889279][T29987] usb 6-1: Manufacturer: syz [ 1289.893950][T29987] usb 6-1: SerialNumber: syz [ 1290.019475][ T7003] usb 2-1: USB disconnect, device number 65 [ 1290.199205][T29987] option 6-1:5.36: GSM modem (1-port) converter detected [ 1290.210346][T29987] usb 6-1: USB disconnect, device number 38 [ 1290.218143][T29987] option 6-1:5.36: device disconnected [ 1290.267554][T29681] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1290.357505][ T17] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1290.366616][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.374700][ T17] usb 3-1: Product: syz [ 1290.378925][ T17] usb 3-1: Manufacturer: syz [ 1290.383535][ T17] usb 3-1: SerialNumber: syz [ 1290.447544][ T7235] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1290.448487][ T17] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1290.454570][ T7235] ath9k_htc: Failed to initialize the device [ 1290.473803][T17463] udc-core: couldn't find an available UDC or it's busy [ 1290.480960][T17463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:24:21 executing program 1: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) write$hidraw(0xffffffffffffffff, &(0x7f0000000200), 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000040)=""/62, 0xfffffe4d) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="5ba9d3971c309e24ced3b89de0098f0ba6a725ea255bc45f2e3e3658485726fac3d52853a1cb700f98aad792bb6cf6012f7a2b57baba5476a15b24ea28d17ab1ae1335", 0x43) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r0, &(0x7f0000001280), 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1a7bc2) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) write$hidraw(r3, &(0x7f0000000000)="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", 0x800000) syz_open_dev$hidraw(0x0, 0x0, 0xc480) read$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(r2, &(0x7f00000012c0)=""/4096, 0x1000) write$hidraw(r1, &(0x7f0000000000)="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", 0x200) syz_open_dev$hidraw(&(0x7f0000001280), 0x0, 0x10002) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000001240), 0x8, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) [ 1290.500794][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1290.547923][ T2608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1290.553997][ T33] audit: type=1800 audit(1624530261.662:3125): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14083 res=0 errno=0 [ 1290.557146][ T2608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.586406][ T2608] usb 4-1: Product: syz [ 1290.590628][ T2608] usb 4-1: Manufacturer: syz [ 1290.595242][ T2608] usb 4-1: SerialNumber: syz [ 1290.605901][ T33] audit: type=1804 audit(1624530261.692:3126): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723432353533343331312F73797A6B616C6C65722E665079696A622F3739332F48C7C060 dev="sda1" ino=14083 res=1 errno=0 [ 1290.607462][ T2105] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1290.644239][ T2105] ath9k_htc: Failed to initialize the device [ 1290.651098][ T7003] usb 2-1: ath9k_htc: USB layer deinitialized [ 1290.653650][ T33] audit: type=1804 audit(1624530261.692:3127): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723432353533343331312F73797A6B616C6C65722E665079696A622F3739332F48C7C060 dev="sda1" ino=14083 res=1 errno=0 [ 1290.691181][T17463] udc-core: couldn't find an available UDC or it's busy [ 1290.698242][T17463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1290.710845][T17463] udc-core: couldn't find an available UDC or it's busy [ 1290.717950][T17463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1290.728542][ T2608] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1290.738962][T17463] udc-core: couldn't find an available UDC or it's busy 10:24:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xffffffffffffff7f, 0x800) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000001c0)={0x7f, 0x8, 0x1, 0xba, "eebd68f8f7a9384772ee1dd2019ec63cfa9ef4aa294d335a41252f2d125d3fe5"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x1, 0x8, 0x800, 0x8, "a1d6f3ae27a5592c89efc8e546774c60759f2235f7865e4fd7edebe0bfe5d02b"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120147007036000100000000097c000000a4fbce00000000000000000040000000000000f0d84ecc44d7e9cff80460bc91a3e78c24f92c08ea89de4d288988d696ae14a75de479d701035994d81b3d0f0936dd57158dfbfa923482db0de3dda39f62ea492f751a4792269257f87cc00eece11b0beb2db1f3eac4ebbbc718d1a690bff2f304ff9948bdcb18fa3096b797e6498cdcaf07e282af71d44194b0518c086b7d91bdd2e7b5c5ab0f7b7a1af2ad23e35932c12f1b5e8c8d9647e0"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xc0, 0x37, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x20, 0x27, 0x1, {0x22, 0x26b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xaf, 0x7}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0x7, 0x5, 0x1, 0x20, 0x9}, 0x33, &(0x7f0000000600)={0x5, 0xf, 0x33, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x5, 0x880, 0x4, [0x3f00, 0xff00cf, 0x7e00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xba, 0x7f, 0x4, 0xfffe, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8a, 0x2, 0x1, 0x8}]}, 0x5, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}, {0xb, &(0x7f0000000680)=@string={0xb, 0x3, "596a69cf9557c07bd8"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc0c}}]}) 10:24:21 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x55, 0x3, 0x4, {0x5, 0x4e62}, {0x9c, 0x5}, @const={0x20, {0x5, 0x6, 0x5, 0x74a4}}}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) [ 1290.745946][T17463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1290.765055][ T33] audit: type=1804 audit(1624530261.872:3128): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723432353533343331312F73797A6B616C6C65722E665079696A622F3739332F48C7C060 dev="sda1" ino=14083 res=1 errno=0 [ 1290.860643][ T33] audit: type=1804 audit(1624530261.872:3129): pid=17566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723432353533343331312F73797A6B616C6C65722E665079696A622F3739332F48C7C060 dev="sda1" ino=14083 res=1 errno=0 [ 1291.016673][ T7439] usb 5-1: USB disconnect, device number 65 10:24:22 executing program 1: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1d0, &(0x7f00000006c0)=ANY=[@ANYBLOB="9500004e35d4fdcbf22e8ca654c3e85c9f8d02dc1aea8787b593d015b24fd855867b37c70e3f90bc326f5f821132d54bcd70f78540e357edf13b9eadf2a3882069e71b233177150865aa403a12226b504941e6bf2cb57e4e3d711a464990ea6f8c3cd2f21e9c961e412648aa1950e4e1ba9d932e0f0488dba60ea7975e181ca8806c831c701045f0e8a054d40a6d4fd053b19c9a2a1cfea2f1000000"]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x8]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe8, &(0x7f0000000600)=ANY=[]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "154f01c1"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000600)=""/88) syz_usb_connect_ath9k(0x3, 0x2d9e, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e5ab, [{{0x9, 0x2, 0xbc871ee20b82faf6}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffda9, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x999a37b00aaba834}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1291.157614][ T7003] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1291.217654][ T32] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1291.277539][ T17] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1291.367671][ T2608] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1291.457622][ T2105] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1291.487702][ T7003] usb 6-1: device descriptor read/64, error 18 10:24:22 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r1, &(0x7f0000000000)="93663a9c21ddf8b2dbac8318c5d65dc752ebba6d14e99814d28ec2a05acab22b72d676701ea300c0c1efb18ab860468e1b634c8b0a62c94d0936", 0x3a) [ 1291.517723][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 10:24:22 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r1, &(0x7f0000000000)="93663a9c21ddf8b2dbac8318c5d65dc752ebba6d14e99814d28ec2a05acab22b72d676701ea300c0c1efb18ab860468e1b634c8b0a62c94d0936", 0x3a) 10:24:22 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r1, &(0x7f0000000000)="93663a9c21ddf8b2dbac8318c5d65dc752ebba6d14e99814d28ec2a05acab22b72d676701ea300c0c1efb18ab860468e1b634c8b0a62c94d0936", 0x3a) 10:24:22 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r1, &(0x7f0000000000)="93663a9c21ddf8b2dbac8318c5d65dc752ebba6d14e99814d28ec2a05acab22b72d676701ea300c0c1efb18ab860468e1b634c8b0a62c94d0936", 0x3a) [ 1291.700022][T29987] usb 3-1: USB disconnect, device number 120 [ 1291.757775][ T2105] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1291.771859][T17512] udc-core: couldn't find an available UDC or it's busy [ 1291.779135][T17512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1291.791526][T17512] udc-core: couldn't find an available UDC or it's busy [ 1291.798757][T17512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1291.811464][T17512] udc-core: couldn't find an available UDC or it's busy [ 1291.818601][T17512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1291.827261][T17512] udc-core: couldn't find an available UDC or it's busy [ 1291.834313][T17512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1291.850169][T17512] udc-core: couldn't find an available UDC or it's busy [ 1291.857187][T17512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1291.877525][ T7003] usb 6-1: device descriptor read/64, error 18 [ 1291.897560][T29681] usb 5-1: Service connection timeout for: 257 [ 1291.903775][T29681] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1291.912368][T29681] ath9k_htc: Failed to initialize the device [ 1291.919174][ T7439] usb 5-1: ath9k_htc: USB layer deinitialized [ 1292.071396][ T7] usb 4-1: USB disconnect, device number 11 [ 1292.147529][ T7003] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1292.327499][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1292.336562][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.344591][ T32] usb 1-1: Product: syz [ 1292.348834][ T32] usb 1-1: Manufacturer: syz [ 1292.353436][ T32] usb 1-1: SerialNumber: syz [ 1292.377983][ T17] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1292.385001][ T17] ath9k_htc: Failed to initialize the device [ 1292.391371][T29987] usb 3-1: ath9k_htc: USB layer deinitialized [ 1292.398929][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1292.427430][ T7003] usb 6-1: device descriptor read/64, error 18 [ 1292.677818][ T2105] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1292.686912][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.694986][ T2105] usb 2-1: Product: syz [ 1292.699214][ T2105] usb 2-1: Manufacturer: syz [ 1292.703935][ T2105] usb 2-1: SerialNumber: syz 10:24:23 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) syz_open_dev$char_usb(0xc, 0xb4, 0x8) 10:24:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1292.748676][ T2105] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1292.787732][T29987] usb 3-1: new high-speed USB device number 121 using dummy_hcd 10:24:23 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x56, 0x1, 0x1f, {0xd7c, 0x8}, {0x8, 0x8000}, @const={0xfff7, {0x40, 0x3, 0x3, 0x8}}}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000400)=""/254) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000200)={0x81, 0x1c, 0x43, 0x3f, "b5de7e3f62bd633fbf5a61ea463573b6191d33fbab592b3d2311286acf2bd55c"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000003c0)={0x5, 0x12, 0x2, 0x10000, "49129e6496f6e5b3ad425794c0539c2d6da77cca60ea0009c3008fbd9339c7d6"}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000380)={0x5, 0x1, 0xee56, 0x100, 0x1, 0x9}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x12, 0xfd, &(0x7f0000000240)="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"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/568]) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x53, 0x4800, 0x6, {0x7f, 0x8}, {0x100, 0x3}, @cond=[{0xfac, 0x4, 0x4, 0x1, 0x7ff, 0x8001}, {0x8, 0x2, 0x4, 0xd, 0xfff8, 0x7fff}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:24:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect(0x5, 0x59e, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x25, 0x27, 0xdc, 0x10, 0x409, 0x8024, 0xc3e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58c, 0x4, 0x5, 0x2, 0x20, 0x1, [{{0x9, 0x4, 0x93, 0x3, 0x8, 0x62, 0x1, 0x88, 0x7, [], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x2, 0xfd, 0x3f, [@generic={0x35, 0x21, "18fa1a713e6151e72d3834636df41a44faefc589da8f449a62b0376dd87dc4ac93564e99ac154c67179414c26c76ca3913dfdf"}, @generic={0xd6, 0xa, "f40d9e3545cd68e4b0170ff2a62eeeee669072a3f06488473fc96d39eb3714f6cc929fe1b214e652a3b91fb10e16c57f7a217d406093655caf641330c8186832fc4244514b905fad7a5937ed6155a89716a91918b9049132ecec3004a60f9673e912a0d9057dc6f1c3800bf0474ccd13a9a4c0541c5fa6a1bc8ba09f6ddfbe5d7527730962cab1b7a7ee96b4e1f23fa88931de084ffb3125ef66752559264288d63ac6b5524b8b2a1052c61fe0614a0d45eac816b19eb3a62631ee759a9d2a91f7efb468c3d9e940c4dba60d9c601c73879d52da"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x40, 0xfe, 0x5}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x5, 0x62, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x86, 0x1, 0x1}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x6, 0xff, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0xfb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x55, 0x8}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x81, 0x5, 0xfa}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x60, 0xc7, 0x3, [@generic={0x2, 0x29}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x3f, 0x40, 0x6}}]}}, {{0x9, 0x4, 0xbe, 0x5, 0x2, 0x6d, 0x89, 0x62, 0x3b, [], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0x7, 0xc6, 0x7, [@generic={0xb7, 0x6, "5adf12ada95ec9abaa9ca10c84ccb879c55f5d3f630ff73f94cbebb38800f8278e8f54d16811a69aa11b9b45c72cfc7eb8f205d888647784a418e8b0d9566bb390c5e6ca680dc3c8d9c7ff00f21d9e95c1b34f09c9992963e1385b3cccb6bd6309f285a37aa02dbbaff433b35f7aef93822bd1be0904901a99602be4fdedfc462d8b5a6f19287a485de3121ba32e3c0bacb0d07523a4176575b38435c413f0ac9e55ea2bf06edd3b0c233506d63018f6cf022ed25d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x80, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1d, 0x4b53}]}}]}}, {{0x9, 0x4, 0x0, 0x1, 0xc, 0x6a, 0xf2, 0xe6, 0xff, [@hid_hid={0x9, 0x21, 0x1000, 0x7, 0x1, {0x22, 0x6ab}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "20f4bd77"}, {0x5, 0x24, 0x0, 0x7f98}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x0, 0xfff, 0xf2}}], [{{0x9, 0x5, 0x9, 0x8, 0x20, 0x8, 0x58, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xffff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x7f, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x1, 0x2, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xca, 0x81, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x80, 0xa, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x800, 0x40, 0x3f}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x88, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x27, 0x1ff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x2cb2e7d3ae332d65, 0x1, 0x2a, 0x5, [@generic={0x76, 0xc, "07d3436668a49b8501975398661f41fe518986c8c1a908cc4904c3f5e593669482fce1904e2ca4322dff34f19bb562666df873683dec2ee600eb9d08f30f2b9dcc9027f634e0da726d3b1a4f8a4b5df97411b92ea1fc32a6409753a18cefab203ce359fd1c075f83c0930956ffa757fefef7bab9"}, @generic={0x51, 0x30, "035ca9b8e0db98e06f3fe6f9705f11dac45ea695e95bba0d258d3cdf08fc944aa6b66ab1863bc99f46661d59179061fb5094eea6317e6612872f6cb8d40e1138cc1319b80167d4b6c240e0ecc777cf"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x53, 0x0, 0x8, [@generic={0x93, 0x4, "fdc8e4b6acc580f44de73a0a1ba3a75b2c0cb4daf6c13fb7e7f1bdaf60b9a7c1626d8f36a51b7115d889880de31f4be3b921be511dcebe018a839eb2d334079dc53731b3c8064ae24cf5fd22e2ef8033f7051df1467d8f491447f07bc4384595d08d5e29751e9caa9a0923819f84c55f1ac54ebe1e85955e12cac956423ba73ff40a69acda50346d9a1399fd04160c86d7"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x76d}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0x9}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x20, 0x3f}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x7, 0x2, 0x5}}]}}, {{0x9, 0x4, 0x7e, 0x6, 0x3, 0xff, 0xff, 0xff, 0x6, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "94063f"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xffff, 0x52dd, 0x3}}, @generic={0x1b, 0x5, "5963965776af874404dac1558fb0e1bd3fee1dfc7a904134db"}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x4, 0x20, [@generic={0xc1, 0xd, "4d6913f4c7cd11a49d41eda289a0e18316e8a08d0f672652de63d6c0aeeaa9d0293bd69ab7d87e82626ccf0435b2667c797f4ba60eb2dfeba2330681ba6203b95251669e89aaa12067fdb41fe12669e588c003b4831a12452a6d974fce46168cc1173c072b7a7b3acca13e868404f97b1db9778d0eadb00957153e246a2c3653a8df7ae50a475f801ac9dd6309bde3b3dbaf88c48c1e9102adfb15d7bac6301fed8f5193e5da5e761c47516fe49a2e4db252fa71c7ccff0470496e8dbed0f3"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x20, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x80, 0x7f}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x2, 0x0, 0x5c}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x5, 0x8, 0x40, 0x40}, 0x3b, &(0x7f00000000c0)={0x5, 0xf, 0x3b, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0x8, 0x4, 0x3ff, 0x3d}, @ss_container_id={0x14, 0x10, 0x4, 0x8c, "f792513443acb840211aea20b86ff6d2"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "67465b3d6c42254a6502f69ec4af9ce6"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc13}}, {0x2b, &(0x7f0000000140)=@string={0x2b, 0x3, "af3e1a5998f7b552f5f50b1358f9c5ee132079816ac087eeaa5fee8519ab04805ca23297d15ba4fea5"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xf4, &(0x7f0000000900)={[{0xed, 0x4e00, "f32ffe9eb072ebec024f9c17ac646ea7a961892397e198983482480800743733d1145be1f159eeaec12ba4bdda399ba6fa77960fa858b669113d0f84257a19c3e9197fb9fe1e980602cdddc719c6be010d121f3fdc3328144471416b57c5f5029dd4765d254ce48ea813aad5a0e901b1a0db1d2af95a8fd32fb5e5d93bd91791566639c060fe1155a5e370eef11789fe9e0199f01dfff22b7a5296f3003f0548f9efbeed4dd9a81ecf0a02ded8db5a51021614c1b67233d5deab0cb259b10b7d3efeca3f2bd7b20de8d350b20addd6a98214f477a9564cf33418196b50ac40d72f38ff3c6b9472c2a3511cde5c"}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) [ 1292.857650][ T7003] usb 6-1: device descriptor read/64, error 18 10:24:24 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1292.937517][ T2608] usb 4-1: Service connection timeout for: 257 [ 1292.943725][ T2608] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1292.956549][ T2608] ath9k_htc: Failed to initialize the device [ 1292.963677][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 1292.978095][ T7003] usb usb6-port1: attempt power cycle [ 1293.067475][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1293.267495][T29987] usb 3-1: device descriptor read/64, error -71 [ 1293.337480][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1293.367561][ T2105] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1293.387504][ T7003] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1293.477703][ T7003] usb 6-1: Invalid ep0 maxpacket: 1 [ 1293.492437][ T7235] usb 1-1: USB disconnect, device number 39 [ 1293.627452][ T7003] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1293.657554][ T7] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1293.667547][T29987] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1293.717752][ T7003] usb 6-1: Invalid ep0 maxpacket: 1 [ 1293.723298][ T7003] usb usb6-port1: unable to enumerate USB device [ 1293.771379][T17583] udc-core: couldn't find an available UDC or it's busy [ 1293.778357][T17583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1293.786483][T17583] udc-core: couldn't find an available UDC or it's busy [ 1293.793577][T17583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1293.802223][T17583] udc-core: couldn't find an available UDC or it's busy [ 1293.809324][T17583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:24:25 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) [ 1293.818323][T17583] udc-core: couldn't find an available UDC or it's busy [ 1293.825366][T17583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1293.834127][T17583] udc-core: couldn't find an available UDC or it's busy [ 1293.845524][T17583] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:24:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x400000000200001, 0x406000) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x5, 0xae, &(0x7f00000000c0)="75b9e863f7865727d533a4c3168de9ad4845616189fe66bcddd27d606ab26222a3ab793d7688067bc354d91799e7bb4e7625c4014452fdca2a78484872b3cc918505d8ef6297c6cf334a8ebc8da5235cdf407fb87de50fe903c9592e8e535c0fad59dfbb87da49b3f90c9cb193642237d3e2092f357b0f1536a50f4f8c83234837afa01bf43e94d7f5b604a22abb916b988f152f1430d4a4164e2b57ceb1415d04c85ec0b55d7e6084462aa9bdec"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/380]) [ 1294.077081][T29681] usb 2-1: USB disconnect, device number 66 [ 1294.128093][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1294.135264][ T32] ath9k_htc: Failed to initialize the device [ 1294.142871][ T7235] usb 1-1: ath9k_htc: USB layer deinitialized [ 1294.467483][T29987] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1294.476541][T29987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.484587][T29987] usb 3-1: Product: syz [ 1294.488924][T29987] usb 3-1: Manufacturer: syz [ 1294.493623][T29987] usb 3-1: SerialNumber: syz 10:24:25 executing program 1: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1d0, &(0x7f00000006c0)=ANY=[@ANYBLOB="9500004e35d4fdcbf22e8ca654c3e85c9f8d02dc1aea8787b593d015b24fd855867b37c70e3f90bc326f5f821132d54bcd70f78540e357edf13b9eadf2a3882069e71b233177150865aa403a12226b504941e6bf2cb57e4e3d711a464990ea6f8c3cd2f21e9c961e412648aa1950e4e1ba9d932e0f0488dba60ea7975e181ca8806c831c701045f0e8a054d40a6d4fd053b19c9a2a1cfea2f1000000"]) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x8]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xe8, &(0x7f0000000600)=ANY=[]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "154f01c1"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000600)=""/88) syz_usb_connect_ath9k(0x3, 0x2d9e, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e5ab, [{{0x9, 0x2, 0xbc871ee20b82faf6}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffda9, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x999a37b00aaba834}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1294.537954][ T7235] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1294.538494][T29987] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:24:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x53e, [{{0x9, 0x2, 0xa6}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x28, &(0x7f00000006c0)=ANY=[@ANYBLOB="014000c2e9abcedf7900981c4e000000000000000009e8b7470a3a4ae1fa6e72670b8f656e416ffc4c66a2abaec82adaab38865c67e7264e75c20142f8a16dd0e3abf36d"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa}, 0x0, 0x0, 0x1, [{0xa2, &(0x7f0000000800)=ANY=[@ANYRES64=r1, @ANYRESDEC=r2, @ANYBLOB="62af6abad08c83005ae54a6ed9da9f7465417de974acdea786abc8752356d15585b2aa5cc98202eb3f5fab827b63a370d0e7e73d6438673da9a9254d65da274f5ad95908be61e6d42102a4cdd0e34fe07730dfee9fe4410b05dcd44f6b24ea706c6e04f2d8f81a4be0a2774439be48849fb4781c7be19bf6f09ea9a70dc6cd8cb1ef29eb73c07de407000000000000008d958c4959c16b0bac0b1330d86db2c536e14714fa0df56c18154c1b5c3ec9409f5715aded0b88885b04f141731fd13dc4ced519ce272945ba534c74", @ANYRES64, @ANYRESHEX]}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000001240)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x2, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3971, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000005c0)=@generic={0x8, 0x0, 0x0, '\x00\x00\x00@'}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x23, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x82, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:25 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 10:24:25 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) [ 1294.637880][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1294.647207][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.655398][ T7] usb 4-1: Product: syz [ 1294.659752][ T7] usb 4-1: Manufacturer: syz [ 1294.664362][ T7] usb 4-1: SerialNumber: syz 10:24:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1294.738615][ T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1294.847669][ T7235] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1294.887778][ T17] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1294.937596][ T2105] usb 2-1: Service connection timeout for: 258 [ 1294.943993][ T2105] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1294.952755][ T2105] ath9k_htc: Failed to initialize the device [ 1294.958964][T29681] usb 2-1: ath9k_htc: USB layer deinitialized [ 1295.127492][T29987] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1295.177509][ T17] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 1295.337665][T29681] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1295.342943][T17640] udc-core: couldn't find an available UDC or it's busy [ 1295.352445][T17640] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1295.477513][ T7] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1295.572280][ T7003] usb 3-1: USB disconnect, device number 121 [ 1295.677656][T29681] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1295.857576][ T7235] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1295.866884][ T7235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.875170][ T7235] usb 1-1: Product: syz [ 1295.879737][ T7235] usb 1-1: Manufacturer: syz [ 1295.884439][ T7235] usb 1-1: SerialNumber: syz [ 1295.885166][T17634] udc-core: couldn't find an available UDC or it's busy [ 1295.896176][T17634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1295.906048][T17634] udc-core: couldn't find an available UDC or it's busy [ 1295.913351][T17634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1295.928102][T17634] udc-core: couldn't find an available UDC or it's busy [ 1295.928828][ T7235] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1295.935695][T17634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1295.962158][T17634] udc-core: couldn't find an available UDC or it's busy [ 1295.969268][T17634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1295.978086][T17634] udc-core: couldn't find an available UDC or it's busy [ 1295.985164][T17634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1296.137566][ T17] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1296.146669][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.154801][ T17] usb 6-1: Product: syz [ 1296.159058][ T17] usb 6-1: Manufacturer: syz [ 1296.163887][ T17] usb 6-1: SerialNumber: syz [ 1296.200840][ T2608] usb 4-1: USB disconnect, device number 12 [ 1296.207722][T29987] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1296.215657][ T17] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1296.228463][T29987] ath9k_htc: Failed to initialize the device [ 1296.241581][ T7003] usb 3-1: ath9k_htc: USB layer deinitialized [ 1296.487735][T29681] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1296.496995][T29681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.506377][T29681] usb 2-1: Product: syz [ 1296.510708][T29681] usb 2-1: Manufacturer: syz [ 1296.515679][T29681] usb 2-1: SerialNumber: syz [ 1296.527606][ T7235] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1296.578279][T29681] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1296.617712][ T7003] usb 3-1: new high-speed USB device number 122 using dummy_hcd 10:24:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xcd, &(0x7f0000000200)=@generic={0x2, 0x0, 0xc5, "49aedeb5", "d0e331cd6e0af447ae80ceb379ed58efb5fbf1717303da481b14e8b6e4df601d85d1213c43b5260a8c52826233231496bb9b11e1bf1211f949b33d6e127c3506245a7750e719b69d571c48535508ddc535fe172a11a7d7e2f604953293aaf05121573c3b6abc5486d7e08fb428038fc35d9309f6a1c9a2b2223916abb7dc915a32a00cb6b2053860aab61f5305d3350a0c1c06fc98817146f46d82dc1ff2f8b58ab2b8f3fef4dc802f6aec6eaa9eb1634718df86648d7cb517ef8cc0294a24604e96e1f9af"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:24:27 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x4b, &(0x7f00000000c0)=@generic={0x3, 0x0, 0x43, "47106901", "5fde632b03062cb2a3ae53993adea9ee8fd0f0ff62e056e21a5985cc5fc74cbbb2799e79abe03092a5538b8196676e2cbdfa424a890ae468ddc45d48c26f66d4154f2e"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) [ 1296.770734][ T32] usb 1-1: USB disconnect, device number 40 10:24:27 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1296.907821][ T17] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:24:28 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1297.007456][ T7] usb 4-1: Service connection timeout for: 257 [ 1297.013699][ T7] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1297.057900][ T7] ath9k_htc: Failed to initialize the device [ 1297.063990][ T2608] usb 4-1: ath9k_htc: USB layer deinitialized [ 1297.110672][T17681] udc-core: couldn't find an available UDC or it's busy [ 1297.117860][T17681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.126144][T17681] udc-core: couldn't find an available UDC or it's busy [ 1297.133210][T17681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.141874][T17681] udc-core: couldn't find an available UDC or it's busy [ 1297.148895][T17681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.156397][T29681] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1297.158584][T17681] udc-core: couldn't find an available UDC or it's busy [ 1297.172468][T17681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.181591][T17681] udc-core: couldn't find an available UDC or it's busy [ 1297.188641][T17681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.237600][ T7003] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1297.411553][ T7439] usb 6-1: USB disconnect, device number 43 [ 1297.437690][ T2608] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1297.567506][ T7235] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1297.568914][T17682] udc-core: couldn't find an available UDC or it's busy [ 1297.574983][ T7235] ath9k_htc: Failed to initialize the device [ 1297.581492][T17682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.595225][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1297.613966][T17682] udc-core: couldn't find an available UDC or it's busy [ 1297.621092][T17682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.631957][T17682] udc-core: couldn't find an available UDC or it's busy [ 1297.639045][T17682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.648832][T17682] udc-core: couldn't find an available UDC or it's busy [ 1297.655774][T17682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.665804][T17682] udc-core: couldn't find an available UDC or it's busy [ 1297.672817][T17682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1297.737707][ T2608] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1297.904495][ T2105] usb 2-1: USB disconnect, device number 67 [ 1297.957446][ T32] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1298.067632][ T7003] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1298.076725][ T7003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.085010][ T7003] usb 3-1: Product: syz [ 1298.089350][ T7003] usb 3-1: Manufacturer: syz [ 1298.093986][ T7003] usb 3-1: SerialNumber: syz [ 1298.148533][ T7003] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1298.297616][ T17] usb 6-1: Service connection timeout for: 256 [ 1298.304217][ T17] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1298.316139][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1298.325175][ T17] ath9k_htc: Failed to initialize the device [ 1298.331688][ T7439] usb 6-1: ath9k_htc: USB layer deinitialized 10:24:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e37e, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787f5e37ad0a53bc17e22071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c9b9dc80c17448490084aacf123ac2e10a7bdc1bf6bc2dc90fa3b9264f94fd5f8783b18b503334eb0795ae5b659299adfacafb7d2ce7358ece525f534b3e3b77362f9b09c9a2b27bbc8f29c7dbea77b10376cc0156917767890dcaa589bf35e41c6761e1f017e44eca6e1ffa0fb144671163686004a065fc4787d26dec0386b05"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000003c0)={0x0, 0x1f, 0x0, 0x0, "ba68a835b82154e7bf54aba8fcbeadcb8b8fc47afbc668a3f77b5c47c5ae1656"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000380)=@ready={0x0, 0x0, 0x8, "89334628", {0x1, 0x4}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x0, 0x1}, 0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="05520f000180d6245bae44"], 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xdc, &(0x7f0000000800)=ANY=[@ANYBLOB="060000d4acad8337763fca414d0074713b368459c5071c2c5a0de50e2fa24be2bf07cca5c69947f5b740e395078c8a582fc63b2eb08961eec36a5bddcba1f1241fc03ae4930054e0090ae3779248444fd1f3c6af3faf0b638d27f6bf683c91167b2f479aeeac14ed688433d28b2c24c96ef1b9cff7cbffdee268fc59c89c1dfa59fbe1786e1184063c99f6cd9a69ab94d63e3787f2fb2809d84ee8120bc8609ee33296bfdb807bfc11ee681eaebd4408ba1f789c0f193b976296ee4a0548c28192"]) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000004c0)={0x6, 0x13, 0x0, 0x0, "7bee12797a4ecaae8558c024a50bf0630000000000000000001000"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:29 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000200)) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb97", 0xf2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000004026093333000000000001090224000100000000090400000903000000092100000001222900090581"], 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) read$hidraw(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:24:29 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:29 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:29 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1298.597782][ T2608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1298.607053][ T2608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.615546][ T2608] usb 4-1: Product: syz [ 1298.619825][ T2608] usb 4-1: Manufacturer: syz [ 1298.624483][ T2608] usb 4-1: SerialNumber: syz [ 1298.668566][ T2608] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1298.767552][T29681] usb 2-1: Service connection timeout for: 258 [ 1298.773756][T29681] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1298.782450][T29681] ath9k_htc: Failed to initialize the device [ 1298.788679][ T2105] usb 2-1: ath9k_htc: USB layer deinitialized [ 1298.848851][ T7439] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1298.867612][ T7003] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1299.070929][T17739] udc-core: couldn't find an available UDC or it's busy [ 1299.078022][T17739] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1299.157685][ T2105] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1299.257742][ T7439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.268811][ T7439] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1299.277527][ T2608] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1299.282172][ T7439] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1299.300321][ T7439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.308881][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1299.313896][ T7] usb 3-1: USB disconnect, device number 122 [ 1299.318134][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.318187][ T32] usb 1-1: Product: syz [ 1299.340328][ T32] usb 1-1: Manufacturer: syz [ 1299.344962][ T32] usb 1-1: SerialNumber: syz [ 1299.355475][ T7439] usb 6-1: config 0 descriptor?? [ 1299.400950][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1299.447825][ T2105] usb 2-1: too many configurations: 126, using maximum allowed: 8 [ 1299.695605][T17741] udc-core: couldn't find an available UDC or it's busy [ 1299.702699][T17741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1299.711746][T17741] udc-core: couldn't find an available UDC or it's busy [ 1299.718753][T17741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1299.726671][T17741] udc-core: couldn't find an available UDC or it's busy [ 1299.733732][T17741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1299.743818][T17741] udc-core: couldn't find an available UDC or it's busy [ 1299.750872][T17741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1299.759480][T17741] udc-core: couldn't find an available UDC or it's busy [ 1299.766433][T17741] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1299.828701][ T7439] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 1299.850777][ T7439] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0028/input/input46 [ 1299.866425][ T32] usb 1-1: USB disconnect, device number 41 [ 1299.877563][T29987] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1299.886668][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1299.893166][ T7003] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1299.906505][ T7003] ath9k_htc: Failed to initialize the device [ 1299.921161][ T7] usb 3-1: ath9k_htc: USB layer deinitialized [ 1299.939122][ T7439] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1299.981204][ T7235] usb 4-1: USB disconnect, device number 13 [ 1300.031563][ T7439] usb 6-1: USB disconnect, device number 44 [ 1300.298114][ T7] usb 3-1: new high-speed USB device number 123 using dummy_hcd 10:24:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:31 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:31 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x4) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:24:31 executing program 2: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000003c0)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x6, 0x0, 0x4, 0x6829382, "ed105400000000003ec13e200000000000008000"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xafec, 0x298020) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x3, 0xe, 0x1, 0x6, "a734911941c5a6477015d44e1c0b1bb8eb7002086ca5dc819e07fe8471c4107a"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r3, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000380)={0xec, 0x1e, 0x8001, 0x37d, "16020e89f9367e8217d8123cc65ff5fdd5205d0462ad61ca9ca2363a65d423fb"}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000440)={0x16, 0x2e, &(0x7f0000000400)="ec0d8f07231ec1d67560534868575732511dc5b4ba9c7ef525d56b7da699ba968a6deb21b72e90c556a775894f12"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) [ 1300.447702][ T2105] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1300.456776][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.465022][ T2105] usb 2-1: Product: syz [ 1300.469249][ T2105] usb 2-1: Manufacturer: syz [ 1300.473862][ T2105] usb 2-1: SerialNumber: syz [ 1300.538750][ T2105] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:24:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000200)) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb97", 0xf2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000004026093333000000000001090224000100000000090400000903000000092100000001222900090581"], 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) read$hidraw(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:24:31 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1300.827536][ T7439] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1300.847517][ T2608] usb 4-1: Service connection timeout for: 257 [ 1300.853808][ T2608] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1300.862368][ T2608] ath9k_htc: Failed to initialize the device [ 1300.868884][ T7235] usb 4-1: ath9k_htc: USB layer deinitialized [ 1301.077503][T29681] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1301.107551][ T7439] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1301.237543][ T7235] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1301.257693][ T2105] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:24:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787915692f03b12fda222071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x33d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x2, 0x15, 0x0, 0x0, "7b39a3e458c024a41bf063000000000000000000000000000000001000"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000fc0)={0x3, 0x0, &(0x7f0000000840)}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=@generic={0x1, 0x0, 0x0, "06bc4904"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000800)=@conn_svc_rsp={0x0, 0x0, 0xa, "9bd85c3e", {0x3, 0x100, 0x0, 0x9, 0x800, 0x1, 0x9}}) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa}, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="030f050200"], 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x41, &(0x7f00000005c0)=@string={0x41, 0x3, "b5e3e330a7219ad489b4008f72c6014eda654bcbae109a38e83df6047b9c43021a3e21c6864d6e0b12fa42878d8da2c1b92cb0ad9da0f14a7e75fe9a62d811"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000007c0)=@generic={0x3, 0x0, 0x0, "4dab806b"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed105400000000003ec13e2000"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:32 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)=ANY=[@ANYBLOB="1500004e7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a788fbf0986cc76e80b595618d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e92000000"]) [ 1301.452932][ T7] usb 2-1: USB disconnect, device number 68 [ 1301.487521][T29681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.498712][T29681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1301.511711][T29681] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1301.520861][T29681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.535142][T29681] usb 6-1: config 0 descriptor?? 10:24:32 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1301.590791][ T7235] usb 4-1: too many configurations: 221, using maximum allowed: 8 10:24:32 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:32 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1301.767599][ T7003] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1301.907663][ T7439] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1301.916896][ T7439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.924977][ T7439] usb 1-1: Product: syz [ 1301.929247][ T7439] usb 1-1: Manufacturer: syz [ 1301.933878][ T7439] usb 1-1: SerialNumber: syz [ 1301.978381][ T7439] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1302.018622][T29681] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 1302.034301][T29681] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0029/input/input47 [ 1302.139099][T29681] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1302.253825][ T32] usb 6-1: USB disconnect, device number 45 [ 1302.287503][ T2105] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1302.296125][ T2105] ath9k_htc: Failed to initialize the device [ 1302.329470][ T7] usb 2-1: ath9k_htc: USB layer deinitialized [ 1302.338099][ T7003] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1302.347280][ T7003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.355798][ T7003] usb 3-1: Product: syz [ 1302.360081][ T7003] usb 3-1: Manufacturer: syz [ 1302.364758][ T7003] usb 3-1: SerialNumber: syz [ 1302.428863][ T7003] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1302.487573][ T7235] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1302.496726][ T7235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.504836][ T7235] usb 4-1: Product: syz [ 1302.509083][ T7235] usb 4-1: Manufacturer: syz [ 1302.513817][ T7235] usb 4-1: SerialNumber: syz [ 1302.558426][ T7235] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1302.677522][ T7439] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1302.717458][ T7] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1303.008380][ T7] usb 2-1: too many configurations: 221, using maximum allowed: 8 [ 1303.102406][ T32] usb 1-1: USB disconnect, device number 42 [ 1303.120430][ T7003] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1303.147548][ T7235] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1303.529262][T29987] usb 3-1: USB disconnect, device number 124 [ 1303.551496][T17889] udc-core: couldn't find an available UDC or it's busy [ 1303.558559][T17889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1303.566605][T17889] udc-core: couldn't find an available UDC or it's busy [ 1303.573667][T17889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1303.581734][T17889] udc-core: couldn't find an available UDC or it's busy [ 1303.588711][T17889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1303.596870][T17889] udc-core: couldn't find an available UDC or it's busy [ 1303.604031][T17889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1303.612431][T17889] udc-core: couldn't find an available UDC or it's busy [ 1303.619460][T17889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1303.727487][ T7439] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1303.734660][ T7439] ath9k_htc: Failed to initialize the device [ 1303.742140][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1303.851431][ T17] usb 4-1: USB disconnect, device number 14 [ 1303.937541][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1303.946678][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.954818][ T7] usb 2-1: Product: syz [ 1303.959509][ T7] usb 2-1: Manufacturer: syz [ 1303.964171][ T7] usb 2-1: SerialNumber: syz [ 1304.021496][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1304.097480][ T32] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1304.207535][ T7003] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1304.218431][ T7003] ath9k_htc: Failed to initialize the device [ 1304.225726][T29987] usb 3-1: ath9k_htc: USB layer deinitialized 10:24:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:35 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x8, 0x1f, 0x8, 0x3fd, "fe105400"}) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1c50c1) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x1) write$hidraw(r2, &(0x7f0000001200)="b4", 0x1) write$hidraw(r1, &(0x7f0000000000)="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", 0x57010000) 10:24:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x128, &(0x7f0000000200)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0xab, 0x4e00, "006a3e527f8736ff79919c3f6179b1000000000000716c62553023edf04067bf86009863cf7188a447273701ff5d3f3828116eec5a80034b51ab59ee8c08b896fd1f5811d4c91380dd09f1db0ed1f1313fa8b701e4a338d050d6949b9b3699e2a7ad1a6803097db5650000000000000000c6bba71bbe65c334a99d798dd0ade5fd51ffaf593eece6bed29f60c030c97d35eb6748a75e50f38138b34749e70526e3bb4b1db5e44744219284"}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x0, 0x4e00, "92"}]}) 10:24:35 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:35 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x4) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:24:35 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1304.576018][ T7476] usb 2-1: USB disconnect, device number 69 [ 1304.577788][ T7] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1304.591757][ T7476] usb 2-1: ath9k_htc: USB layer deinitialized 10:24:35 executing program 2: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x200000) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000480), 0x3, 0x0) ioctl$EVIOCGVERSION(r0, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x9, 0x1c, 0x3, 0x101, "ed105400000000003ec13e2000"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "0e8589a2", {0x1, 0x2, 0x0, 0x9, 0x62}}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3f, 0x325082) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000380)={0xa8, 0x10, 0x6, 0x8, "33a7bba540bb57125ea0aa398d39a84ca819e82852e508f9ee26c0c953956066"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x93, 0x1a18c0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000140)=[0x8, 0x101]) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r4, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x5, 0x5, 0x5, 0x20, 0xd1, 0x7fffffff}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000001140)=""/4096) syz_open_dev$evdev(&(0x7f00000003c0), 0xd061, 0x248800) 10:24:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000003c0)={0x7, 0x1f, 0x0, 0x0, "ba090035b8210800000000000000adcb8b8fc47afbc66800007b5c47c5ae1656"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3c1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000010c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b5c02409", {0x3, 0x106, 0x0, 0x1, 0x200, 0x3, 0x2}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001080)=0x8) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x4}, 0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="050f5e00031410245bae59b98250a40410c22529567bea77bb14100409246f3508687e6620bd6d6dbd01436b92311001ce1a666d584c5ac91947695239abea950e"], 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x5f, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x1, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x0, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x3}, [@country_functional={0xe, 0x24, 0x7, 0x39, 0x9, [0x2, 0x81, 0x0, 0x4]}, @mdlm_detail={0x4, 0x24, 0x13, 0xd5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x7d, 0x88}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0xe0, 0x1, 0x0, 0x40}, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="050f08040103100b"], 0x6, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000800)=@lang_id={0x4}}, {0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x74, &(0x7f0000000880)=ANY=[@ANYBLOB="7403e00fd1afc5137484f53cd0d4c8835eb0a3166b4681cc3685692bf196f5f412a820059b36ab809a99aefacf6b608d69d13de94a113ccc9a390273869b28f2ea3e81abcf103ce3fb0f83edcc39afae439a87391b06843bd3dade28e5afc75a9624881fa003592b92fb9394204c75c8ae4ecfb9"]}, {0x2b, &(0x7f0000000780)=ANY=[]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x8c20fdb5f31cbe1c, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0xc0, 0x0, 0x53, 0x0, "029df2a70c0a74b3861184fd66a2734d1d4b9623898daf558b2922bd017ae506"}) syz_open_dev$evdev(&(0x7f00000006c0), 0x7, 0x1c980) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xdc, &(0x7f0000001040)=ANY=[]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, "7bee12797a4ecaae8558c024a50bf0630000000000000000001000"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1304.647598][T29987] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1304.697492][ T7235] usb 4-1: Service connection timeout for: 257 [ 1304.703761][ T7235] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1304.718515][ T7235] ath9k_htc: Failed to initialize the device [ 1304.725253][ T17] usb 4-1: ath9k_htc: USB layer deinitialized 10:24:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x4) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:24:35 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1304.917607][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1305.047456][ T8086] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1305.127472][ T17] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1305.257540][ T7476] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1305.357814][ T8086] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 1305.447675][ T17] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1305.577880][ T7476] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1305.877667][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1305.886909][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.894976][ T32] usb 1-1: Product: syz [ 1305.899268][ T32] usb 1-1: Manufacturer: syz [ 1305.903879][ T32] usb 1-1: SerialNumber: syz [ 1305.968885][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1306.358189][ T8086] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1306.367500][ T8086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.375508][ T8086] usb 6-1: Product: syz [ 1306.379785][ T8086] usb 6-1: Manufacturer: syz [ 1306.384397][ T8086] usb 6-1: SerialNumber: syz [ 1306.428569][ T8086] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1306.467590][ T17] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1306.476691][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.485061][ T17] usb 4-1: Product: syz [ 1306.489303][ T17] usb 4-1: Manufacturer: syz [ 1306.493912][ T17] usb 4-1: SerialNumber: syz [ 1306.537782][ T7476] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1306.546857][ T7476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.555105][ T7476] usb 2-1: Product: syz [ 1306.559350][ T7476] usb 2-1: Manufacturer: syz [ 1306.564067][ T7476] usb 2-1: SerialNumber: syz [ 1306.569714][ T17] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1306.618495][ T7476] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1306.677494][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1307.047497][ T8086] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1307.098762][ T7235] usb 1-1: USB disconnect, device number 43 [ 1307.137523][ T17] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1307.187582][ T7476] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1307.251808][T18049] udc-core: couldn't find an available UDC or it's busy [ 1307.258839][T18049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.266906][T18049] udc-core: couldn't find an available UDC or it's busy [ 1307.274034][T18049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.483037][T18049] udc-core: couldn't find an available UDC or it's busy [ 1307.490133][T18049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.500702][T18049] udc-core: couldn't find an available UDC or it's busy [ 1307.507701][T18049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.541895][T18020] udc-core: couldn't find an available UDC or it's busy [ 1307.549073][T18020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.557249][T18020] udc-core: couldn't find an available UDC or it's busy [ 1307.564281][T18020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.572725][T18020] udc-core: couldn't find an available UDC or it's busy [ 1307.579807][T18020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.588810][T18020] udc-core: couldn't find an available UDC or it's busy [ 1307.595757][T18020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.604681][T18020] udc-core: couldn't find an available UDC or it's busy [ 1307.611845][T18020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1307.621643][ T7439] usb 2-1: USB disconnect, device number 70 [ 1307.727482][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1307.734662][ T32] ath9k_htc: Failed to initialize the device [ 1307.741936][ T7235] usb 1-1: ath9k_htc: USB layer deinitialized [ 1307.760025][ T7] usb 6-1: USB disconnect, device number 46 [ 1307.861110][ T2105] usb 4-1: USB disconnect, device number 15 [ 1308.157480][ T7235] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1308.207414][ T7476] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1308.219933][ T7476] ath9k_htc: Failed to initialize the device [ 1308.232946][ T7439] usb 2-1: ath9k_htc: USB layer deinitialized 10:24:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:39 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) r2 = syz_usb_connect(0x4, 0x317, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0xc0, 0x7a, 0xb9, 0xff, 0x4e6, 0xf, 0x1c4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x305, 0x2, 0x1, 0x8, 0x0, 0x7f, [{{0x9, 0x4, 0x1d, 0x2a, 0x6, 0x1a, 0x8f, 0xac, 0x66, [@uac_as], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0x62, 0x81, 0x0, [@generic={0x9d, 0x6, "b3d4fc2416a0818c5e9210579c42dd2c92749e426f2dd055c442b38ba54568df2d7172d69a2a136d12dccb4c74a45331b37316a0ebf3a45da729e83b56e4cb038bc16eb7f0074ca5c2717c8050cc575a3b65fb26777f1c6095cd9753b569f6b606bc5b7eb2a2106fb731c3d09149e5a6a394340ef88ad3e9a52a1077abbd59e7ae28eae2453de9177877f3e2a626463e2c816535c81777c428ec03"}, @generic={0x22, 0x30, "cea96981ba54bcd1f4e69f74d871f573b0455e475fb0f57236e9394e9389be2f"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x4, 0x7, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x4f, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xaf, 0x200}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0xf8, 0x2, [@generic={0xa2, 0x21, "9480800df5a173e294966f4c230df560d1403017e216c520fb2c7457a7c680a17e3b860e4398cc99139e76398d7e3a2717e49a4ed232588a6bff30ef581c570e740db582f611ea51dd04d8d1e3c4f6fc53e79070aa447e729809d4e0b1722da3ff771e766d9778eb207bf085a7a4a6af7db3948ff37339b9997b431cad47e36859483c059793300f37a58281d36edc2543eda7d84d759bac4e3f5ad0a3138673"}, @generic={0x2d, 0x1, "04d547acde386cf72584b582394a44171d8723add0896dcd276ff45b5d3a6a06c919b4ac85b3c494a7c53d"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x79, 0x9f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xe7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0x1}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0xe8, 0xe4, 0x3}}]}}, {{0x9, 0x4, 0xfc, 0x20, 0x1, 0x9e, 0x59, 0xc2, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x1, 0x9, "c2"}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "e3"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x3f, 0x2, 0x0, 0x5}}], [{{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x63, 0x1, 0x1f, [@generic={0x71, 0xa, "1d5a5b945aae7c79f2ee887b2bc55044d9dfdf3a0e285dcb120cf358bbaf3a53e6254b21c79a283557f17c940d49a958d6d3081c9f32a13f4065f7093c748fa7bb4f2a6856431515cf2fbc4f1851f1ab6d634fdf7f7d064258338d94638d670431edfb5e841d367140ebbadef48b9d"}, @generic={0x69, 0x22, "9bca570d60459d20136ef74290f46e3f60a045d05809fcc05f35e4cbb8208f0410e1dbeafd94df21424d49d3f2dd9bfc672e89da8a12f38f71222476ea7a710a1743f7b5d0d12c34c356766ebc956e6ae6463ca7aa61535e3b32482f9f8f90bcf16e5e008d9470"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x10, 0x81, 0x6, 0xff, 0x2}, 0x5c, &(0x7f00000000c0)={0x5, 0xf, 0x5c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x4, 0x1, 0x7, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "8c76bed3bfd9d64e1527cd82e2f69eb0"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "8c0431cbd7fff9ca99cd3a3ebcc9f665"}, @ssp_cap={0x24, 0x10, 0xa, 0x1f, 0x6, 0x5, 0xf000, 0x0, [0xc0, 0xff0000, 0x0, 0xc7, 0x3f, 0xff0000]}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x447}}, {0xfffffffffffffec2, &(0x7f0000000540)=@string={0xd, 0x3, "d25b5af72f711971d48367"}}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x63, &(0x7f00000005c0)=@generic={0x6, 0x0, 0x5b, "f83bcbd6", "a0425482035cebe6ea0e63dbc6fefd4b927e1feb32202248a81706c32617e1edc8aa74bb3159d513d04421e3eb6e4356712a611d764a67e0177cc00d094a58560e3e4c68df52ba5db0c458eb35960aedbe184bad90eafe3e105481"}) 10:24:39 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5ebfb638105e100002a00004e0f3a19f96ed6f46c1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff200000100004ecc00000101000073f90000003f00004eca0000020000004e000000000100004ef10000000100004e2f0000000100004e92"]) 10:24:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000003c0)={0x7, 0x1f, 0x0, 0x0, "ba090035b8210800000000000000adcb8b8fc47afbc66800007b5c47c5ae1656"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3c1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000010c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b5c02409", {0x3, 0x106, 0x0, 0x1, 0x200, 0x3, 0x2}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001080)=0x8) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x4}, 0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="050f5e00031410245bae59b98250a40410c22529567bea77bb14100409246f3508687e6620bd6d6dbd01436b92311001ce1a666d584c5ac91947695239abea950e"], 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x4, &(0x7f0000000340)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x5f, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x1, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x40, 0x0, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x3}, [@country_functional={0xe, 0x24, 0x7, 0x39, 0x9, [0x2, 0x81, 0x0, 0x4]}, @mdlm_detail={0x4, 0x24, 0x13, 0xd5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x7d, 0x88}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0xe0, 0x1, 0x0, 0x40}, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="050f08040103100b"], 0x6, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000800)=@lang_id={0x4}}, {0x4, &(0x7f0000000840)=@lang_id={0x4}}, {0x74, &(0x7f0000000880)=ANY=[@ANYBLOB="7403e00fd1afc5137484f53cd0d4c8835eb0a3166b4681cc3685692bf196f5f412a820059b36ab809a99aefacf6b608d69d13de94a113ccc9a390273869b28f2ea3e81abcf103ce3fb0f83edcc39afae439a87391b06843bd3dade28e5afc75a9624881fa003592b92fb9394204c75c8ae4ecfb9"]}, {0x2b, &(0x7f0000000780)=ANY=[]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x8c20fdb5f31cbe1c, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0xc0, 0x0, 0x53, 0x0, "029df2a70c0a74b3861184fd66a2734d1d4b9623898daf558b2922bd017ae506"}) syz_open_dev$evdev(&(0x7f00000006c0), 0x7, 0x1c980) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xdc, &(0x7f0000001040)=ANY=[]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, "7bee12797a4ecaae8558c024a50bf0630000000000000000001000"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)=ANY=[@ANYBLOB="1500004e7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a788fbf0986cc76e80b595618d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e92000000"]) 10:24:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1308.618022][ T8086] usb 6-1: Service connection timeout for: 257 [ 1308.624290][ T8086] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1308.646468][ T8086] ath9k_htc: Failed to initialize the device [ 1308.652827][ T7] usb 6-1: ath9k_htc: USB layer deinitialized 10:24:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1308.687563][ T17] usb 4-1: Service connection timeout for: 257 [ 1308.687609][ T2608] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1308.693820][ T17] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1308.716003][ T17] ath9k_htc: Failed to initialize the device [ 1308.723386][ T2105] usb 4-1: ath9k_htc: USB layer deinitialized 10:24:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 10:24:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) [ 1308.897456][ T7439] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1308.957632][ T7235] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1308.987737][ T2608] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1309.017524][ T7] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1309.077559][ T2105] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1309.297744][ T7] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 1309.358104][ T2105] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1309.577718][ T7439] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1309.586947][ T7439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.595345][ T7439] usb 2-1: Product: syz [ 1309.599628][ T7439] usb 2-1: Manufacturer: syz [ 1309.604440][ T7439] usb 2-1: SerialNumber: syz [ 1309.659023][ T7439] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1309.757733][ T7235] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1309.767039][ T7235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.775233][ T7235] usb 1-1: Product: syz [ 1309.779617][ T7235] usb 1-1: Manufacturer: syz [ 1309.784597][ T7235] usb 1-1: SerialNumber: syz [ 1309.789873][ T2608] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1309.799134][ T2608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.808175][ T2608] usb 3-1: Product: syz [ 1309.812586][ T2608] usb 3-1: Manufacturer: syz [ 1309.817202][ T2608] usb 3-1: SerialNumber: syz [ 1309.868621][ T7235] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1309.878577][ T2608] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1310.107555][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1310.116933][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.125064][ T7] usb 6-1: Product: syz [ 1310.129498][ T7] usb 6-1: Manufacturer: syz [ 1310.134396][ T7] usb 6-1: SerialNumber: syz [ 1310.177851][ T2105] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1310.187084][ T2105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.195193][ T2105] usb 4-1: Product: syz [ 1310.199422][ T2105] usb 4-1: Manufacturer: syz [ 1310.204203][ T2105] usb 4-1: SerialNumber: syz [ 1310.209792][ T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1310.259166][ T2105] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1310.407497][ T7439] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.477543][ T2608] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.487538][ T7235] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.787594][ T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.827594][ T2105] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1310.842360][T29681] usb 2-1: USB disconnect, device number 71 [ 1310.889740][ T17] usb 3-1: USB disconnect, device number 126 [ 1310.900383][ T8086] usb 1-1: USB disconnect, device number 44 [ 1311.004769][T18116] udc-core: couldn't find an available UDC or it's busy [ 1311.012041][T18116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1311.025196][T18116] udc-core: couldn't find an available UDC or it's busy [ 1311.032382][T18116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:24:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1311.052845][ T5] usb 4-1: USB disconnect, device number 16 [ 1311.265710][T18116] udc-core: couldn't find an available UDC or it's busy [ 1311.272749][T18116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1311.284876][T18116] udc-core: couldn't find an available UDC or it's busy [ 1311.291902][T18116] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1311.487444][ T7439] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1311.494506][ T7439] ath9k_htc: Failed to initialize the device [ 1311.501786][T29681] usb 2-1: ath9k_htc: USB layer deinitialized [ 1311.516432][ T32] usb 6-1: USB disconnect, device number 47 [ 1311.567482][ T2608] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1311.574831][ T2608] ath9k_htc: Failed to initialize the device [ 1311.582262][ T7235] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1311.590021][ T7235] ath9k_htc: Failed to initialize the device [ 1311.596369][ T17] usb 3-1: ath9k_htc: USB layer deinitialized [ 1311.602638][ T8086] usb 1-1: ath9k_htc: USB layer deinitialized [ 1311.887453][ T2105] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1311.894593][ T2105] ath9k_htc: Failed to initialize the device [ 1311.902232][ T5] usb 4-1: ath9k_htc: USB layer deinitialized 10:24:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r3, 0x400445a0, &(0x7f0000001080)=""/171) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1) write$hidraw(r4, &(0x7f00000000c0)="a5", 0xfffffdef) r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1) write$hidraw(r5, &(0x7f00000000c0)="a5", 0xfffffdef) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xff59, &(0x7f0000002240)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRES64=r2, @ANYRESOCT]) 10:24:43 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 10:24:43 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1311.977470][ T8086] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1311.985146][ T17] usb 3-1: new high-speed USB device number 127 using dummy_hcd 10:24:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x101100) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000200)={0x1, 0xb, 0xff, 0x3024ee7e, "9e40e5c3f5fc7b92641b3c579cd1def015f38ecc3d3a086b931a15ae6081e037"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x80, 0xd, 0x1, 0x0, "63c74542aa3b020dbc02a775cd93f1d28da2dbffe1f6995b7616473bf6c79648"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xffffffffffffff51, &(0x7f0000000340)=ANY=[]) 10:24:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x662, &(0x7f0000000940)="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"}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0xffffff33}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff3d}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x4}, 0x0, 0x0, 0x1, [{0x1a, &(0x7f0000000780)=ANY=[@ANYRESOCT]}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000180)={0xa}, 0x43, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f430006071002001909021c100a000400008e000f1e130f0000000000000000c00000000000006f03100b0a100300000001fc040003100b0b100108040000200000"], 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x0, 0x0}]}) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x6, 0x8201) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000840)=""/195) ioctl$EVIOCSABS0(r2, 0x401845c0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000640)=@conn_svc_rsp={0x0, 0x0, 0xa, "53c935a9", {0x3, 0x101, 0x0, 0x3e, 0x0, 0x7f}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xbf, &(0x7f0000000680)=ANY=[@ANYBLOB="070000b7d8b90d91b9f587f076741d5f6e738af2086f6d55ae1139ef7cb14766fdb52c1438f589a654050a372ba3d6b24ef12bd3ca2754d32d375e49326119f8220c44df94276d9166a0df7cba715bbf7afc97858cfe4a0012fbd7f0cfee6c225dc88905289f5e2fdbfb442e9ef150730e7b765a4a8b985ebefe513e26a43efa198350ca4fd2a9600aad93a4a5381087af73968a0dd2bf0453fb5dcf75cc46a4a68bd33769414fb25c0371bfba33de67f4a085d63b31584851ab381396a35e495d4090"]) syz_usb_connect_ath9k(0x3, 0xffffffffffffff91, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e5dd, [{{0x9, 0x2, 0x35}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x82, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:43 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) 10:24:43 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x6, 0x17, 0x5, 0x8, "753f8af0eb8070d536be5d1e3f1ac273a4ff99c2c33dc7cc41db115c691a6143"}) 10:24:43 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) 10:24:43 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000100)="17e4a4d6d168c35f7d08e3fd28184f55cf29a494e03825c447169f28b647d63a850ffc7e9d84421392ea663c88f9cb50e2223b113608a800d7f43aac994bae71ebc0a2f3e2ee9dfec00c23e4ef5c43546480e9b22ba7e9189c84a764402f434a666d8501f030c48f380ee800075d8d12529b1e82094b2ed42c06e7b6997525149266e46c1e870213fce6977e3adc52092563c89f9568d89c4452267f96e68dd6658a7079291cfdc36ad07866d3481e06ac4ec6bd7739e9a9da228d06acd4c2881d4a4c1b833a074567dc8dbe9a7dcbad52ae39c928180e102a853b504a03ad", 0xdf) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) write$hidraw(0xffffffffffffffff, &(0x7f00000002c0)="151c96245ee6541f136c5930cd2930748db5665688", 0x15) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x14, 0xb4, &(0x7f0000000200)="62bf77345c92397654610ec9914bdce0d929d7cdea8316600ce59c6d037cfda4f9f38b3f8461d796c6707c4c7911fb91d793f1bf8969caadc27f0d8d8fe8ae8fb47ea5fb5bde156aae2a16c67e0a77be9ddcc07da6c1782ac4d1c1acc933c94435762194d638576c6609a390a5f81056eb7387048890f9b2867069c86dae54a57fdbee491f2fc86a42afd927e3e7766fd693860f04737f2e6ce64d19370801c67dd45d6832266f2a569c08426b5ad7eeee30e3c3"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="fe00006e3500000009fe000000000000"], 0x0) 10:24:43 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) [ 1312.287511][ T5] usb 4-1: new high-speed USB device number 17 using dummy_hcd 10:24:43 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) [ 1312.367592][ T7] usb 6-1: Service connection timeout for: 257 [ 1312.373835][ T7] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1312.387442][ T7] ath9k_htc: Failed to initialize the device [ 1312.394125][ T32] usb 6-1: ath9k_htc: USB layer deinitialized [ 1312.467500][ T8086] usb 1-1: device descriptor read/64, error -71 [ 1312.577606][ T5] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1312.597433][ T7439] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1312.717431][ T17] usb 3-1: device descriptor read/64, error -71 [ 1312.777444][ T32] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1312.877473][ T7439] usb 2-1: device descriptor read/64, error 18 [ 1312.887967][ T8086] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1313.057745][ T32] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 1313.117951][ T17] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1313.267453][ T7439] usb 2-1: device descriptor read/64, error 18 [ 1313.537744][ T7439] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1313.607539][ T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1313.616673][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.624750][ T5] usb 4-1: Product: syz [ 1313.628995][ T5] usb 4-1: Manufacturer: syz [ 1313.633604][ T5] usb 4-1: SerialNumber: syz [ 1313.687813][ T8086] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1313.688510][ T5] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1313.696984][ T8086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.713226][ T8086] usb 1-1: Product: syz [ 1313.717450][ T8086] usb 1-1: Manufacturer: syz [ 1313.722052][ T8086] usb 1-1: SerialNumber: syz [ 1313.768264][ T8086] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1313.807473][ T7439] usb 2-1: device descriptor read/64, error 18 [ 1313.877649][ T32] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1313.886820][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.894909][ T32] usb 6-1: Product: syz [ 1313.899257][ T32] usb 6-1: Manufacturer: syz [ 1313.903875][ T32] usb 6-1: SerialNumber: syz [ 1313.948053][ T17] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1313.957102][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.965164][ T17] usb 3-1: Product: syz [ 1313.969419][ T17] usb 3-1: Manufacturer: syz [ 1313.974047][ T17] usb 3-1: SerialNumber: syz [ 1313.980033][ T32] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1314.028438][ T17] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:24:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:45 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) [ 1314.098771][ T8086] usb 4-1: USB disconnect, device number 17 [ 1314.120096][ T5] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1314.129083][ T8086] usb 4-1: ath9k_htc: USB layer deinitialized 10:24:45 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) 10:24:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1314.220004][ T7439] usb 2-1: device descriptor read/64, error 18 [ 1314.339270][ T7439] usb usb2-port1: attempt power cycle [ 1314.377597][ T7476] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1314.557682][ T32] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1314.581556][T18239] udc-core: couldn't find an available UDC or it's busy [ 1314.588567][T18239] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1314.607671][ T17] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1314.657667][ T8086] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1314.757605][ T7439] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1314.763029][T18240] udc-core: couldn't find an available UDC or it's busy [ 1314.772175][T18240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1314.781835][T18240] udc-core: couldn't find an available UDC or it's busy [ 1314.789023][T18240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1314.798135][T18240] udc-core: couldn't find an available UDC or it's busy [ 1314.805113][T18240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1314.814350][T18240] udc-core: couldn't find an available UDC or it's busy [ 1314.818258][ T7235] usb 1-1: USB disconnect, device number 45 [ 1314.821356][T18240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1314.845184][T18240] udc-core: couldn't find an available UDC or it's busy [ 1314.852312][T18240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1314.957713][ T7439] usb 2-1: device descriptor read/8, error -61 [ 1314.964305][ T8086] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1315.018213][ T7] usb 3-1: USB disconnect, device number 127 [ 1315.080819][T29987] usb 6-1: USB disconnect, device number 48 [ 1315.237514][ T7439] usb 2-1: device descriptor read/8, error -61 10:24:46 executing program 4 (fault-call:2 fault-nth:0): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1315.318478][T18318] udc-core: couldn't find an available UDC or it's busy [ 1315.325567][T18318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1315.382329][T18323] FAULT_INJECTION: forcing a failure. [ 1315.382329][T18323] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1315.395765][T18323] CPU: 0 PID: 18323 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1315.404556][T18323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.414628][T18323] Call Trace: [ 1315.417918][T18323] dump_stack+0x143/0x1db [ 1315.422287][T18323] should_fail.cold+0x5/0xa [ 1315.426847][T18323] _copy_from_user+0x2c/0x180 [ 1315.431557][T18323] input_event_from_user+0x131/0x3a0 [ 1315.437044][T18323] ? input_event_to_user+0x3a0/0x3a0 [ 1315.442456][T18323] ? find_held_lock+0x2d/0x110 [ 1315.447262][T18323] evdev_write+0x356/0x760 [ 1315.451719][T18323] ? evdev_read+0xe40/0xe40 [ 1315.456249][T18323] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1315.462554][T18323] ? security_file_permission+0x248/0x560 [ 1315.468322][T18323] ? evdev_read+0xe40/0xe40 [ 1315.472821][T18323] vfs_write+0x28e/0x9e0 [ 1315.477059][T18323] ksys_write+0x1ee/0x250 [ 1315.481388][T18323] ? __ia32_sys_read+0xb0/0xb0 [ 1315.486166][T18323] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1315.492149][T18323] ? syscall_enter_from_user_mode+0x27/0x70 [ 1315.499141][T18323] do_syscall_64+0x3a/0xb0 [ 1315.503551][T18323] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1315.509445][T18323] RIP: 0033:0x4665d9 [ 1315.513393][T18323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.532991][T18323] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1315.541407][T18323] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1315.549367][T18323] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1315.557350][T18323] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1315.565346][T18323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.573327][T18323] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:24:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000740)=@lang_id={0x4}}, {0xc1, &(0x7f0000000e80)=ANY=[@ANYBLOB="c1031df23af6fc444dc31da52f2eb2ec62da9b958aac0069ab93b4a45e4df69443e05418bcea4a173e0843dd4d7a381dd13a033371bbe74deff8bc3796dcabf3b355d7ff383ed50087fd4d720bfa03959281a39d9580e58d90c4c488d1d744d9037a89e5a5f6f6bbee66ca0a4f140ab5070253d1f5e408b8939ea7228c326fcf8b4cbdc2f0a4264c895255e1ef955a54035dfd7f936f1b69c18d4a71c250d87f1a31218d3ca1065d62062e3ee1d3596c51e482d22882c900000000000000"]}, {0x2, &(0x7f0000000f80)=ANY=[@ANYBLOB="0203d13f33e9525d75d71e9888c5357a1f5f884b2e2a95fa0e106fa2abc28fc08bc6c48a35e1be853dcfd352b4b1db247bfa9fb21e231332cb57c04a4629468a8d"]}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x101, &(0x7f0000000d40)=ANY=[@ANYRES16]}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdf, 0xb05, 0x183d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xb66}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0x0, 0x1, 0x8, 0xff}, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="050f050005"], 0x3, [{0xa, &(0x7f00000003c0)=@string={0xa, 0x3, "a9893c253c317d11"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4}}, {0x5, &(0x7f0000000d80)=@string={0x5, 0x3, "dba136"}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000700)=[0x9]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], &(0x7f0000001240)={0xa, &(0x7f0000000180)={0xa}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b80000000799d5ceeab479a3ffa6a6f2239a3e458c024a41bf0630000000100"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x2}, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="01d6"], 0x6, [{0x81, &(0x7f0000000b40)=@string={0x81, 0x3, "c86223e001df9a42a8e3f4cff5dfbf2afed9e8c8e658f2448f6dedfdaa05cc40a77ee048dc25f442186476b29ef3ef2f7369c85bda2060b29af44e9cfd0612256b2fd09cfea2aa7dab8bd91d7f8de4f4394c9c9b6fc148d59755b8f3cb87bc2fca4e63dda83e8f310c58baf822eca23bd4c169ad5a582031b98e6d1e9608f3"}}, {0x1d, &(0x7f0000000c40)=@string={0x1d, 0x3, "8d75f440d5c759f9ffa7aab5f3de8b955b705e833b3987b925134b"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000006a0561004000010203010902240001010400ff09040000000301000000210000030122f10f0905810300000040ff0cfd147c4a18a03808f81d"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa}, 0x0, 0x0, 0x2, [{0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="16030100000000000000ecd2db22e4b300460f0ddc1b36891f"]}, {0x30, &(0x7f0000000c80)=@string={0x30, 0x3, "265576138825f22558c235bd05aad2a410fd95266e128ea20bad03b36197f0d50faa728966cfb0f3d97b9f675d17"}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:46 executing program 1: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086602, &(0x7f0000000080)) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x8, 0x200) write$hidraw(r2, &(0x7f0000000140)="3550a0a1095f0075d434750c95", 0xd) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x123040) read$hidraw(r3, &(0x7f0000000040)=""/62, 0xfffffe4d) write$hidraw(r3, &(0x7f0000000180)="6814b03f7a7d92c77e74f23a9b8baec28bda56989b72aa7fbdf27b627a", 0x1d) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @rumble={0x0, 0xbff}}) write$hidraw(r4, &(0x7f0000000000)="03", 0xfd50) ioctl$HIDIOCGRAWNAME(r1, 0x40305829, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000100)="9a", 0xfffff000) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x401, "ed105400000000003ec13e2000000000000000000000000000002000"}) [ 1315.587708][ T7476] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1315.597730][ T7476] ath9k_htc: Failed to initialize the device [ 1315.611120][ T7235] usb 1-1: ath9k_htc: USB layer deinitialized [ 1315.656390][ T17] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1315.657674][ T33] audit: type=1800 audit(1624530286.772:3130): pid=18333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14105 res=0 errno=0 [ 1315.666193][ T17] ath9k_htc: Failed to initialize the device [ 1315.728496][ T7] usb 3-1: ath9k_htc: USB layer deinitialized [ 1315.887461][ T32] usb 6-1: Service connection timeout for: 256 [ 1315.893708][ T32] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1315.902787][ T32] ath9k_htc: Failed to initialize the device [ 1315.909355][T29987] usb 6-1: ath9k_htc: USB layer deinitialized [ 1316.057514][ T8086] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1316.066631][ T8086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.074710][ T8086] usb 4-1: Product: syz [ 1316.078966][ T8086] usb 4-1: Manufacturer: syz [ 1316.083571][ T8086] usb 4-1: SerialNumber: syz [ 1316.097446][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd 10:24:47 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @rumble={0x0, 0x4008}}) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8400) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0xf, 0x0, 0x105, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x64, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x18, [{{0x9, 0x2, 0xfffffffffffffd5c}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500004e7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088000100004ecc0000000100104ef90000000100004eca0006000100004e000000000100004ef10000000100004e2f0000000100004e920000001962baaf73a02fec7885e6e2b4fbf967ee95f331e44c11d67562f51a84677897d50c"]) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xffff, 0x1c040) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000200)={0x5, 0x12, 0x7f, 0x9, "c3f1f9635fafdb3c9e2f585d96fe16b513468eb435f6b066c97869be26673b9d"}) 10:24:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x40) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000140)=@conn_svc_rsp={0x0, 0x0, 0xa, "f4d5c7fa", {0x3, 0x104, 0x0, 0x2, 0x401, 0x9, 0x7f}}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000340)=[0x7, 0xffff0001]) 10:24:47 executing program 4 (fault-call:2 fault-nth:1): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x6c1, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x101102) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x4, 0x87, &(0x7f0000000640)="43071866d1e044de9bc466cd29fb1a7f8cc63e3208605ee23b29397a1e2d1386e4a9923c294d210ff9727890d7a247b48514abe95d87116f3d67f56d9a5ceb301a25d0fe36f5713ed32d5f56491b3d5a651b995ba6770d42f1974e53ab06c2db494e8594f641fffafd3b806397c5d75a487677ff50427250a5ac70f2606af1c2dc7999802e929b"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600003ced69c906c00000000000007a7668745a6fefaf21983c9126cbbd970bfbb175b21de4a4ddee7b8d0809e4f06d65ffe274318677088751ff01433278f1223e8c44"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc1, &(0x7f0000000780)=ANY=[@ANYRES16=r1]) syz_usb_connect_ath9k(0x3, 0x59, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x43, &(0x7f0000000700)=ANY=[@ANYBLOB="0200003bc6bf4aa7a0dcaec2b2f34fee151f1c9b54fa71376441b872f3cd8329ead645b1eb4e884cf43e5522d8aaa8270dcb18037b96d288e9469cf09a875edb1b01708cea5119408c78a42c15f4e026e413de94ef5b2be9f58ed85c00"/104]) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1316.128482][ T8086] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1316.195144][T18361] FAULT_INJECTION: forcing a failure. [ 1316.195144][T18361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.208517][T18361] CPU: 0 PID: 18361 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1316.217292][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.227398][T18361] Call Trace: [ 1316.230692][T18361] dump_stack+0x143/0x1db [ 1316.235047][T18361] should_fail.cold+0x5/0xa [ 1316.239581][T18361] _copy_from_user+0x2c/0x180 [ 1316.244325][T18361] input_event_from_user+0x131/0x3a0 [ 1316.249637][T18361] ? input_event_to_user+0x3a0/0x3a0 [ 1316.254951][T18361] evdev_write+0x356/0x760 [ 1316.259412][T18361] ? evdev_read+0xe40/0xe40 [ 1316.263942][T18361] ? security_file_permission+0x248/0x560 [ 1316.269697][T18361] ? evdev_read+0xe40/0xe40 [ 1316.274231][T18361] vfs_write+0x28e/0x9e0 [ 1316.278502][T18361] ksys_write+0x1ee/0x250 [ 1316.282866][T18361] ? __ia32_sys_read+0xb0/0xb0 [ 1316.287456][T29987] usb 6-1: new high-speed USB device number 49 using dummy_hcd 10:24:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "57f968e9", {0x1, 0x29, 0x401, 0x40, 0x1}}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x119c, &(0x7f0000000900)={[{0x42, 0x4e00, "020862c8062585ee4d794b2ab2c5050770f0944fb7037bad12f1db771b738af0f13636742e1d02503ef1d28fb3a449629d7d299345dd01ef2d2af0a6d309e6ee1387"}, {0x50, 0x4e00, "6c7192b7ac9a572a44658c0dbd0865795fa13b819b01952521721fb142fcb47bcaab3714a5e3999dd6e6bc873a4036c511d2945fd604ab4d9480c5d33ff3f52c2467f58f679a17d4f42f877ffa96be6c"}, {0x1000, 0x4e00, "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"}, {0xf5, 0x4e00, "23c8ab2ea00698a87550532af30997be0ce77401723f57b3f02f6a7b38f667721d8b735be70797d45950d418d9557bb66e21bae15f60511ebc3919d920f86ffbb817a61f9f82d5767799160d73d4c9acde2391e5b3dc71055762d4aed7a51392848205fb0dac0509dd6898cff3fdff014315e1085e408468a917a607c81bdabdaf2ed2433f2342ad7a16fd2e42188fdee33a6bce2fe2d502f033e404baeb15d30534304a8549241b4623e878e637a4365b35243544f4c804d3cbb61ab0bf3d7578bf83548b680a26fb2c3acf1b2cd64a47bca775cd3a99f4879208c367e8286c73ab349b4cf9145f5ae1034470d8abe9e9e2cef8c5"}]}) [ 1316.287648][T18361] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1316.301271][T18361] ? syscall_enter_from_user_mode+0x27/0x70 [ 1316.307280][T18361] do_syscall_64+0x3a/0xb0 [ 1316.311715][T18361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1316.317720][T18361] RIP: 0033:0x4665d9 [ 1316.321626][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:24:47 executing program 4 (fault-call:2 fault-nth:2): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1316.341423][T18361] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1316.349859][T18361] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1316.358099][T18361] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1316.366096][T18361] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.374229][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.382188][T18361] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1316.423559][T18373] FAULT_INJECTION: forcing a failure. [ 1316.423559][T18373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.436839][T18373] CPU: 1 PID: 18373 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1316.446015][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.456149][T18373] Call Trace: [ 1316.459440][T18373] dump_stack+0x143/0x1db [ 1316.463835][T18373] should_fail.cold+0x5/0xa [ 1316.468411][T18373] _copy_from_user+0x2c/0x180 [ 1316.473237][T18373] input_event_from_user+0x131/0x3a0 [ 1316.478525][T18373] ? input_event_to_user+0x3a0/0x3a0 [ 1316.483878][T18373] evdev_write+0x356/0x760 [ 1316.488294][T18373] ? evdev_read+0xe40/0xe40 [ 1316.493017][T18373] ? security_file_permission+0x248/0x560 [ 1316.498896][T18373] ? evdev_read+0xe40/0xe40 [ 1316.503433][T18373] vfs_write+0x28e/0x9e0 [ 1316.508022][T18373] ksys_write+0x1ee/0x250 [ 1316.512470][T18373] ? __ia32_sys_read+0xb0/0xb0 [ 1316.517364][T18373] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1316.523361][T18373] ? syscall_enter_from_user_mode+0x27/0x70 [ 1316.529358][T18373] do_syscall_64+0x3a/0xb0 [ 1316.533802][T18373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1316.539727][T18373] RIP: 0033:0x4665d9 [ 1316.543627][T18373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1316.564143][T18373] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:24:47 executing program 4 (fault-call:2 fault-nth:3): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1316.572636][T18373] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1316.580728][T18373] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1316.588775][T18373] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.596864][T18373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.604946][T18373] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1316.651853][T18375] FAULT_INJECTION: forcing a failure. [ 1316.651853][T18375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.665195][T18375] CPU: 1 PID: 18375 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1316.673971][T18375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.684196][T18375] Call Trace: [ 1316.687472][T18375] dump_stack+0x143/0x1db [ 1316.691933][T18375] should_fail.cold+0x5/0xa [ 1316.696468][T18375] _copy_from_user+0x2c/0x180 [ 1316.701239][T18375] input_event_from_user+0x131/0x3a0 [ 1316.706702][T18375] ? input_event_to_user+0x3a0/0x3a0 [ 1316.711993][T18375] evdev_write+0x356/0x760 [ 1316.716462][T18375] ? evdev_read+0xe40/0xe40 [ 1316.721014][T18375] ? security_file_permission+0x248/0x560 [ 1316.726809][T18375] ? evdev_read+0xe40/0xe40 [ 1316.731309][T18375] vfs_write+0x28e/0x9e0 [ 1316.735558][T18375] ksys_write+0x1ee/0x250 [ 1316.740008][T18375] ? __ia32_sys_read+0xb0/0xb0 [ 1316.744804][T18375] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1316.750867][T18375] ? syscall_enter_from_user_mode+0x27/0x70 [ 1316.756794][T18375] do_syscall_64+0x3a/0xb0 [ 1316.761261][T18375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1316.767254][T18375] RIP: 0033:0x4665d9 [ 1316.771162][T18375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1316.790762][T18375] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1316.799231][T18375] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1316.807402][T18375] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1316.815364][T18375] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.823343][T18375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.831348][T18375] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1316.840308][ T7439] usb 2-1: new high-speed USB device number 75 using dummy_hcd 10:24:47 executing program 4 (fault-call:2 fault-nth:4): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1316.848019][ T5] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1316.878036][T29987] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 1316.890047][T18377] FAULT_INJECTION: forcing a failure. [ 1316.890047][T18377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.903279][T18377] CPU: 0 PID: 18377 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1316.912046][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.922130][T18377] Call Trace: [ 1316.925398][T18377] dump_stack+0x143/0x1db [ 1316.929760][T18377] should_fail.cold+0x5/0xa [ 1316.934440][T18377] _copy_from_user+0x2c/0x180 [ 1316.939116][T18377] input_event_from_user+0x131/0x3a0 [ 1316.944444][T18377] ? input_event_to_user+0x3a0/0x3a0 [ 1316.949723][T18377] evdev_write+0x356/0x760 [ 1316.954159][T18377] ? evdev_read+0xe40/0xe40 [ 1316.958664][T18377] ? security_file_permission+0x248/0x560 [ 1316.964416][T18377] ? evdev_read+0xe40/0xe40 [ 1316.968963][T18377] vfs_write+0x28e/0x9e0 [ 1316.973246][T18377] ksys_write+0x1ee/0x250 [ 1316.977598][T18377] ? __ia32_sys_read+0xb0/0xb0 [ 1316.977741][ T7439] usb 2-1: too many configurations: 210, using maximum allowed: 8 [ 1316.982425][T18377] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1316.996231][T18377] ? syscall_enter_from_user_mode+0x27/0x70 [ 1317.002147][T18377] do_syscall_64+0x3a/0xb0 [ 1317.006597][T18377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1317.012764][T18377] RIP: 0033:0x4665d9 [ 1317.016702][T18377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1317.036314][T18377] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1317.044751][T18377] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1317.052901][T18377] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1317.060899][T18377] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1317.068881][T18377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.077014][T18377] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1317.077554][ T8086] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1317.085721][ T7] usb 3-1: device descriptor read/64, error -71 10:24:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:48 executing program 4 (fault-call:2 fault-nth:5): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1317.260113][ T7235] usb 4-1: USB disconnect, device number 18 [ 1317.297814][ T5] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1317.298840][T18381] FAULT_INJECTION: forcing a failure. [ 1317.298840][T18381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.318969][T18381] CPU: 1 PID: 18381 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1317.327773][T18381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.337856][T18381] Call Trace: [ 1317.341160][T18381] dump_stack+0x143/0x1db [ 1317.345525][T18381] should_fail.cold+0x5/0xa [ 1317.350073][T18381] _copy_from_user+0x2c/0x180 [ 1317.354821][T18381] input_event_from_user+0x131/0x3a0 [ 1317.360152][T18381] ? input_event_to_user+0x3a0/0x3a0 [ 1317.365471][T18381] evdev_write+0x356/0x760 [ 1317.369928][T18381] ? evdev_read+0xe40/0xe40 [ 1317.374463][T18381] ? security_file_permission+0x248/0x560 [ 1317.380230][T18381] ? evdev_read+0xe40/0xe40 [ 1317.384777][T18381] vfs_write+0x28e/0x9e0 [ 1317.389055][T18381] ksys_write+0x1ee/0x250 [ 1317.393476][T18381] ? __ia32_sys_read+0xb0/0xb0 [ 1317.398318][T18381] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1317.404338][T18381] ? syscall_enter_from_user_mode+0x27/0x70 [ 1317.410274][T18381] do_syscall_64+0x3a/0xb0 [ 1317.414727][T18381] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1317.421635][T18381] RIP: 0033:0x4665d9 [ 1317.425552][T18381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1317.445192][T18381] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1317.453642][T18381] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1317.461675][T18381] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1317.469677][T18381] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1317.477980][T18381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.485960][T18381] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1317.687640][ T7] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1317.847589][T29987] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1317.856725][T29987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.864947][T29987] usb 6-1: Product: syz [ 1317.869180][T29987] usb 6-1: Manufacturer: syz [ 1317.873809][T29987] usb 6-1: SerialNumber: syz [ 1317.918529][T29987] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1317.997609][ T7439] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1318.006701][ T7439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.014922][ T7439] usb 2-1: Product: syz [ 1318.019149][ T7439] usb 2-1: Manufacturer: syz [ 1318.023778][ T7439] usb 2-1: SerialNumber: syz [ 1318.068770][ T7439] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1318.127513][ T8086] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1318.134653][ T8086] ath9k_htc: Failed to initialize the device [ 1318.142348][ T7235] usb 4-1: ath9k_htc: USB layer deinitialized [ 1318.407589][ T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1318.416922][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.424996][ T5] usb 1-1: Product: syz [ 1318.429342][ T5] usb 1-1: Manufacturer: syz [ 1318.433984][ T5] usb 1-1: SerialNumber: syz [ 1318.478466][ T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1318.508040][T29987] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1318.521550][ T7235] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1318.607548][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1318.616684][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.624745][ T7] usb 3-1: Product: syz [ 1318.628964][ T7] usb 3-1: Manufacturer: syz [ 1318.633584][ T7] usb 3-1: SerialNumber: syz [ 1318.637475][ T7439] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:24:49 executing program 5: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x10d5c1) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000140)=""/19) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0xf, 0x0, 0x403, "f3c0540000000000000000000400000600000000000000e62b00"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x210, &(0x7f0000000340)={[{0x98, 0x4e00, "c252e5f276df0ee9d99c07c96345faa7513524500bceeca83b77da3f518bcd408e98b9fc06c0bf42c5bb24803a6a097cec97e1d98fe5df9c95f00308e4a9d127a5f1093323c5f1458ae526b9ec49ae6b1da6afd8781327eef08369c836eec2602031f151c79cab979b6eeeb5f8e19099c7d37e44b3320e73c0ba3bffd4600bbd9702962934ef5f0774125ffcb73f25d243e4a953898930cc"}, {0x17, 0x4e00, "bba00413c3a7bb7e11c4c2258d5323350f57549934eaff"}, {0x55, 0x4e00, "961ff79f999eb1f151133dbded834c8738b9fd5a4216dc096b3fe5b0f1ec244606262b69f808e9768a11dfaeb79df4f678d8c0df0e8ee2207efeb4b25c5734af7bed83a2eb93d24e7e96fb1f95d91ac8e42d9fd598"}, {0x45, 0x4e00, "95b95db2b429ffcfb6a1f4eb9735324125c417d72ba4444eab94118000ba906fb27223c3aad2ee623ee237f2733bf8154a2a1a940098e91de6a87ff2580ff5e803387752f8"}, {0x1, 0x4e00, 'Y'}, {0x48, 0x4e00, "14879e05786d7099b187a52e4f668ae40551985d0f3b027f7d844fb1653a0a7f275cb415b4abe2aaec7507c6d811beb995dd9dbfd53d84e3d9bbf38eed35f3629b47de1635c06208"}, {0xa, 0x4e00, "d6eb1e043def98f43400"}, {0x1, 0x4e00, "e3"}, {0x40, 0x4e00, "2fc0dbaa061c19e89c93c16e736443ed66b7ca721a2bfb8c00000000000000000399ca0df6a08c4ce4862d77f42ec5df0f9094def78839119321db0d49b48d93"}]}) 10:24:49 executing program 4 (fault-call:2 fault-nth:6): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1318.707156][ T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1318.729685][ T7] usb 6-1: USB disconnect, device number 49 [ 1318.770595][T18420] FAULT_INJECTION: forcing a failure. [ 1318.770595][T18420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.783925][T18420] CPU: 0 PID: 18420 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1318.792711][T18420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.802774][T18420] Call Trace: [ 1318.806066][T18420] dump_stack+0x143/0x1db [ 1318.810423][T18420] should_fail.cold+0x5/0xa [ 1318.815336][T18420] _copy_from_user+0x2c/0x180 [ 1318.820064][T18420] input_event_from_user+0x131/0x3a0 [ 1318.825354][T18420] ? input_event_to_user+0x3a0/0x3a0 [ 1318.830669][T18420] evdev_write+0x356/0x760 [ 1318.835127][T18420] ? evdev_read+0xe40/0xe40 [ 1318.839625][T18420] ? security_file_permission+0x248/0x560 [ 1318.845350][T18420] ? evdev_read+0xe40/0xe40 [ 1318.849900][T18420] vfs_write+0x28e/0x9e0 [ 1318.854320][T18420] ksys_write+0x1ee/0x250 [ 1318.858648][T18420] ? __ia32_sys_read+0xb0/0xb0 [ 1318.863411][T18420] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1318.869423][T18420] ? syscall_enter_from_user_mode+0x27/0x70 [ 1318.875525][T18420] do_syscall_64+0x3a/0xb0 [ 1318.879936][T18420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1318.885837][T18420] RIP: 0033:0x4665d9 [ 1318.889728][T18420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1318.909348][T18420] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1318.917868][T18420] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1318.925845][T18420] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1318.933834][T18420] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1318.941845][T18420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.949827][T18420] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:24:50 executing program 4 (fault-call:2 fault-nth:7): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1318.965646][T18360] udc-core: couldn't find an available UDC or it's busy [ 1318.972686][T18360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1318.998562][ T7235] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1319.011687][T18426] FAULT_INJECTION: forcing a failure. [ 1319.011687][T18426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.024979][T18426] CPU: 1 PID: 18426 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1319.033770][T18426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.044131][T18426] Call Trace: [ 1319.047462][T18426] dump_stack+0x143/0x1db [ 1319.051927][T18426] should_fail.cold+0x5/0xa [ 1319.056452][T18426] _copy_from_user+0x2c/0x180 [ 1319.061151][T18426] input_event_from_user+0x131/0x3a0 [ 1319.066495][T18426] ? input_event_to_user+0x3a0/0x3a0 [ 1319.071844][T18426] evdev_write+0x356/0x760 [ 1319.076439][T18426] ? evdev_read+0xe40/0xe40 [ 1319.080969][T18426] ? security_file_permission+0x248/0x560 [ 1319.086968][T18426] ? evdev_read+0xe40/0xe40 [ 1319.091537][T18426] vfs_write+0x28e/0x9e0 [ 1319.095802][T18426] ksys_write+0x1ee/0x250 [ 1319.100176][T18426] ? __ia32_sys_read+0xb0/0xb0 [ 1319.105010][T18426] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1319.111801][T18426] ? syscall_enter_from_user_mode+0x27/0x70 [ 1319.117905][T18426] do_syscall_64+0x3a/0xb0 [ 1319.122366][T18426] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1319.128340][T18426] RIP: 0033:0x4665d9 [ 1319.132404][T18426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1319.152438][T18426] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1319.161101][T18426] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1319.169104][T18426] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1319.171886][ T2105] usb 1-1: USB disconnect, device number 46 [ 1319.177108][T18426] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1319.177136][T18426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.177151][T18426] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1319.207963][ T5] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed 10:24:50 executing program 0: r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xcb3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x7f}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x40, 0x4, 0x7, 0x8, 0x81}, 0x3a, &(0x7f0000000480)={0x5, 0xf, 0x3a, 0x2, [@generic={0x21, 0x10, 0xb, "995787a13bf61c1d6a713aed5a2ea6e57bd3836400a10370b4a0a4b49152"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "7ae4cb73231d86ec8e3aaae4ad57deb4"}]}, 0x5, [{0xb6, &(0x7f00000004c0)=ANY=[@ANYBLOB="b6033b1f314d05b04b12d9c068e87a22a021417ae01763fd1de9f05ca0d819057312639a2f29dc98fd18a06e4b36592a8f82edc62c81fd185588fc0b9f17f884875f128e07f5ec3d1c83f2d58083e622b78eec419394d6567b5807a72c2c1f3c287e477f82435ea45c2f840df6081af5bb716996b28152e4bd090000007959ee273eeeb5b8659a5203895004211133dc4b05dbabb61a21f416ad71cbd11f16b0af73efb7b56e9f1fed405535d25570d1e0"]}, {0x52, &(0x7f0000000580)=@string={0x52, 0x3, "026db459fa64c8da37ff318aceb643206365f1e8b2b83426160a21f8dc6ff788470fda080bcd67a11e509c0c1566617e680c63d2c4d0ec97ed7de7cd8d5f0eb9491c6a5e4a852c2454a3fe020a454c4d"}}, {0x9b, &(0x7f0000000600)=@string={0x9b, 0x3, "e813b05e625c1ac3dc6176493463cad2e231a403bcc84392a903664a1685a0bbb5aeec5e8c541ea347f18e99fef659f9e20fdbed9cba1fbbd537e8e01e20fd0e5d2406680dbaa8c7ba18f752d28ee45ba40cce1fc2cc8fa7c712b6acbb0693194d7bdaaa123212e2a2008352acbd794a09746924702d7d79a6d16cb2e31316675185f5ec1d764e63c8c429a58d253008e091872353a39fbb9d"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xff, &(0x7f0000000700)=@string={0xff, 0x3, "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"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f0000000880)={0x40, 0x1, 0x2d, {0x2d, 0x1, "136ec62e07109215698f4eb878e470c9b50f0bcac0aa78ab97f8f5301f0315af2d72f764e8588c9640c541"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f0000000900)={0x0, 0x22, 0x26, {[@local=@item_012={0x2, 0x2, 0x1, "ab07"}, @global=@item_012={0x1, 0x1, 0x6, "91"}, @local=@item_4={0x3, 0x2, 0x4, "0d23a742"}, @global=@item_4={0x3, 0x1, 0x2, "debd52e3"}, @local=@item_4={0x3, 0x2, 0x5, "542fd724"}, @main=@item_012={0x1, 0x0, 0xa, 'a'}, @main=@item_012={0x2, 0x0, 0xb, "b1cd"}, @main=@item_4={0x3, 0x0, 0xc, "8e7f3352"}, @local=@item_4={0x3, 0x2, 0x0, "3bbc9f68"}, @main=@item_012={0x2, 0x0, 0xc, "e2d4"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x2ea}}}}, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x40, 0xf, 0x41, "f292120289dc6d5496ff980dae5624b24b20eff27e0ae2632f75565c25477ff1287807bed6739f5fb515e979ff7e9bd3353ec955ce7903aed897d00c33976c56f4"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2001230000007b36f28a423567f31ee027fcfea084156c7f83cbdad8e4c9ba00"/41], &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x6}}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x87, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000f40), 0xfffffffffffffffa, 0x484800) ioctl$EVIOCGVERSION(r3, 0x400445a0, &(0x7f0000001080)=""/171) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = syz_usb_connect(0x4, 0x936, &(0x7f0000001140)={{0x12, 0x1, 0x310, 0x3f, 0xc9, 0x42, 0x10, 0x10b9, 0x8000, 0xff8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x924, 0x4, 0x3f, 0x0, 0xa0, 0x32, [{{0x9, 0x4, 0x3f, 0x6, 0x5, 0x48, 0x17, 0x24, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a048"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0xdd, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x0, 0x4, 0x50, 0x2, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x8, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x12}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x98, 0x7}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x61e9, 0xfffd}]}, @generic={0xb2, 0xf, "46db6fd704c6b92462eba7a9a4ba62002098f7250ab0e60dd28e3c1c20a1bac10cac153d6c71fa8910fd5cb1a7b3f35a49076a7848fad137f5360c232048a7844baf2b8c2a846cff5270a78a269dff27c7cf7e78b13559c52b3c1097f89aaeae548ec66709d2401b265ed1ce96d1b515093d833e4098ebbd1b3c980cedaec0a6ba85d77f686e696f60d649aa6c6fca1c75d88e359d5d786c0b29be1653b5563a79412ec655c8c715692630062f4be0fa"}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x4, 0x7, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x80, 0x20, 0x0, [@generic={0xc9, 0x30, "5dee340602cdb5473821d1b3d3d9b229048683e307bee9dbc9d06f766b22eec82d3fc0e2395f47095ad04c7a1f1693f83fefaf63a00740cbf9388ace4044829460efa962a56377354e060d61c8956bf37eed5c792a9eff420170a382eb3341f8a90838d92a43a7a7ba8d3846e533975c7af01abaa01733cf294d6d696f189d56bad22a0912d87db15d0554f033cc052c06c46cba33922009f94ed7d8517e3ce85211aca4f399fe5106a059d5ac5fc66b32af27cfd48c4481367d8844ab8d55ff2b8b1bc90a99bc"}, @generic={0x6d, 0x0, "a070cdfc43c18733c33ca7601d2bf5d00c8d47124b419ce28038c9b9f91cc92c3c15e53a3fa2021e89bf5094bfec7605238bbd3b712c2fe7294299048c6a874db24e6a19741980ab9527ed064b38d2bdeb561d7b1db927c106bb582a16ad5f16c820802448935c79710d33"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x3f, 0xbb, 0xc0}}, {{0x9, 0x5, 0x4, 0x6, 0x20, 0x5, 0x1, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x94, 0x40}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x3, 0x0, [@generic={0x84, 0x4, "0b1396283f47b2799bd82f8efe21cccb9174e008b8b95efd1f40b1ea6806d8b0cd4f75fbb181ab18e68ceca894d66ff45761d9725ea64bccc034dc75a6cf382da4cc78538450db525fed588d7afe2772c58331879c16be9650109b5c3ab4078b8f676cfedbb2504d56dfb54aa94c94a0465bbaede8c8b938d61e6cc140be8319d4bd"}]}}]}}, {{0x9, 0x4, 0xd3, 0x20, 0x9, 0xd8, 0xb2, 0x60, 0x4, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "ea6b6a675fdf"}, {0x5, 0x24, 0x0, 0x660}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x100, 0x6, 0x9}, [@country_functional={0x8, 0x24, 0x7, 0x4, 0xdb, [0x3]}, @dmm={0x7, 0x24, 0x14, 0x13c3, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xff01, 0x2, 0x8, 0xbcc, 0x5}]}, @hid_hid={0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x23d}}], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x7f, 0xdf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x9}, @generic={0x24, 0x7, "14e4bafacba4df9f1ae5eb1c366450090c5e1336502ecb5e9ef15a8cb8fc7a65aad8"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x21, 0x0, 0x3, [@generic={0x91, 0x0, "3d607a316ffcd99ab1f70acbb3ec8bbb88ea233281e56a17ff8e4ce589f31166eac0c0e46f113315848bc1a818d82aa6ebc161b0aedace2a1590fcf7d79571af9bb4269a9ef6221128b5500f0a0820ac170ddef74965955021927667c363420a573f972803636c37877a22f3cd91d2f248f34d872133b1ac6249562e36d659b2579933c413ae89a938b3e8c69986b7"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x1, 0x3df}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x1, 0xa1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1f}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x7, 0x81, 0x7f}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x5, 0xfe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xa4}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x0, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xbe, 0x8}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xff, 0x1, 0x6, [@generic={0x1c, 0x2, "dd6c090381f5834d28568229dc2c941a45fddc6641eba9b696fe"}, @generic={0x97, 0x9, "636ac98b1183470676c861a11d753b566bcf48a94088981c6c3573db0c2d5cbcecfd7ab6ae60e27c468260d525bd2694e61a9dad802af2ce0e8cefc1f0241199af91c2b2ff45e49d15d4215a939f9c303a56be6ed58dd63a728790e83d1ee731d647e09666ec446917bd7dd608b8e6f32b189daa18310b6d55cb439adcd5443fd43cb783d26aebe4eda7e7c220f31dec2fcf8cbb90"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x7, 0x3b, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x2, 0x6, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x4}]}}]}}, {{0x9, 0x4, 0x92, 0x4, 0xf, 0xa3, 0xc8, 0x37, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x20}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x80, "fb"}, @extension_unit={0xd, 0x24, 0x8, 0x4, 0x6, 0x40, "c7821f4eecef"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x3, 0x2b, 0x9, 0x80, 0x1f}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x8e, "ddd6"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x250, 0x0, 0x3d, 0xcd}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x5}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0xc, 0x40, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0xed, 0x8a, 0x8, [@generic={0x23, 0x1, "77b950e425c435d27163268460dc9d59501fd93c135a520ddd00ff9c25252ac107"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0xb, 0x400, 0x1, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x80, 0x1, 0x80}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x6, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x50, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x6}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0xba, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0, 0xff}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x1, 0x23, 0x8}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0xa0, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0x1, 0x8}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x1, 0x5, 0x80, [@generic={0xac, 0x9, "908943133f338bd4ae279e1d02d0b3f73e9fd8bfe23873c30ed699967382e5dfecf95031b13d686f59db3b7fea283effbf2c15178113fbcaf2cb4774dd9edd5f3e57d832d7ad6749d7316bc9e2751262793577baf45f58234bbcf2c502a13e3b6592f1381aff6ad105e64dd53b762eafafa4f645fe9265fedb88c6d431253134eb16dfdfcccba52ef4792755211fdb59b2ea57403c66387658c9d70dcf4cd5832dc6303a0616a8ef8236"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x5, 0x5, 0x8, [@generic={0xf3, 0x6, "b4d9b6ebe5f083e5af72d1f5ba3dd9083f848fd2ea44caa11f67bc61efbb75147fc5343415b56fe51f22e996376f159ec831f9b478d258f912df8683088260e4c2d6a009b449a42bc48e6355c2d4f0a42c2bd17a3439116705e44adb515c7b3816cabdc2d6d9e7954ec48573b80329e01e18e32dbdcb49345c075e750bf039de7f9db8373a5d2cddb9ce54599bf202d1c67074ed176bd09d0bc9d6af2c23292cb819bdb85bb5975512eea4096a1bbae4fc84309c788f71f939f4553c63f1c4a09f78ec09a1c8b2ab35d2db4dc514513dacf3637fc8258fd3aea4f63a70e733281fac66875c3aa3823f42377fc19817d1eb"}, @generic={0xce, 0x4, "696b03653e9c4b27efdbba73af7f2d5599ce72b3542bcb2a7d3298d403ac5ea883037d5e86fbf649dc72e30515125c3f238aa4b5f5a23b549cd74f1ab74816255398d5d93076b6b9b2d03bbbeff3f70fa98abf804aca96cd57c787b3d536e9c49172c3565ac202bbf2c97a7824caaee026a4d369c35a82264fb4c47769e409b144d4662b27f5bf51d9c05fc2490c1fc84dc3c1457dbb5cf9c7c3a03f1cec592908c29020d397236c2cb643907f443d99be03bdbfa03bff9ca45406c90650561462455639cf25c22f5ba4a589"}]}}]}}, {{0x9, 0x4, 0x2, 0x9, 0x4, 0x6f, 0x48, 0xc5, 0x4, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "e33a2524f680"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x0, 0x80}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x1000, 0x7, 0x9, 0x6, 0x92}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x0, 0x1, 0x8, 0x5, 0x16}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x9, 0x2, 0x90}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x6, 0x66, 0x1, 0x3}]}], [{{0x9, 0x5, 0x82, 0x1, 0x3ff, 0x8, 0x1f, 0xff}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x0, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x0, 0x80, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x1, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x201, 0x9a, 0x1f, 0x9, 0xff, 0x4}, 0x28, &(0x7f0000000bc0)={0x5, 0xf, 0x28, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xf0, "ea08090039e53e21411616b92c640d39"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x2, 0xf000, 0xdc8f}, @ptm_cap={0x3}]}, 0x7, [{0x3a, &(0x7f0000000c00)=@string={0x3a, 0x3, "80ac3d204f284050aff46a4c2b702cda512cb078cdd9f633a3a613da5c085feda96598df39b10a2ef14db3eb1cd8ca1fc49bb744d28ec14e"}}, {0xfc, &(0x7f0000000c40)=@string={0xfc, 0x3, "2120b6421323aa4634c9a3ff2d0c854d8a3a035339963e07e47eb74d6b11042b405b67220fb0a00fbed2ae8c7332303d5349b4f2460e004497a8479adeae013ad375591bec50377c2cfa6efacf12851d9b5d4d4b8f2056aa5d7b795b08346c597d58e94e5eef643fd20070110fa6ceb668e8ab33d3a540ede0f1b571c3c1feeacde6b5024679212983972ea1bb2235461ce0f5c4210e4d3124cbc738a6425499c5e214ee0e2515953348ee5090328d4ce681efee924c70bcc547d19e3ea64b099a382ec019c95950fc8209f7d3cf4bab150102cfac6889e3aa81f00f1aa890903c66373fdb045a8b22c7bef5b697ff75967007d3c67e1b744f29"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x426}}, {0x26, &(0x7f0000000dc0)=@string={0x26, 0x3, "3b60c18cba97233fc146e1ed1cd2f7bca4610d241e9ea6b3d75f6057ad146e1549275dfb"}}, {0x61, &(0x7f0000000e00)=@string={0x61, 0x3, "ebbd6556cbaa394373aa41ae8272882afd3dff65933ff007a678f0becee50cdf2db669cef858cde7fbaa85b2dbd752306e3683f1cb0e5bb568ff565a7a2720ea75a8e1b847488536772b3e425f0a0f7b5814a8384006d2dd30b3688ec99f05"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x22d0, &(0x7f0000001a80)={[{0x1000, 0x4e00, "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"}, {0xbb, 0x4e00, "6101f4c88638e22ca3bdc4a711ea16276340e882c7dcec961ccbf7261efe42b3ee7076e1ed9444068a066d734a3947b4c58fa9087362611f54262294d79c9943d7e005e3c01e5727b2ffdbd9ea0255e1216136afa2dc2fd0e7bc34d3bbf404a3ea95a38af277eea4dfa9851ae2327b8a519f6098a7f611669438a9c666508b35d22dd0c8409f7786b5ee69e3bc3bb53280b61c2b66925e127298ee3b37e195370c0e94dc567c01192f4975f066a09c7b070ea24ca79608408b6dce"}, {0x1000, 0x4e00, "f306bc9c90718c42ba7ff155d232dabf686edd503be5b34ec36d83972d25ab87c53d3e321cc368d862db5d2c5b1b2d669c900b1e6d99ff0d46a2df46962571f8d032795ac60186233d9fba245f54e08964194ab20ac9ad181f96eed5b66e79dc325f4c64b3039d23fae6bad875f723112810144c5039bbec5df97cba0ea02485b8f6c350bda0eb38d95fe0095402c322ea25ebd8a494c7f19ddb58f1706fbdd906c4c7c8d42a0e281f169320b94d0fe8b0a3d75c4116c187a6ebd53f9250da56aaee725ef510628f78b47b30589b7513563639ca5b69cfc1b392b69478767012467730c8a6406f6cddc91b5203544e1a1208587aa7d5e63874956d501435fb6a520ce64e774d5dd91d8bed3e3e259ca6d3b37801c25ad75d8381d31ee31dcd304fb4582fc0837547e2b22131c728a1333b146a403b6078426d47df6cb0d3b69b60c3b549c3c2a2e39da8e873e3b78f5aef39db7e30c63a78df821dd822c2a300a05708553e3848a93703c1831af46197e8a3491d86228585f37fceb22d758988d357a893fe57c8dc9d998ec1234544809e9a5ea9ed389abeffa8c55af1b9f29fd4a587edcc6c1a00d4ca7f15b51881a7f02e2807b156f2ea15b6325e18e06c0d2a639248d3230356cbad75dbad059b139d5fb40207fe83c5f19808a152ed7311ad9a0e1ad03e29ee19da45b67052607268289991ff56e34b9cadb0d886d710421eb5f2ee1e32c75e27197517d52f172de6dc5d85af0ff554ea842026e7058bed320985a5d18b9b77d40937c187c7da09e581340f4bece908a5f424b920026082c9722179d417b7f543867628e1a13a5737dbcbc4ec106939ecde33564209318361acd66cefbd09f5f8d1d8f00bfc810c6f7ea7433af1870c17bb9befa9c67b27d427d565e1eefbe86050ac29cd5adc2519df75162dfd650f7e7ce024e6943d15b218f524aa745cd85eb9cd24aed14357b81e5891b77a853a96c2a036842ff4b4073c92db0b4f7aecd0cf8ea8553bf2941d3fb0e2828e0f614f4867837cd28a530961af72a2f3365c25d1a25da4160f5d379873b2ae9830c7c971ccb5252d2b673730f06ebc0e7e02622fce6a2696bfc0e5f6123304dfb96d4afd580768b085c21c583a5395129f6d0866b578c25c18e2246cd3e10fa04c4e098b9eaf38f8d92181164ada4fba59c6d1c146280e6e1d728b21edc84ebb502c8bb1d68b5edc0b8c631d2a431249e987c4d91c717bdeb00436d9ad99c6c61a8c76cbefbc0dd82dd0c0c8ad68c7b03969be38ed63184af9b63b3f6710c65a30682f40bd5dfd83f63ce9cf2839d9cfe002b767f0c3dc76ef2d4f8e9625ebe5ed3c5b7b92efe652d2e3afc17396caff23bc3d5846ba2ae5c6dd57505a18fe90d46e6c9f81bb1ddec4c5ecc6d3ae3a4b6bacfade098ac9c05229ed680a9daa3db13505ea2c931796b6e303be863f1fc9980492498782cea7d51c955f37a2c4aef893b8958de64a92a3ea24783fe5560735841bbfd9060c03c32321d15a425119d8910610080865366ec57d3286a420398f65294f410e01986b42491aa84a313306f574829acdff1eb13b287e100bfb151a784501c8acba750af169c1a3d953079ed40ce500037707cce20dbc7f7e24623def96ad8d7783e8e11252f4d7f955b0b9df5de3f10d6679cdc3295db93c287d5074efa6699efe37db2d17b59314494309cce1ebbe32cd0df950da26fb85e3f5dae50d336b9deb685e42615605ae88510b3a78d948ef80a50c9b052db63b07f97835bf18c94f16fa04dea462dd00ab9f5ae929da03f01f07d60541e38cb51107150fefd20fdb655aee6f025b503db9a4032fc6337f0cb2c25bdc58273b42f13f9bc963473ee3223c27c129d45bc174666885cd824355d89757cd84d143fc358876fd63a86eac1f7593a55ef0e5343c500159d7f604673b2d00a27239886559af35692542edc064bfdf97313ab114ebb48364759d08305c40382649a31439ecf275a63ac15dc35f8feaf14ee19e8e1f71b0477a345dc5705d0962299dcf27b3ae778ba1a40b007c83ec59e4172507f878aadb25c532c77b0ac43f4b41f8a65e33cacda6fd5d3a117d12302a87bfc14cfe8151b1fdf0797619391f0a0fbfcc5fc1bbca73653c613a7a5c48db6c3e7d953862a8757c76c6d30c36edadcd9bb6d08ca21251199edf660e352594d708789bfe43708b82c1f62e383e9d3075f21a3cdd6141870deda9f178a0b22db24039d3c5ae0769e5035bc2e6021388fc83950ddf126363d60d0c152ac144358f6fed39e6be7be88f3b8543d5599764e53005fdd55494a25f78d30e10499502aadc4d145243eefeb228375208aa030f7120081c21399e244ea41534206459f7a4e66652c4847bb743cac3f9ce556823d585bec8aed7da96bb435e5edb9f527dd1e8005abaa4ec0e3b720b1e2dbe14d7f523211c13f1efddee72ec3d85fc2d00ee1b4badfd07d7b3a700d441dd601feda906e42489ed18fe3e757461572b8c14e208147d18a019ad6573a2da083d86a594a966fbe5ac514fde1b74feae3a4ea241e2e5f9d95984fd104c6bed605f0f4b8f5dec6d76e451a4f720ad5e8d7aa0f435247a6c4818da1ad0fd6e4ffe14a5e0e4ed47334cfb6d2032351a55c6c5a77565fd2f3567c93c3d67c62d13ec300228c14580f54ff6ae4ef86ba1df31445bf2b422e9aa01041bc7216c2a9569eda1bc3deccd8daf1ba7363c964b7479c9d3d86a33956e84a6062167a37cad8bede92b3aa01beec8c2e72425efe9388d73b458090ac20fc908afd09b227e8b5e7e128c063641b08f23c92efbfbd6cbfdc4f04f89090ed59f77668de51ecf2d75ab46d11428073e23a34299116a60632ccfaf018b382656d4d1684c5b04e5d16aba5529e309bcc3f4a441bdb865ef25c761229dcb9ca2dfa5c1d21781a6967ec3ed86909ae84118c4a7ff815a4a5de9ff918a970b51a9eaeec7954f947096c698ac85b0b301833c27128b3f563138e9ac46f0121e61837f95f570e996f908278cb47274101ccdbbd87a1b55db462d3b4911c4da303ae07f38bf813010ee99d91ece74d1e5ce5fc70c428c29b5cb5ea3361c1a53fd77c0933bb6858d39985831778d52d05b00407581e80add2e74b9a76ed022789a28da02ad44aa7660aa32be9124d79a890f0798635eaa0f486e308fd5f381bc68544b93f47e227c57324ede7501d3627091252f0e3e9bb531fb53f091cfa3eab77b7accc29e5b8563d4632eb994f384874a01d42daf67238fba62c171bd382712e4637768e1b27d30c4831ce4db3817c0ecb9b5d0949ec18a6ee31c7bf0ee75abe6953e1f9b5aa7822e8c3b491f7e349def7533d807c6d4c408d2eef224c067b9c87e9cdd40bff0b2f80c402732ec85bb845c692ce7444f050af8b762da57b456f616a7155c772ba147348d9b585d54381da757638a647851be4d2654bec3a9f55f3ba7dfe65c5c26231a5cb8dbfcff4144ab0c8ea9d6b7c253ee1ff61e02b8ce8a35a73fbd2571a35b88a5d770f8e4be1b1d2af85b92a2e1018a6302ed178bbc73b9089c7f25cb7b73049a7c77b0bfa935e1faaf9cb45f13a2a7c8a849d93e950500aad5155f0359ada8dedd7afadd8bd26a438ea9c380754d0df1a26eedfc8e4a59cbdddd7f03460e46c14083493e5e5395f39b320fad79068f81e1d52bc121cec1592c372284df599b58c8c1c2029db324b8e262356b12e292b90af820096cc4464a05405321d8aada3da8484ea471758c73401efe7856a21ed3a24ad0b7215d64022afffec6f59c89bba4e86bf19c980edb4e14ddd276ff30331e25f068a5e208961ef9d9f8e9e785e5d2da6e77ab799b63ba6a25b28e5e0dc6a3a8ed1a60c4c34001ff936cb1ca7a7bd3699313d59c460d225a1301b8d097d1b79c4b291e9f9a55e9798ca2917adba83277befc5a1c3ac54b29a9da96d9173ab697cbad3669c91db13429eef86bd41e55fa1a343ed57b8292e0f28e77135416aefff3950565d51787391f232aa70b9f157a08760b96e2bc2987ecc871779d1bb5c13fb192a9e78a72bdae66e0c8e50582b4379b5346fed097c8ed538033492d276bab7a7e1880e6573de7994075114c4dfd7da8546e9973f96d64e3dc3b6c4bfae06f6089d4edf454f29c2e3cdabe02aeda6290a4da123497c9c08834d8b804ac925e16d832d62e77a9bc6001033a7a529d598e581b16e19de4cd9e01bcd577099342273f291578a4795bd8ab9a9f34f98f2ea99fbd2df028464e9877aa81dc552a1eea09eb435b699986b449ec5e332a14f08346c5f6fee04ef2dd60dea12f67f620b45b96c419aba786cffeb135cf15b3960cf2e17658c688eceb41e68acb3d58b3e8be737dba3fb85196e9ffb92c87a6e4b1b02290cd731adc0125b50b0e8c2c05c5e9c59f7f3c4e53673b76111a926580e9e774a39626261cc10987908e4e5bf3cca154f1d4e5f6cb4701281127a82248364de85b0e8f1abd5de64e67b3ba3afa0cf2ad3976517870abf222fcadcf441fcdb41fc88826649f1535cc5b9fd8da9c835f65333f6cb94ea0e2d03181c66f95fccafcebb890ac14ce4294bc447373a7c6529e651b21f106a549dbf97ec05837b39dcb9d5597a2f1b27aca6d417fc947500604c058ef260c4434016526c5c11cbb8218c69170476cfdb37a1f7d581a7d96664f5c14f8ba46dcc5e6c47409d66dcc2df7f97e84d15a142e0b78d97803cef7d1b622785759f59eb6bc615e34d06b888405819f1552b90a6781d170c9d2cf02504b787a4700bc6d7c005e3e854b2860e1238aeaa8e529ea4052b0c8b25d13b752b19154cb5014142ddda6e689689031a11cd684b4d884425a553fbf279bb84e9c2200e347af3ee804f2ee7c2dc2b106a2d46a62fd3d40e2228f3eb16e0ff5b1769ba93a46d5ca80de1bd1dd540f75f0ca5d36cb07590dced32cfe59ec71e914144ae342f57845554454e00942f11cfb34eb125e8886d4e2e0b527f45f2fb8c0888bc0f24834d12e8c39cd1c1ce15aeb2a19385722afaf411ded0612b923d7f4ed59463d3a2ca76d00eef4721ab2a8d5b17c30f9f8c55848989a5dce074bfeacf6426f9df8e0a906afce3f7168a6ac6eb5ffa64abea6f26c483798b78853bb7573c760eb399b0703f6c5b4fb85b95616c8464a58c839de1d4c1d2fc634a6ff83f7a63d36912fb5279b7622c57c486a0598c80958ddb83c56fbb8a8e43e3c514fa51fd6153c066e6e421482c6650b4d68702cef74fd24b1639d10007ba833889acb4253a6b150a47c5834aad017eff8dd251a32d0606397d3086ea9203947db1744bc321cc1d2a00ef7e453a67c35a836fd7059725db3d52ba3ab089a443cfd0ea86e6163d7f831c704dd62f6387efd6ddf5013e656e84907fbe7d8a5f6b965b9515e59a411704f92124f6ecc824f20a2f1d811d7e94ffaea02bc3368e6c178fa74179751eafe6aa12492191e263eff9c7893980740ea9224d01c0fbe3bb0f6b37275579671cbeb276dae5e5e78a50e3d8d3a59d033a598bb7d16420d150250bc65245b42120f15a3031091399ca1722c7bf024c207ec43e432134f9ac94a403bbcbb4160b1d256f2125d16ddb5a9c4d65426beeb68f610d5ef13844b99350d9db4e9a63674ba912d63fc4e86c6d19469be562cfc8cda3ae4cf08fd5c2e2ba64a8eb76ffe207578c4b1af543289c9797d331a40e6f44615fb6336a47a4134844559fd53a1229b9bda1e9127365df543a0e312d15ea018db5357428fd1062e307409898a5abc21682723cdc52db46ca9"}, {0x17, 0x4e00, "872a60fe1e3f23be10a85b3d6b6334edd41b07502fa53f"}, {0xe2, 0x4e00, "c5755902bdade586751fd8bfe14b574b86784ddfff87273885e13b12181e5d9d392ca0969b21cdaacd7a45210d081474c018815099fc96d47794fcda1398a971885dbfbdd80238951e54076b57ad3e61df99859b4e686feb8e1da2b1f2f3b27285b84175b8f63b6206ff07a43e9e2aab159f30701f389eb412f78770f9069aa40e0a05f04bd6e4ff416e7053d8de4b93c2832dc5558b10fb8cbe2b4102d65bf1ce79a599313f13970f4cb65dcc737c5993936fda181e9d0a307cec62b5570fe6fd09868f9df471487251c5d3fe39ea1f0cd06ae58f0ee236b983af449433880113a7"}, {0xfe, 0x4e00, "0b558f3c5aebbd53f57196cdedfe759083edeb49a3eb339e2c360712b72591e6a260a5464778bb265b49ea477d0ab25610651b47ea4d180986e629ba42bff74a4cdfd73b1fdbc9851a140635422fe5054fec80264fdeea95b3205783404367a2f38bd5a8ac61e4f7c51555ddd96f1f38b84c19d0e60953720d7b40577f05d88438c7fc08f2cf0734d5c20fc231c16838292a6c93f878cbf2cbac4c88098d443faeac73f784459d1f2b761dddb1230d55adb0fb3f41547d85f6dceeddcc5f25a0f2d07c35be94aa6f2635eaaa8b97c4e6d4edfb54f8c11f0c4fded19336493d34b06c455bf69973fc37a46a9431973f932c52de187fe60b5601623539a5d3"}]}) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000040)={0x16, 0xeb, &(0x7f0000000200)="3b56b47d9c613aac20b89590f5baccb4417fa3cdc41de173e43736def4fdecedb03be8f2bdaa3a76e8b0118587ee465be20cd6022f1410f032fb9db6505214c87479cab6b08c4c217274780877726c57f0d62d960e7b99a58893e462941e293db91b00364b26c3300fd1b54f04b02a5d0151790a36cd3f55bd0ac14acb764a5557566e03f676c328a48a4ba79afb7f24ce6664495e8e3963ae05d2310d7a8fa4a86747e91432205d76cecf8dba9f67330d4dbae655ba1487344604d412209ca5b95e7f8e1606be2059a37ac13856c67aba93e71b5a64bfd8ca738cccf9281db2429a8ffd962ca19f1f4218"}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200004e9182c141e72b2fab7ad9fa6915e5369fcfe961b9ebfb638105e100002a00004e0f3a19f96e1b82139955719b3fb96a6f59916a5384e89b86cc76e80b595618d771c08801c96ff1bbbff200000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e92000000a05b2db3c321f5269992de19676a60610f3047e35b2b147d199308c4576aef7a7e120806cdb66fc760619ef6f89f988fe91ef358"]) [ 1319.218311][T18360] udc-core: couldn't find an available UDC or it's busy [ 1319.225295][T18360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1319.252624][T18360] udc-core: couldn't find an available UDC or it's busy [ 1319.259808][T18360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:24:50 executing program 4 (fault-call:2 fault-nth:8): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1319.269495][T18360] udc-core: couldn't find an available UDC or it's busy [ 1319.276464][T18360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1319.286780][ T2105] usb 1-1: ath9k_htc: USB layer deinitialized [ 1319.296568][T18360] udc-core: couldn't find an available UDC or it's busy [ 1319.303771][T18360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1319.351832][ T17] usb 3-1: USB disconnect, device number 2 [ 1319.367144][T18437] FAULT_INJECTION: forcing a failure. [ 1319.367144][T18437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.380651][T18437] CPU: 0 PID: 18437 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1319.389458][T18437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.399770][T18437] Call Trace: [ 1319.403092][T18437] dump_stack+0x143/0x1db [ 1319.407464][T18437] should_fail.cold+0x5/0xa [ 1319.412016][T18437] _copy_from_user+0x2c/0x180 [ 1319.416746][T18437] input_event_from_user+0x131/0x3a0 [ 1319.422074][T18437] ? input_event_to_user+0x3a0/0x3a0 [ 1319.427410][T18437] evdev_write+0x356/0x760 [ 1319.431877][T18437] ? evdev_read+0xe40/0xe40 [ 1319.436422][T18437] ? security_file_permission+0x248/0x560 [ 1319.442201][T18437] ? evdev_read+0xe40/0xe40 [ 1319.446864][T18437] vfs_write+0x28e/0x9e0 [ 1319.451158][T18437] ksys_write+0x1ee/0x250 [ 1319.455926][T18437] ? __ia32_sys_read+0xb0/0xb0 [ 1319.461151][T18437] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1319.467203][T18437] ? syscall_enter_from_user_mode+0x27/0x70 [ 1319.473148][T18437] do_syscall_64+0x3a/0xb0 [ 1319.477612][T18437] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1319.483648][T18437] RIP: 0033:0x4665d9 [ 1319.487580][T18437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1319.507399][T18437] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1319.516199][T18437] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1319.524297][T18437] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1319.532386][T18437] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1319.540386][T18437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.548391][T18437] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1319.556791][ T2608] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1319.566482][ T17] usb 3-1: ath9k_htc: USB layer deinitialized [ 1319.574342][T29681] usb 2-1: USB disconnect, device number 75 [ 1319.578020][T29987] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1319.591961][T29987] ath9k_htc: Failed to initialize the device [ 1319.604992][ T7] usb 6-1: ath9k_htc: USB layer deinitialized [ 1319.977635][ T7] usb 6-1: new high-speed USB device number 50 using dummy_hcd 10:24:51 executing program 1: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) write$hidraw(0xffffffffffffffff, &(0x7f0000019640)='I', 0x1) write$hidraw(r1, &(0x7f0000000000)="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", 0x300000) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x8cf62) write$hidraw(r2, &(0x7f0000000000)="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", 0x300000) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x84762) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r4, &(0x7f00000002c0)="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", 0xfffffc71) r5 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x5e3903) r6 = syz_open_dev$hidraw(&(0x7f0000000240), 0x3ff, 0x101400) r7 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1) write$hidraw(r7, &(0x7f00000000c0)="a5", 0xfffffdef) write$hidraw(r7, &(0x7f0000000500)="9fd12b26bfcc0bebb22b777fb40d6587983446510f20191dc36293a29164168ef550b3b0f9630bd7481abe196bcc2fc107149762991196a08339a8d0a4d1d4432ca13aaa9ee6ce1404c835878087a64435bb81019f54dd92f2928b6c66cb648350b40eb6360f26808849110139ca5ba0ce4a5a9e0c87ad25300d6e600545bc47a73e4f3425f2b3e80584e419b35cce667ddfdfc5ee7f67974c56ad7addb372e533b6661f4f9c4ed2698c0fd726d856d17345a17e71803964f9cd", 0xba) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000280)) read$hidraw(r5, &(0x7f0000000440)=""/138, 0x8a) read$hidraw(0xffffffffffffffff, &(0x7f0000001400)=""/129, 0x81) write$hidraw(r4, &(0x7f0000000300), 0x0) write$hidraw(r3, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb9751e2032bec608a62330d7b20f024c4444f6744028efa407cf24a5d88cb5ee5770ade7610a4b7c9169614fdd7c703c603d2ec04921ac203fba7b2372acafdc33dbdda972fa7fdc8825c5511e8d52328688097ff3f7d1788995571700db2d76712cf06c8b42e3006b302f686c7f94a958ffa68f90225bacd9a2a7ce6df2b474f77db88b05050ce7d5e5b82dc11dc39c3d0534fd56dfa5b2a20d510195f3e4304de5883a7ba1f80b2487276105a82dc2371edbfad94d518fdf74e05f33ca361ca3b2e75a640ac3412f1b3ed909293f96abe6bf0b19207844be8a509f190dbda564bc15e175c3b904a4be42baed8a5a7ea753efa9614a5e5850dd226c92e9a64b34d42df9d1fd1ab5a58504f4d230da6", 0x300000) write$hidraw(r0, &(0x7f0000000000)="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", 0x300000) 10:24:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/182) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2adb0b87ecfb493, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x1000000004, 0x641) syz_open_dev$hidraw(0x0, 0x0, 0x107001) syz_usb_disconnect(0xffffffffffffffff) write$hidraw(r2, &(0x7f0000000000)='4', 0x20000001) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000280)={0x0, 0xfffffebd, &(0x7f00000003c0)="254e6e6457b94a706f24b50b613bff3ebc5d669fcccfa7539dec9b67573fe9fe31fd712d55ac76b885d2ef5c535d1622962d706343eaf12d7abd5807823ec7ca6f45b0ed0c82289e1dc00fa40b0c6cfba5d882d2e07d943e4761e7cfcb900a43038cdee3afb200c911d20bcdab3ce19a11ac8e9d0abcef82b399e1fa04fa7f9b3dd714cbb6bb14b6172ddd199fc8e689936916cf4f0a289c4b997807b9ed9a85b6a0fd95180f1d2951b0ef77637fb1652eae221d0dfbb740e15aed38a5a018ec0c8b15614a9f2b3fca32064b0c"}) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x81, 0x200000) r4 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x800000000000081, 0x14000) write$hidraw(r4, &(0x7f0000000000)="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", 0x800000) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(0xfffffffffffffffc, 0x5df, 0x32921) read$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(r3, &(0x7f00000005c0)=""/199, 0xc7) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40305829, 0x0) read$hidraw(r2, &(0x7f00000006c0)=""/83, 0x68) syz_open_dev$hidraw(0xfffffffffffffffc, 0xff03000000000000, 0x161f42) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="49d30efbf750adecdd4d4088ee2ef52cc18e8ae740dd72adf67d8cb0f7606a76f07e2096d83759e78efe9ccf3ee3030da65f4982b9dd6c127987100a64edc35c21994014bd360271a7e968a0861d362c6c9db4ddae2b8b", 0x57) 10:24:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0xffffffffffffffdb, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000400)=""/254) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x71c38f2d, 0x180) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x89, &(0x7f0000000200)=@generic={0x7, 0x2, 0x81, "a505e3f6", "46a89eac2a5eace026e4da2fb7a679246a9219f393996c5e47c17fee3ddd58930bfb25cec69b8cfc1951dd4699f9de1894ae9def07db8907277aff8f6c843fe52660135a99fd282e2767252aa45abba973bd54598c5b57697be9f3dd251886f751d0bdaab52f27837f65c13cc982c1e4e230d4a63c8f7d61320c8bb0aaef3ae3fc"}) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000000c0)=""/156) r4 = syz_open_dev$evdev(&(0x7f0000000380), 0x6, 0x252903) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000500)={0xeb, 0x1e, 0x1, 0x2, "fdb157c594de41c505d11bc9b35b1af863345d76254c85a07dc2a9f8abdccbe3"}) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000003c0)={0x20, 0x11, 0x8, 0x2, "da2d4c80955db9ee3948648138697074680f398b730e5a5ecf153f7a8cd96cee"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200004e7ad9fa691565369fcfe961c5ebfb638105e100002a00004e0f3a19f96e1b82139955719b3fb96a6f59916a27571d4de71dbfa557b49b07135f166c5394e89b86cc76e80b595618d771c08801c96ff1bbbfca020000000000000000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f000000c500004e92000000"]) 10:24:51 executing program 4 (fault-call:2 fault-nth:9): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1320.128514][ T33] audit: type=1800 audit(1624530291.242:3131): pid=18463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14143 res=0 errno=0 [ 1320.158133][T18462] FAULT_INJECTION: forcing a failure. [ 1320.158133][T18462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.171780][T18462] CPU: 0 PID: 18462 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1320.180585][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.190787][T18462] Call Trace: [ 1320.194080][T18462] dump_stack+0x143/0x1db [ 1320.198483][T18462] should_fail.cold+0x5/0xa [ 1320.203067][T18462] _copy_from_user+0x2c/0x180 [ 1320.207786][T18462] input_event_from_user+0x131/0x3a0 [ 1320.213107][T18462] ? input_event_to_user+0x3a0/0x3a0 [ 1320.218423][T18462] evdev_write+0x356/0x760 [ 1320.222875][T18462] ? evdev_read+0xe40/0xe40 [ 1320.227412][T18462] ? security_file_permission+0x248/0x560 [ 1320.233179][T18462] ? evdev_read+0xe40/0xe40 [ 1320.237761][T18462] vfs_write+0x28e/0x9e0 [ 1320.242041][T18462] ksys_write+0x1ee/0x250 [ 1320.246451][T18462] ? __ia32_sys_read+0xb0/0xb0 [ 1320.251253][T18462] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1320.257272][T18462] ? syscall_enter_from_user_mode+0x27/0x70 [ 1320.263214][T18462] do_syscall_64+0x3a/0xb0 [ 1320.267661][T18462] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1320.273827][T18462] RIP: 0033:0x4665d9 [ 1320.277745][T18462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1320.297591][T18462] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1320.306030][T18462] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1320.314121][T18462] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1320.322106][T18462] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1320.330179][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1320.338170][T18462] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1320.377680][ T7439] usb 2-1: Service connection timeout for: 257 [ 1320.383978][ T7439] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1320.404228][ T7439] ath9k_htc: Failed to initialize the device [ 1320.412159][T29681] usb 2-1: ath9k_htc: USB layer deinitialized 10:24:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1320.412449][ T33] audit: type=1800 audit(1624530291.242:3132): pid=18463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14143 res=0 errno=0 [ 1320.451711][ T33] audit: type=1800 audit(1624530291.242:3133): pid=18463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14143 res=0 errno=0 10:24:51 executing program 4 (fault-call:2 fault-nth:10): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1320.497724][ T7235] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1320.506898][ T7235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.510223][ T33] audit: type=1800 audit(1624530291.292:3134): pid=18463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14143 res=0 errno=0 [ 1320.515550][ T2608] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1320.540234][ T17] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1320.569447][T18482] FAULT_INJECTION: forcing a failure. [ 1320.569447][T18482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.582683][T18482] CPU: 1 PID: 18482 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1320.591468][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.601631][T18482] Call Trace: [ 1320.604927][T18482] dump_stack+0x143/0x1db [ 1320.609300][T18482] should_fail.cold+0x5/0xa [ 1320.613834][T18482] _copy_from_user+0x2c/0x180 [ 1320.618574][T18482] input_event_from_user+0x131/0x3a0 [ 1320.623920][T18482] ? input_event_to_user+0x3a0/0x3a0 [ 1320.627522][ T7235] usb 4-1: can't set config #1, error -71 [ 1320.629230][T18482] evdev_write+0x356/0x760 [ 1320.629273][T18482] ? evdev_read+0xe40/0xe40 [ 1320.643908][T18482] ? security_file_permission+0x248/0x560 [ 1320.649652][T18482] ? evdev_read+0xe40/0xe40 [ 1320.653947][ T7235] usb 4-1: USB disconnect, device number 19 [ 1320.654171][T18482] vfs_write+0x28e/0x9e0 [ 1320.664306][T18482] ksys_write+0x1ee/0x250 [ 1320.668750][T18482] ? __ia32_sys_read+0xb0/0xb0 [ 1320.673528][T18482] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1320.679535][T18482] ? syscall_enter_from_user_mode+0x27/0x70 [ 1320.685491][T18482] do_syscall_64+0x3a/0xb0 [ 1320.689932][T18482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1320.695849][T18482] RIP: 0033:0x4665d9 [ 1320.698175][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1320.699751][T18482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1320.699781][T18482] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1320.699810][T18482] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1320.708883][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.728436][T18482] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1320.728460][T18482] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1320.728475][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1320.728490][T18482] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1320.785743][ T7] usb 6-1: Product: syz [ 1320.789995][ T7] usb 6-1: Manufacturer: syz [ 1320.794604][ T7] usb 6-1: SerialNumber: syz [ 1320.838872][ T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:24:52 executing program 4 (fault-call:2 fault-nth:11): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1320.951309][T18494] FAULT_INJECTION: forcing a failure. [ 1320.951309][T18494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.964591][T18494] CPU: 0 PID: 18494 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1320.973384][T18494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.983456][T18494] Call Trace: [ 1320.986746][T18494] dump_stack+0x143/0x1db [ 1320.991116][T18494] should_fail.cold+0x5/0xa [ 1320.995650][T18494] _copy_from_user+0x2c/0x180 [ 1321.000361][T18494] input_event_from_user+0x131/0x3a0 [ 1321.005674][T18494] ? input_event_to_user+0x3a0/0x3a0 [ 1321.011064][T18494] evdev_write+0x356/0x760 [ 1321.015521][T18494] ? evdev_read+0xe40/0xe40 [ 1321.020058][T18494] ? security_file_permission+0x248/0x560 [ 1321.025812][T18494] ? evdev_read+0xe40/0xe40 [ 1321.030338][T18494] vfs_write+0x28e/0x9e0 [ 1321.034620][T18494] ksys_write+0x1ee/0x250 [ 1321.038978][T18494] ? __ia32_sys_read+0xb0/0xb0 [ 1321.044196][T18494] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1321.050208][T18494] ? syscall_enter_from_user_mode+0x27/0x70 [ 1321.056228][T18494] do_syscall_64+0x3a/0xb0 [ 1321.060684][T18494] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1321.066625][T18494] RIP: 0033:0x4665d9 [ 1321.070541][T18494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1321.090632][T18494] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1321.099309][T18494] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1321.107316][T18494] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1321.115508][T18494] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.123991][T18494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1321.132088][T18494] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1321.140788][ T2608] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1321.147814][ T17] usb 3-1: too many configurations: 147, using maximum allowed: 8 [ 1321.277542][ T2608] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1321.285719][ T2608] usb 1-1: can't read configurations, error -22 [ 1321.297505][ T7235] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1321.437471][ T2608] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1321.587546][ T7235] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1321.607634][ T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1321.737919][ T2608] usb 1-1: too many configurations: 186, using maximum allowed: 8 10:24:52 executing program 5: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0xfffd}, {0x2}, @rumble={0x0, 0x3}}) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r1, &(0x7f0000000000)="03", 0xfd50) write$hidraw(r1, &(0x7f0000001280)="3c80e6da4e6d88137fc80abc4fb1c64b01e47951dedbb20517a8442edd7aff905109542572b4ba519b6ac86beeb3d1782242493df9df25e7718a81f0f38b7b5bb221a6d448023d400a9fb0921881e0a94eb05ba6222b9e500777c0903349853fd4abbc582fb48c32a51cc66638c4e152f460a05eeac618a685162fc7bcb56a34ca92a45050734aaef92a672b77c47f9f9ad8a7c3656b83d7a6ff1f509ec51864f94d6d5182dd94830a531dc67d181bbbaea66d2b6035da6be4b6be18add19f3376ee474a32671400f3dd94cb2540558dc0fea2fe2dba673478aa3ab39f768b84b9e62f69db2605260d9519f37726e72d9809767204412290991cfdcb6e3b49c5ef27c53be5d60092b8ad4b3cf6baea0614d103ab61ccac62665de03c6a3c1eda2b6692ca507d833146d7930fcf73a25fd95c2f12414e71b9b2c2edd3c74a14aee11655fa1154d394e66769ebbb794486b31382323c8954745612e7e82b9d7b2abab9519e96e4d29327a8b30130bf829c599d9ac736139150af278d5067d7ec5da492c9e1a0e5894243f445966197ab712866c388eddcc49f3af1b5934c2fc8c977b0937011b6bd654bb6950c6305a24e58c46a8c8f2a908c83e7cdf5d0a8a2200212f26ab623d62ac6fffbb54b34fa2c242c1e25f6c3d9cd15f1435b8384249416e8e5c23212b658abc23fdaea31c5cc0e8b3fb3e7463dfb8fa31c901cdf28bc724550e34dc67d9fb7c0b8c89ddf7f93e5dec741f91c87235818f8072a88d49005e42591977340bb9f2e09b65b20bd2376ab421b2b9689ecd50e22f6c1cee255db6f97509d73c77400b87e8ee83d8bf22e863a8bdc1a838dbfe9326fd528e6810799edd0a0c49dd33c61ce369af2e87d0f330b307a49e9ea3b6bd7917c2f50d3a5adc30c7bf1652cba78927b03394f0f9fedcfc2c1c6cdfbccc4e53922dcf35e93ce3a0b8b2a1cce3fea83cd152cd8177a", 0x2b1) syz_open_dev$hidraw(&(0x7f0000000200), 0x101, 0x20000) ioctl$HIDIOCGRAWNAME(r0, 0x40305839, &(0x7f0000000080)) write$hidraw(r0, &(0x7f0000000000)="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", 0x300000) 10:24:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000001c0)=0x6) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f0000001240)={0x0, 0x0, 0x11, &(0x7f0000000640)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0xffffffffffffff72, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x33d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=@generic={0x1, 0x2, 0x0, "06bc4904"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0xf7, 0x0, 0x7114, 0x3, "7dd8a59bdc3ca121ccf4bed69214f24900c7fe376d2dc8f6eb18fea3ae485f15"}) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x9}, 0x1d, &(0x7f00000005c0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x0, 0xff0f, 0x1dff, [0xffc000, 0x3f0f, 0x0]}]}, 0x2, [{0x5, &(0x7f00000008c0)=ANY=[]}, {0x2, &(0x7f0000001040)=@string={0x2}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:52 executing program 4 (fault-call:2 fault-nth:12): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1321.781354][T29681] usb 6-1: USB disconnect, device number 50 [ 1321.825000][T18499] FAULT_INJECTION: forcing a failure. [ 1321.825000][T18499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1321.838276][T18499] CPU: 1 PID: 18499 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1321.847081][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1321.848637][ T33] audit: type=1800 audit(1624530292.952:3135): pid=18503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14141 res=0 errno=0 [ 1321.857166][T18499] Call Trace: [ 1321.857188][T18499] dump_stack+0x143/0x1db [ 1321.857222][T18499] should_fail.cold+0x5/0xa [ 1321.857256][T18499] _copy_from_user+0x2c/0x180 [ 1321.895544][T18499] input_event_from_user+0x131/0x3a0 [ 1321.900867][T18499] ? input_event_to_user+0x3a0/0x3a0 [ 1321.906273][T18499] evdev_write+0x356/0x760 [ 1321.910809][T18499] ? evdev_read+0xe40/0xe40 [ 1321.915361][T18499] ? security_file_permission+0x248/0x560 [ 1321.921269][T18499] ? evdev_read+0xe40/0xe40 [ 1321.925820][T18499] vfs_write+0x28e/0x9e0 [ 1321.930075][T18499] ksys_write+0x1ee/0x250 [ 1321.934423][T18499] ? __ia32_sys_read+0xb0/0xb0 [ 1321.939256][T18499] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1321.945302][T18499] ? syscall_enter_from_user_mode+0x27/0x70 [ 1321.951297][T18499] do_syscall_64+0x3a/0xb0 [ 1321.955730][T18499] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1321.962011][T18499] RIP: 0033:0x4665d9 [ 1321.965987][T18499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1321.985755][T18499] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1321.994281][T18499] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1322.002619][T18499] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1322.010650][T18499] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 10:24:53 executing program 4 (fault-call:2 fault-nth:13): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1322.018649][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1322.026630][T18499] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1322.058326][ T2608] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 1322.066302][ T2608] usb 1-1: can't read configurations, error -22 [ 1322.074840][ T2608] usb usb1-port1: attempt power cycle [ 1322.095662][T18508] FAULT_INJECTION: forcing a failure. [ 1322.095662][T18508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.108986][T18508] CPU: 1 PID: 18508 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1322.117897][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1322.128144][T18508] Call Trace: [ 1322.131585][T18508] dump_stack+0x143/0x1db [ 1322.135930][T18508] should_fail.cold+0x5/0xa [ 1322.140485][T18508] _copy_from_user+0x2c/0x180 [ 1322.145300][T18508] input_event_from_user+0x131/0x3a0 [ 1322.150701][T18508] ? input_event_to_user+0x3a0/0x3a0 [ 1322.156004][T18508] evdev_write+0x356/0x760 [ 1322.160489][T18508] ? evdev_read+0xe40/0xe40 [ 1322.165040][T18508] ? security_file_permission+0x248/0x560 [ 1322.170844][T18508] ? evdev_read+0xe40/0xe40 [ 1322.175395][T18508] vfs_write+0x28e/0x9e0 [ 1322.179695][T18508] ksys_write+0x1ee/0x250 [ 1322.184069][T18508] ? __ia32_sys_read+0xb0/0xb0 [ 1322.188877][T18508] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1322.194913][T18508] ? syscall_enter_from_user_mode+0x27/0x70 [ 1322.200823][T18508] do_syscall_64+0x3a/0xb0 [ 1322.205362][T18508] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1322.211298][T18508] RIP: 0033:0x4665d9 [ 1322.215288][T18508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.234966][T18508] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1322.243411][T18508] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1322.251386][T18508] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1322.259359][T18508] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.267338][T18508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:24:53 executing program 5: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086602, &(0x7f0000000080)) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @rumble={0x0, 0xbfe}}) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x101142) write$hidraw(r2, &(0x7f0000001180)='=', 0x3b000) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) write$hidraw(r3, &(0x7f0000000000)="c2", 0xa00000) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) write$hidraw(r0, &(0x7f0000000100)="3ef41f2ae8e1eb26e9f116af0ff7760c53c947a6128cc1d407b22fcda4929d43efca3bb537756881bfd099a6e7048f1e8dc175ba45452801dd0000008df9200100000000000000da830336712c882b939970bba3459348a563b9344586bbbad08e", 0x61) ioctl$HIDIOCGRAWNAME(r1, 0x40305829, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f00000000c0), 0x3, 0x101000) 10:24:53 executing program 4 (fault-call:2 fault-nth:14): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1322.275519][T18508] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1322.287111][ T33] audit: type=1800 audit(1624530293.402:3136): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14141 res=0 errno=0 [ 1322.351411][T18511] FAULT_INJECTION: forcing a failure. [ 1322.351411][T18511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.352301][ T33] audit: type=1800 audit(1624530293.462:3137): pid=18512 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14140 res=0 errno=0 [ 1322.365048][T18511] CPU: 1 PID: 18511 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1322.394703][T18511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1322.405171][T18511] Call Trace: [ 1322.408592][T18511] dump_stack+0x143/0x1db [ 1322.412939][T18511] should_fail.cold+0x5/0xa [ 1322.417484][T18511] _copy_from_user+0x2c/0x180 [ 1322.422206][T18511] input_event_from_user+0x131/0x3a0 [ 1322.427611][T18511] ? input_event_to_user+0x3a0/0x3a0 [ 1322.432902][T18511] evdev_write+0x356/0x760 [ 1322.437453][T18511] ? evdev_read+0xe40/0xe40 [ 1322.442060][T18511] ? security_file_permission+0x248/0x560 [ 1322.447795][T18511] ? evdev_read+0xe40/0xe40 [ 1322.452313][T18511] vfs_write+0x28e/0x9e0 [ 1322.456578][T18511] ksys_write+0x1ee/0x250 [ 1322.461026][T18511] ? __ia32_sys_read+0xb0/0xb0 [ 1322.465835][T18511] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1322.472024][T18511] ? syscall_enter_from_user_mode+0x27/0x70 [ 1322.477934][T18511] do_syscall_64+0x3a/0xb0 [ 1322.482413][T18511] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1322.488446][T18511] RIP: 0033:0x4665d9 [ 1322.492351][T18511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1322.512142][T18511] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1322.520669][T18511] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1322.528692][T18511] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1322.536709][T18511] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1322.544998][T18511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1322.553250][T18511] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1322.561469][ T17] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1322.569584][ T2105] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1322.570605][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.586367][ T17] usb 3-1: Product: syz [ 1322.590641][ T17] usb 3-1: Manufacturer: syz [ 1322.595773][ T17] usb 3-1: SerialNumber: syz [ 1322.648419][ T17] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1322.689290][ T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1322.696326][ T7] ath9k_htc: Failed to initialize the device [ 1322.703192][T29681] usb 6-1: ath9k_htc: USB layer deinitialized [ 1322.877523][ T2608] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1322.927714][ T2105] usb 2-1: too many configurations: 221, using maximum allowed: 8 [ 1323.028021][ T2608] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1323.087806][ T7235] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1323.096935][ T7235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.105104][ T7235] usb 4-1: Product: syz [ 1323.109723][ T7235] usb 4-1: Manufacturer: syz [ 1323.114445][ T7235] usb 4-1: SerialNumber: syz [ 1323.116038][T29987] usb 3-1: USB disconnect, device number 3 [ 1323.127441][ T17] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed 10:24:54 executing program 2: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x80000) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:24:54 executing program 0: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000200)=""/172) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x40844) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000000c0)=""/111) 10:24:54 executing program 4 (fault-call:2 fault-nth:15): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1323.144224][T29987] usb 3-1: ath9k_htc: USB layer deinitialized [ 1323.187719][ T2608] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1323.195333][ T2608] usb 1-1: can't read configurations, error -71 [ 1323.221448][T18539] FAULT_INJECTION: forcing a failure. [ 1323.221448][T18539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.234581][T18539] CPU: 0 PID: 18539 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1323.243370][T18539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.253556][T18539] Call Trace: [ 1323.256888][T18539] dump_stack+0x143/0x1db [ 1323.261289][T18539] should_fail.cold+0x5/0xa [ 1323.265829][T18539] _copy_from_user+0x2c/0x180 [ 1323.270543][T18539] input_event_from_user+0x131/0x3a0 [ 1323.275869][T18539] ? input_event_to_user+0x3a0/0x3a0 [ 1323.281209][T18539] evdev_write+0x356/0x760 [ 1323.285752][T18539] ? evdev_read+0xe40/0xe40 [ 1323.290309][T18539] ? security_file_permission+0x248/0x560 [ 1323.296081][T18539] ? evdev_read+0xe40/0xe40 [ 1323.300629][T18539] vfs_write+0x28e/0x9e0 [ 1323.304912][T18539] ksys_write+0x1ee/0x250 [ 1323.309285][T18539] ? __ia32_sys_read+0xb0/0xb0 [ 1323.314092][T18539] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1323.320117][T18539] ? syscall_enter_from_user_mode+0x27/0x70 [ 1323.326044][T18539] do_syscall_64+0x3a/0xb0 [ 1323.330485][T18539] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1323.336418][T18539] RIP: 0033:0x4665d9 [ 1323.340333][T18539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.359963][T18539] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1323.368394][T18539] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1323.376377][T18539] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1323.384353][T18539] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.392321][T18539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.400308][T18539] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1323.416836][ T7235] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:24:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:24:54 executing program 5: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1c3) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x6, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000340)="e35e8af4cb3e8048e789c67f2c649d9c976d4099f6f83cb039c059f88948bf6b550fb981c6bc3ee032baf88b455e5162c96ab26ea8dd3c5bd6a71ef1abdc7b5d21afbd9ac8a4138a2fd2f05ec9d12cc515f51704ba10a290bc73da67f117a1a3bd626fcf904fac11cbf94761", 0x6c) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xb, &(0x7f0000000200)="1585cb69d33c45218f6652"}) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000003c0)={0x1f, 0x1, 0x1, 0x1ff, "895a2bcd27086029e7e6efc2333f50642ead831475bde66918af18fb4990c54b"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0xaf, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:24:54 executing program 4 (fault-call:2 fault-nth:16): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1323.497048][ T8086] usb 4-1: USB disconnect, device number 20 [ 1323.499986][T29681] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1323.524429][ T8086] usb 4-1: ath9k_htc: USB layer deinitialized [ 1323.564786][T18562] FAULT_INJECTION: forcing a failure. [ 1323.564786][T18562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.578244][T18562] CPU: 1 PID: 18562 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1323.587040][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.597125][T18562] Call Trace: [ 1323.600426][T18562] dump_stack+0x143/0x1db [ 1323.604789][T18562] should_fail.cold+0x5/0xa [ 1323.609330][T18562] _copy_from_user+0x2c/0x180 [ 1323.614040][T18562] input_event_from_user+0x131/0x3a0 [ 1323.619387][T18562] ? input_event_to_user+0x3a0/0x3a0 [ 1323.624695][T18562] evdev_write+0x356/0x760 [ 1323.629137][T18562] ? evdev_read+0xe40/0xe40 [ 1323.633661][T18562] ? security_file_permission+0x248/0x560 [ 1323.639416][T18562] ? evdev_read+0xe40/0xe40 [ 1323.643943][T18562] vfs_write+0x28e/0x9e0 [ 1323.648218][T18562] ksys_write+0x1ee/0x250 [ 1323.652570][T18562] ? __ia32_sys_read+0xb0/0xb0 [ 1323.657453][T18562] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1323.663468][T18562] ? syscall_enter_from_user_mode+0x27/0x70 [ 1323.669391][T18562] do_syscall_64+0x3a/0xb0 [ 1323.673847][T18562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1323.679776][T18562] RIP: 0033:0x4665d9 [ 1323.683700][T18562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.703340][T18562] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:24:54 executing program 4 (fault-call:2 fault-nth:17): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1323.707741][ T2608] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1323.711764][T18562] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1323.727305][T18562] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1323.735287][T18562] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.743270][T18562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.751260][T18562] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1323.795223][T18573] FAULT_INJECTION: forcing a failure. [ 1323.795223][T18573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.795262][T18573] CPU: 1 PID: 18573 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1323.795290][T18573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.795304][T18573] Call Trace: [ 1323.795312][T18573] dump_stack+0x143/0x1db [ 1323.835464][T18573] should_fail.cold+0x5/0xa [ 1323.835495][T18573] _copy_from_user+0x2c/0x180 [ 1323.835516][T18573] input_event_from_user+0x131/0x3a0 [ 1323.835533][T18573] ? input_event_to_user+0x3a0/0x3a0 [ 1323.835548][T18573] evdev_write+0x356/0x760 [ 1323.835563][T18573] ? evdev_read+0xe40/0xe40 [ 1323.835578][T18573] ? security_file_permission+0x248/0x560 [ 1323.835598][T18573] ? evdev_read+0xe40/0xe40 [ 1323.835612][T18573] vfs_write+0x28e/0x9e0 [ 1323.835630][T18573] ksys_write+0x1ee/0x250 [ 1323.835654][T18573] ? __ia32_sys_read+0xb0/0xb0 [ 1323.835682][T18573] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1323.835717][T18573] ? syscall_enter_from_user_mode+0x27/0x70 [ 1323.835745][T18573] do_syscall_64+0x3a/0xb0 [ 1323.835760][T18573] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1323.835780][T18573] RIP: 0033:0x4665d9 [ 1323.835792][T18573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.835808][T18573] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1323.835833][T18573] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1323.835844][T18573] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1323.835854][T18573] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.835864][T18573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.835874][T18573] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1323.848258][ T2608] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1323.917471][ T7439] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1323.997645][ T2105] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1324.011568][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.011601][ T2105] usb 2-1: Product: syz [ 1324.011621][ T2105] usb 2-1: Manufacturer: syz [ 1324.011641][ T2105] usb 2-1: SerialNumber: syz [ 1324.077688][T29987] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1324.078492][ T2105] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1324.207538][ T8086] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1324.387558][T29987] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1324.407577][ T7439] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.507752][ T8086] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1324.577608][ T7439] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1324.586754][ T7439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.595246][ T7439] usb 6-1: Product: syz [ 1324.599605][ T7439] usb 6-1: Manufacturer: syz [ 1324.604322][ T7439] usb 6-1: SerialNumber: syz [ 1324.648601][ T7439] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1324.717641][ T2105] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:24:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x48300) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000680)=""/4096) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xe, [{{0x9, 0x2, 0x3e}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000580), 0x1, 0x218801) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000600)={0x17, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_open_dev$hidraw(&(0x7f0000000200), 0x10001, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x1a1001) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000002c0)=""/241) syz_open_dev$evdev(0x0, 0x0, 0x2100) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x52, 0xfff, 0x3, {0x4}, {0x7eb1, 0x200}, @ramp={0xb, 0x46, {0xfff9}}}) 10:24:55 executing program 4 (fault-call:2 fault-nth:18): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1324.823040][ T32] usb 2-1: USB disconnect, device number 76 [ 1324.839957][ T2608] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1324.849349][ T2608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.857458][ T2608] usb 1-1: Product: syz [ 1324.861662][ T2608] usb 1-1: Manufacturer: syz [ 1324.866279][ T2608] usb 1-1: SerialNumber: syz [ 1324.891124][T18592] FAULT_INJECTION: forcing a failure. [ 1324.891124][T18592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.904355][T18592] CPU: 1 PID: 18592 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1324.904399][T18592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1324.904414][T18592] Call Trace: [ 1324.904424][T18592] dump_stack+0x143/0x1db [ 1324.904460][T18592] should_fail.cold+0x5/0xa [ 1324.904493][T18592] _copy_from_user+0x2c/0x180 [ 1324.904527][T18592] input_event_from_user+0x131/0x3a0 [ 1324.945801][T18592] ? input_event_to_user+0x3a0/0x3a0 [ 1324.945848][T18592] evdev_write+0x356/0x760 [ 1324.945882][T18592] ? evdev_read+0xe40/0xe40 [ 1324.945906][T18592] ? security_file_permission+0x248/0x560 [ 1324.965955][T18592] ? evdev_read+0xe40/0xe40 [ 1324.965995][T18592] vfs_write+0x28e/0x9e0 [ 1324.966024][T18592] ksys_write+0x1ee/0x250 [ 1324.979216][T18592] ? __ia32_sys_read+0xb0/0xb0 [ 1324.979258][T18592] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1324.990282][T18592] ? syscall_enter_from_user_mode+0x27/0x70 [ 1324.990323][T18592] do_syscall_64+0x3a/0xb0 [ 1325.000645][T18592] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1325.000683][T18592] RIP: 0033:0x4665d9 [ 1325.000702][T18592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.000726][T18592] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:24:56 executing program 4 (fault-call:2 fault-nth:19): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1325.000754][T18592] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1325.000772][T18592] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1325.000789][T18592] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.066269][T18592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1325.074920][T18592] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1325.118557][ T2608] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1325.134460][T18596] FAULT_INJECTION: forcing a failure. [ 1325.134460][T18596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.148154][T18596] CPU: 1 PID: 18596 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1325.157231][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.167549][T18596] Call Trace: [ 1325.171253][T18596] dump_stack+0x143/0x1db [ 1325.175601][T18596] should_fail.cold+0x5/0xa [ 1325.180144][T18596] _copy_from_user+0x2c/0x180 [ 1325.184924][T18596] input_event_from_user+0x131/0x3a0 [ 1325.190397][T18596] ? input_event_to_user+0x3a0/0x3a0 [ 1325.195916][T18596] evdev_write+0x356/0x760 [ 1325.200342][T18596] ? evdev_read+0xe40/0xe40 [ 1325.204911][T18596] ? security_file_permission+0x248/0x560 [ 1325.210646][T18596] ? evdev_read+0xe40/0xe40 [ 1325.215163][T18596] vfs_write+0x28e/0x9e0 [ 1325.219415][T18596] ksys_write+0x1ee/0x250 [ 1325.223762][T18596] ? __ia32_sys_read+0xb0/0xb0 [ 1325.228569][T18596] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1325.234561][T18596] ? syscall_enter_from_user_mode+0x27/0x70 [ 1325.240659][T18596] do_syscall_64+0x3a/0xb0 [ 1325.245308][T18596] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1325.251739][T18596] RIP: 0033:0x4665d9 [ 1325.255664][T18596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.275473][T18596] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1325.284143][T18596] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1325.292384][T18596] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1325.300374][T18596] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.308553][T18596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:24:56 executing program 4 (fault-call:2 fault-nth:20): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1325.316680][T18596] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1325.364564][T18602] FAULT_INJECTION: forcing a failure. [ 1325.364564][T18602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.377903][T18602] CPU: 0 PID: 18602 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1325.386696][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.397030][T18602] Call Trace: [ 1325.400337][T18602] dump_stack+0x143/0x1db [ 1325.404985][T18602] should_fail.cold+0x5/0xa [ 1325.409504][T18602] _copy_from_user+0x2c/0x180 [ 1325.414286][T18602] input_event_from_user+0x131/0x3a0 [ 1325.419916][T18602] ? input_event_to_user+0x3a0/0x3a0 [ 1325.425372][T18602] evdev_write+0x356/0x760 [ 1325.429831][T18602] ? evdev_read+0xe40/0xe40 [ 1325.434507][T18602] ? security_file_permission+0x248/0x560 [ 1325.440356][T18602] ? evdev_read+0xe40/0xe40 [ 1325.444968][T18602] vfs_write+0x28e/0x9e0 [ 1325.449240][T18602] ksys_write+0x1ee/0x250 [ 1325.453587][T18602] ? __ia32_sys_read+0xb0/0xb0 [ 1325.458471][T18602] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1325.464572][T18602] ? syscall_enter_from_user_mode+0x27/0x70 [ 1325.470499][T18602] do_syscall_64+0x3a/0xb0 [ 1325.475029][T18602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1325.481049][T18602] RIP: 0033:0x4665d9 [ 1325.485070][T18602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.505102][T18602] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1325.513636][T18602] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1325.521612][T18602] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1325.529734][T18602] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.537743][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1325.546260][T18602] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:24:56 executing program 4 (fault-call:2 fault-nth:21): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1325.557607][T29987] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1325.566698][T29987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.574869][T29987] usb 3-1: Product: syz [ 1325.579099][T29987] usb 3-1: Manufacturer: syz [ 1325.583708][T29987] usb 3-1: SerialNumber: syz [ 1325.588658][ T7439] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1325.638773][T29987] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1325.666195][T18610] FAULT_INJECTION: forcing a failure. [ 1325.666195][T18610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.679700][T18610] CPU: 1 PID: 18610 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1325.688563][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.698868][T18610] Call Trace: [ 1325.702382][T18610] dump_stack+0x143/0x1db [ 1325.706901][T18610] should_fail.cold+0x5/0xa [ 1325.711425][T18610] _copy_from_user+0x2c/0x180 [ 1325.716117][T18610] input_event_from_user+0x131/0x3a0 [ 1325.721441][T18610] ? input_event_to_user+0x3a0/0x3a0 [ 1325.726744][T18610] evdev_write+0x356/0x760 [ 1325.731203][T18610] ? evdev_read+0xe40/0xe40 [ 1325.735755][T18610] ? security_file_permission+0x248/0x560 [ 1325.741508][T18610] ? evdev_read+0xe40/0xe40 [ 1325.746046][T18610] vfs_write+0x28e/0x9e0 [ 1325.750308][T18610] ksys_write+0x1ee/0x250 [ 1325.754663][T18610] ? __ia32_sys_read+0xb0/0xb0 [ 1325.759491][T18610] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1325.765491][T18610] ? syscall_enter_from_user_mode+0x27/0x70 [ 1325.771451][T18610] do_syscall_64+0x3a/0xb0 [ 1325.775878][T18610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1325.781779][T18610] RIP: 0033:0x4665d9 [ 1325.785673][T18610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1325.805393][T18610] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1325.813812][T18610] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1325.821789][T18610] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1325.829760][T18610] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.837739][T18610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1325.845715][T18610] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1325.858243][ T2105] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1325.865959][ T2105] ath9k_htc: Failed to initialize the device [ 1325.873324][ T32] usb 2-1: ath9k_htc: USB layer deinitialized [ 1325.887844][ T8086] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1325.896979][ T8086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.905104][ T8086] usb 4-1: Product: syz [ 1325.909416][ T8086] usb 4-1: Manufacturer: syz [ 1325.914130][ T8086] usb 4-1: SerialNumber: syz [ 1325.958568][ T8086] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1325.975594][ T7439] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1325.981357][ T7439] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1326.176301][T29681] usb 6-1: USB disconnect, device number 51 [ 1326.199857][ T7439] ath9k_htc: Failed to initialize the device [ 1326.205913][T29681] usb 6-1: ath9k_htc: USB layer deinitialized [ 1326.240148][ T17] usb 3-1: USB disconnect, device number 4 [ 1326.247922][ T7235] usb 1-1: USB disconnect, device number 50 [ 1326.254840][ T32] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1326.257549][ T2608] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1326.262697][T29987] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed 10:24:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, "ed105400000000003ec13e2000"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000040)}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:24:57 executing program 4 (fault-call:2 fault-nth:22): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x4) r1 = syz_open_dev$evdev(&(0x7f0000000c00), 0xbf0, 0x40) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000c40)={0x5, 0x6, 0xffff, 0x1, "2d778359bc28fbdd87c737c285c7eb791db1593c3a6214f4a6ae842a3c155c40"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x80240) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000200)=""/200) r3 = syz_usb_connect(0x5, 0x7a2, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xe3, 0x49, 0xcc, 0x0, 0x19d2, 0xffa4, 0xf988, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x790, 0x2, 0x81, 0x40, 0x5f633ddad8dd5ba6, 0x0, [{{0x9, 0x4, 0x22, 0x5, 0x10, 0xff, 0xff, 0xff, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x81, 0x5}, @as_header={0x7, 0x24, 0x1, 0xff, 0x80, 0x1}]}], [{{0x9, 0x5, 0x3, 0x8, 0x40, 0x9, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x20, 0x20, 0x80, [@generic={0xd5, 0x11, "1b3ca33774be0bfd4d78096c690e14661a01710d1cc76084a18705c5399db74991f9954976c9625f565976fc42c7dc37a87a55ce88d1a955a0be10fac95ed24abbb1399b63521927d85bf74ff46c4d83a54b0e6384c80b1355887d1a90870ed419949c352a5e098f6eedd8268194dcc8e6eef9465ddc7ddf9d7b04742c0f57e06bb323d8cf43da6abfcd038305bbfe61fa18928b1a1cdb6a1f8417884fc00d8ff87702aee8d1cc650c360d55e2b15c240e663d2d01ea0043a901e579d5785e25ad91a17a3e0301d364ff9242a629ccf9df45ff"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x59, 0x50, 0x7, [@generic={0xa9, 0x1, "358e384cc91ee73cda89a21c5898932ffd4046f470e5832dc3fdb340b40a3e4214657238a9ed0fa6b122a818652a91ccaf122003c72bbedd368527a68a4a23b9a3ba4fdaf654648bbff1a199ef104937748886b5c0d4d23914a9ce68ad241736044f7e8143a8fa96ef3a6c8d40299151683369d1f493132ad19c3357604203f8b4660f85ae7cd3dfc8f60d50a13b336c6950cad875a2f10d94fc8a75f58506c2d5034b8927b652"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0xff, 0xfe, 0x2, [@generic={0x83, 0x6, "2e6b065dff0b5bad48bd9c13c10da9a902e8a4e072b985377b57fc66dd333fb371a2aa07c42365cab7677e1730cacd592b76ee881a564601c7bcdf8d8b37cdb90bf6aa2edc99de22675d48e5e92e37233eca54a30a4dec6fe84792b30d4ddca57db8e3cfc72689442017df05e52fff5b28d724d6d223279bdffccc304bec8a2714"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xff81}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x2, 0x9, 0xae, [@generic={0xf8, 0x5, "2b48e6a0bfbf0a588509c4b6d848b77d81d962995523043f4215a941d6b8d9ad1530a2be7aa3ee3e19ad56a4dcd2851a7688d5de95ac0aed68708ed920d1cdfa76929990ff046c30b62e4870b6145ed3996a71ed058b55a7c92c0b90acd6eb4cbf7077c09fec4f2bb59ebfb8b92f9daa4bd037fbd7fca5a984d985bd785cbd6f9e3891f9566972c75a8ad18bed13ac0152bd8583bbd806b35beaaeebcf6d5ab32767cd2609c0c65a23ec373a4a2db5ddb777373b11da59be6dee0d0a3beeb659c0cd158ce02204403d4e679fd339bbe3c4f8ef28230f4ebbed5bb2c2601315172d0d3edafad57b2b44efe39461f58e8263b9d2881193"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x8, 0x20, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9a, 0xf78}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3f, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x200}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x45, 0x20, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x2, 0x40, 0x2, [@generic={0xb6, 0x7, "1273d4f2563470f197e2e50b99f2c857a4aea09bf59b70502fbce12f06f9e9c9f591e4c7715efc173c76fe38a0cfcf4f3cd0044a3d20367006ae2e8f4b10c0dd239915f67c84e1f52e966e55e181be095678d3f0b3564929abe63986bf02f1c1846682a67511177b388f1cf4a00fef3d6cb61d77cb67b172b40b0ddbde065cce71c93ed4ac75acbe6aaa9c02f9afb6a224d8993f9520cf59cb3af1231d33b6d233e49382d59a31fb510f43c975b89e9097b6a473"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x40}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x4, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xcdb}, @generic={0x3d, 0x31, "1e365f09fa4f5fec0f70d0827b908272942b00dd4aef8acf9262f56d02eaed4b57d3f37d9ae392c24d9c4858f5d3eb95e8e262e497b5c4fe3f7b99"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0x3f, 0x9, [@generic={0x7e, 0x3, "0fb873961fd025a829b18fd4774e3851cff68841ad5da483e57a98bda31e555633659820e4ffd3d2cdacacfa2e2084fac69e39ccf4036b9f462ee3afbc7443d098b4f9ea30e107da368f235873df2b6a3d96e485d6fbc38f9e23ebbf0198dd3db35b741d5537e7a642de2825e8de0380c0d769fc95c0fcf65fa5f7b9"}, @generic={0xc0, 0x7, "ab3d4d45b8c36ff70ea7f8c9a1eff19c12f6b6949d11e69f42fef85af01798e17863190886baf13593994ed6533769b9bea0f1017317b6cad175d1d64786ca1a6ae7d4f3922cd67e60ed98426dc20ed3d4578153cc686f1f6586358cd6d6d8f6f3bddaa14fdc283642823a400c50e02fcd5963c3fb4d846c6b8943e39a9a058c13eb1141bc51dd00c02ee8d8671b51655f7775d349c4a72a44c77ef533fefc812b77523567adebf6baba5bcb546b0568ef333ca4d618e9cd309f27322855"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x6, 0x8, 0x0, [@generic={0xd0, 0x9, "97802a124498fcd67dd16d59a7fb840c93a39ec4b9a98fd75a930e8e9bb670586331c53433516c65d2d6c97d2fe25d6f4d6126def7588fc7687333bac40d2552e52a9a2820e680d03d4f079eba8c517f08fbd0adfa7f18166408af12eb988a029b86b5da1de9f50e07f9b6de0a778a1137a8ec6d03c953fcf675c3865cc6877c1e2b3c201312b55c9fb217af2d68e53010a97d82d341129e812b4ea32b874038c8a8c3b00abe54eee619c5562ec605695dda9c104fb4d26ec218d624beee45e3f95a07959660ef82399b6a8a1be1"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0xe2, 0xab, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x80, 0x81, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0x1, 0x40}}]}}, {{0x9, 0x4, 0xac, 0x7, 0x1, 0xff, 0x5d, 0x1, 0x82, [], [{{0x9, 0x5, 0x9, 0x8, 0x400, 0x5, 0xf8, 0xdf, [@generic={0x80, 0x21, "036312d7e28967ae3daed52068f719e5c9867be72e4afe92e65ad1d7fd612ce8259f8dc323c75e7c60afdcfbd8fbf5c017b378f8d97e33b3c94d06b355b454faa32f470ee148491830377309d4aced587f850de545e029ca1cda66d590cac0bd604c204931ed3e516dc9e7cd14c0070585983292c39c654d267004b6c576"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x27, 0x1}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x81, 0x3, 0x6, 0x10, 0x32}, 0xffffffffffffff23, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x3, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "9611f57d9bc9b6b59e7f74c08581e15e"}]}, 0x2, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x441}}, {0x8a, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]}]}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r4, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000b00)={0x7, 0xffff, 0x2, 0x7, 0x9, 0x9}) [ 1326.286469][ T17] usb 3-1: ath9k_htc: USB layer deinitialized [ 1326.287509][ T7235] usb 1-1: ath9k_htc: USB layer deinitialized [ 1326.364526][T18645] FAULT_INJECTION: forcing a failure. [ 1326.364526][T18645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.377904][T18645] CPU: 1 PID: 18645 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1326.377934][T18645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1326.377950][T18645] Call Trace: [ 1326.377959][T18645] dump_stack+0x143/0x1db [ 1326.377991][T18645] should_fail.cold+0x5/0xa [ 1326.378023][T18645] _copy_from_user+0x2c/0x180 [ 1326.378051][T18645] input_event_from_user+0x131/0x3a0 [ 1326.418976][T18645] ? input_event_to_user+0x3a0/0x3a0 [ 1326.419011][T18645] evdev_write+0x356/0x760 [ 1326.428767][T18645] ? evdev_read+0xe40/0xe40 [ 1326.428799][T18645] ? security_file_permission+0x248/0x560 [ 1326.428842][T18645] ? evdev_read+0xe40/0xe40 [ 1326.428868][T18645] vfs_write+0x28e/0x9e0 [ 1326.428895][T18645] ksys_write+0x1ee/0x250 [ 1326.428922][T18645] ? __ia32_sys_read+0xb0/0xb0 [ 1326.428949][T18645] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1326.428984][T18645] ? syscall_enter_from_user_mode+0x27/0x70 [ 1326.429016][T18645] do_syscall_64+0x3a/0xb0 [ 1326.429041][T18645] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1326.429072][T18645] RIP: 0033:0x4665d9 [ 1326.429093][T18645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1326.429119][T18645] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1326.429149][T18645] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1326.429168][T18645] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1326.429185][T18645] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1326.429203][T18645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1326.429220][T18645] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1326.591257][ T7235] usb 4-1: USB disconnect, device number 21 10:24:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1326.607686][ T32] usb 2-1: too many configurations: 14, using maximum allowed: 8 [ 1326.633196][ T8086] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1326.645050][ T7235] usb 4-1: ath9k_htc: USB layer deinitialized [ 1326.757732][ T32] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1326.767985][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1326.897735][ T32] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1326.907913][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1326.947466][ T2608] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1327.027676][ T32] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1327.037933][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1327.057468][ T7235] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1327.127551][ T32] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1327.137784][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1327.227593][ T32] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1327.237745][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1327.327621][ T32] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1327.337904][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1327.357763][ T2608] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.377679][ T7235] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1327.427586][ T32] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1327.437862][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 10:24:58 executing program 5: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1c3) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x6, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000340)="e35e8af4cb3e8048e789c67f2c649d9c976d4099f6f83cb039c059f88948bf6b550fb981c6bc3ee032baf88b455e5162c96ab26ea8dd3c5bd6a71ef1abdc7b5d21afbd9ac8a4138a2fd2f05ec9d12cc515f51704ba10a290bc73da67f117a1a3bd626fcf904fac11cbf94761", 0x6c) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xb, &(0x7f0000000200)="1585cb69d33c45218f6652"}) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000003c0)={0x1f, 0x1, 0x1, 0x1ff, "895a2bcd27086029e7e6efc2333f50642ead831475bde66918af18fb4990c54b"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0xaf, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:24:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5ebfb638105e100002a00004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff200000100004ecc0000000100004ef90000000100ad4eca0000000100004e000000000100e84eaa40daf20100004e2f0000000100004e926e9e5c"]) 10:24:58 executing program 4 (fault-call:2 fault-nth:23): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1327.518645][T18667] FAULT_INJECTION: forcing a failure. [ 1327.518645][T18667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.518685][T18667] CPU: 0 PID: 18667 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1327.537733][ T32] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1327.540544][T18667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.540564][T18667] Call Trace: [ 1327.540574][T18667] dump_stack+0x143/0x1db [ 1327.564584][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1327.568257][T18667] should_fail.cold+0x5/0xa [ 1327.568298][T18667] _copy_from_user+0x2c/0x180 [ 1327.568337][T18667] input_event_from_user+0x131/0x3a0 [ 1327.595687][T18667] ? input_event_to_user+0x3a0/0x3a0 [ 1327.595726][T18667] evdev_write+0x356/0x760 [ 1327.595755][T18667] ? evdev_read+0xe40/0xe40 [ 1327.595778][T18667] ? security_file_permission+0x248/0x560 [ 1327.595809][T18667] ? evdev_read+0xe40/0xe40 [ 1327.595832][T18667] vfs_write+0x28e/0x9e0 [ 1327.624571][T18667] ksys_write+0x1ee/0x250 [ 1327.624613][T18667] ? __ia32_sys_read+0xb0/0xb0 [ 1327.624641][T18667] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1327.624676][T18667] ? syscall_enter_from_user_mode+0x27/0x70 [ 1327.624709][T18667] do_syscall_64+0x3a/0xb0 [ 1327.624733][T18667] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1327.624764][T18667] RIP: 0033:0x4665d9 [ 1327.624785][T18667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.624811][T18667] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1327.624841][T18667] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1327.624860][T18667] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1327.624878][T18667] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.624895][T18667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.624913][T18667] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1327.677798][ T2608] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1327.744694][ T2608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.744728][ T2608] usb 6-1: Product: syz [ 1327.753535][ T32] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1327.753573][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.753600][ T32] usb 2-1: Product: syz [ 1327.753620][ T32] usb 2-1: Manufacturer: syz [ 1327.753638][ T32] usb 2-1: SerialNumber: syz [ 1327.788535][ T32] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1327.794082][ T2608] usb 6-1: can't set config #1, error -71 [ 1327.824330][ T2608] usb 6-1: USB disconnect, device number 52 [ 1327.848025][ T17] usb 1-1: new high-speed USB device number 51 using dummy_hcd 10:24:59 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x9}, {}, @ramp={0x22a1, 0x1, {0x6000, 0x5, 0x1, 0x2}}}) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) ioctl$HIDIOCGRAWNAME(r1, 0x40305839, &(0x7f0000000080)) write$hidraw(r1, &(0x7f0000000200)="ed", 0x1) ioctl$HIDIOCGRAWNAME(r0, 0x40305829, &(0x7f0000000080)) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x181d02) ioctl$HIDIOCGRAWNAME(r2, 0x40305829, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x4000) 10:24:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)=ANY=[@ANYBLOB="1500004e7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b267418d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e92000000"]) 10:24:59 executing program 4 (fault-call:2 fault-nth:24): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1327.874752][ T2105] usb 2-1: USB disconnect, device number 77 [ 1327.892274][ T32] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1327.911712][ T2105] usb 2-1: ath9k_htc: USB layer deinitialized [ 1327.925467][T18687] FAULT_INJECTION: forcing a failure. [ 1327.925467][T18687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.925503][T18687] CPU: 1 PID: 18687 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1327.925530][T18687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.925546][T18687] Call Trace: [ 1327.925556][T18687] dump_stack+0x143/0x1db [ 1327.965221][T18687] should_fail.cold+0x5/0xa [ 1327.965264][T18687] _copy_from_user+0x2c/0x180 [ 1327.965294][T18687] input_event_from_user+0x131/0x3a0 [ 1327.979769][T18687] ? input_event_to_user+0x3a0/0x3a0 [ 1327.979808][T18687] evdev_write+0x356/0x760 [ 1327.979845][T18687] ? evdev_read+0xe40/0xe40 [ 1327.979870][T18687] ? security_file_permission+0x248/0x560 [ 1327.979906][T18687] ? evdev_read+0xe40/0xe40 [ 1327.979932][T18687] vfs_write+0x28e/0x9e0 [ 1327.979958][T18687] ksys_write+0x1ee/0x250 [ 1327.979982][T18687] ? __ia32_sys_read+0xb0/0xb0 [ 1328.019799][T18687] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1328.019860][T18687] ? syscall_enter_from_user_mode+0x27/0x70 [ 1328.019895][T18687] do_syscall_64+0x3a/0xb0 [ 1328.019920][T18687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1328.019951][T18687] RIP: 0033:0x4665d9 [ 1328.019971][T18687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:24:59 executing program 4 (fault-call:2 fault-nth:25): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:24:59 executing program 1: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x167f42) ioctl$HIDIOCGRAWNAME(r0, 0x40086602, &(0x7f0000000080)) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x8, 0xc5fa6892e5b488f1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {0xffff}, {0x2}, @rumble={0x0, 0xbfe}}) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x4, 0x501942) write$hidraw(r2, &(0x7f0000001180)='=', 0x3b000) read$hidraw(r0, &(0x7f0000000180)=""/50, 0x32) r3 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x14f142) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) write$hidraw(r3, &(0x7f0000000000)="c2", 0xa00000) r5 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x8, 0xd47dd7b4d57ad820) write$hidraw(r5, &(0x7f0000000140)="2ae763bb48132fbbb092d3f9a52a70cd01da68a569b2c7693bd2bed9e81edf83710db7af50aa2c786f7ba530248abe180b2fdc", 0x33) write$hidraw(r0, &(0x7f0000000100)='>', 0x1) ioctl$HIDIOCGRAWNAME(r1, 0x40305829, &(0x7f0000000080)) [ 1328.019996][T18687] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1328.020023][T18687] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1328.020042][T18687] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1328.020059][T18687] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.020075][T18687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.020092][T18687] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1328.113658][ T33] audit: type=1800 audit(1624530299.222:3138): pid=18700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14158 res=0 errno=0 [ 1328.128758][T18702] FAULT_INJECTION: forcing a failure. [ 1328.128758][T18702] name fail_usercopy, interval 1, probability 0, space 0, times 0 10:24:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000003c0)=""/220) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe07, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x81, 0x84102) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x17, 0xe0, &(0x7f00000001c0)="3bb4d796ee5c2b1851d8941e7155ff2faf3ced5f9ba0714416a3eb8b76024807b5b30182c565cba94be3b33ee7351628482ec09c0f7e737967acb9ab6fe44dccc307e18a73309b387259512e9ecac1564bd0fa5786bfa8d8fc74d2e9454d3aea38dd870a6489b880acc3e61bfb923358b8d99c5940aaff557bfe99f5f94c76a3867bfcd4a1fe3dcd484a1fcb024b58e31ff1d3a130a8698cf48813d142f429661b35c4a399ff30e77a52eab11db9d9a28848dfec3c70631f749a246a6651ba9b4e15f4d2562dc404c492dd0784705ca88a3c65d7d1221bc0b743ad7aad04bfa4"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000500)={0x0, 0x1a, 0x0, 0x401, "a0879294166ae93799e9ad5868af000000000000000000000100"}) syz_usb_connect(0x0, 0x7d, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xc4, 0xa8, 0xe, 0x40, 0x8ca, 0x20, 0xa431, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x0, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x41, 0xfb, 0x9f, 0x0, [], [{{0x9, 0x5, 0x2, 0x1, 0x0, 0x0, 0x80, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0x1f, 0x0, [@generic={0xe, 0x0, "42bfb0b1b9fbc866328db50b"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82}]}}, {}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x201, 0x3, 0xe5, 0x0, 0xff, 0x17}, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0d0f050000"], 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2001}}, {0x26, &(0x7f0000000100)=ANY=[@ANYBLOB="2603bc006b3d3f836a0ad3b05f6729519995247f122b620ead5ef3bb88"]}]}) [ 1328.176590][T18702] CPU: 1 PID: 18702 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1328.176613][T18702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.176623][T18702] Call Trace: [ 1328.176631][T18702] dump_stack+0x143/0x1db [ 1328.176652][T18702] should_fail.cold+0x5/0xa 10:24:59 executing program 4 (fault-call:2 fault-nth:26): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1328.176670][T18702] _copy_from_user+0x2c/0x180 [ 1328.176690][T18702] input_event_from_user+0x131/0x3a0 [ 1328.176708][T18702] ? input_event_to_user+0x3a0/0x3a0 [ 1328.176722][T18702] evdev_write+0x356/0x760 [ 1328.176739][T18702] ? evdev_read+0xe40/0xe40 [ 1328.176753][T18702] ? security_file_permission+0x248/0x560 [ 1328.176773][T18702] ? evdev_read+0xe40/0xe40 [ 1328.176787][T18702] vfs_write+0x28e/0x9e0 [ 1328.176804][T18702] ksys_write+0x1ee/0x250 [ 1328.176821][T18702] ? __ia32_sys_read+0xb0/0xb0 [ 1328.176836][T18702] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1328.176858][T18702] ? syscall_enter_from_user_mode+0x27/0x70 [ 1328.176888][T18702] do_syscall_64+0x3a/0xb0 [ 1328.176913][T18702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1328.176944][T18702] RIP: 0033:0x4665d9 [ 1328.176966][T18702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.176993][T18702] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1328.177022][T18702] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1328.177042][T18702] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1328.177060][T18702] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.177078][T18702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.177094][T18702] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1328.207475][T29681] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1328.209170][ T17] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1328.297234][T18708] FAULT_INJECTION: forcing a failure. [ 1328.297234][T18708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.424684][T18708] CPU: 0 PID: 18708 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1328.424719][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.424732][T18708] Call Trace: [ 1328.424744][T18708] dump_stack+0x143/0x1db [ 1328.424777][T18708] should_fail.cold+0x5/0xa [ 1328.424813][T18708] _copy_from_user+0x2c/0x180 [ 1328.424846][T18708] input_event_from_user+0x131/0x3a0 [ 1328.424872][T18708] ? input_event_to_user+0x3a0/0x3a0 [ 1328.424894][T18708] evdev_write+0x356/0x760 [ 1328.424918][T18708] ? evdev_read+0xe40/0xe40 [ 1328.424940][T18708] ? security_file_permission+0x248/0x560 [ 1328.424972][T18708] ? evdev_read+0xe40/0xe40 [ 1328.424995][T18708] vfs_write+0x28e/0x9e0 [ 1328.425023][T18708] ksys_write+0x1ee/0x250 [ 1328.425048][T18708] ? __ia32_sys_read+0xb0/0xb0 [ 1328.425075][T18708] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1328.425109][T18708] ? syscall_enter_from_user_mode+0x27/0x70 [ 1328.516111][T18708] do_syscall_64+0x3a/0xb0 [ 1328.516154][T18708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1328.516187][T18708] RIP: 0033:0x4665d9 [ 1328.516207][T18708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.550623][T18708] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1328.550671][T18708] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1328.550688][T18708] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 10:24:59 executing program 4 (fault-call:2 fault-nth:27): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1328.550704][T18708] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.550719][T18708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.550736][T18708] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1328.551041][ T2608] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1328.638726][T18710] FAULT_INJECTION: forcing a failure. [ 1328.638726][T18710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.638768][T18710] CPU: 0 PID: 18710 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1328.660725][T18710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.660740][T18710] Call Trace: [ 1328.660747][T18710] dump_stack+0x143/0x1db [ 1328.660768][T18710] should_fail.cold+0x5/0xa [ 1328.660787][T18710] _copy_from_user+0x2c/0x180 [ 1328.660814][T18710] input_event_from_user+0x131/0x3a0 [ 1328.660832][T18710] ? input_event_to_user+0x3a0/0x3a0 [ 1328.660847][T18710] evdev_write+0x356/0x760 [ 1328.660863][T18710] ? evdev_read+0xe40/0xe40 [ 1328.660878][T18710] ? security_file_permission+0x248/0x560 [ 1328.660898][T18710] ? evdev_read+0xe40/0xe40 [ 1328.660912][T18710] vfs_write+0x28e/0x9e0 [ 1328.660929][T18710] ksys_write+0x1ee/0x250 [ 1328.660945][T18710] ? __ia32_sys_read+0xb0/0xb0 [ 1328.660960][T18710] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1328.660982][T18710] ? syscall_enter_from_user_mode+0x27/0x70 [ 1328.661003][T18710] do_syscall_64+0x3a/0xb0 [ 1328.661017][T18710] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1328.661035][T18710] RIP: 0033:0x4665d9 [ 1328.661049][T18710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.661065][T18710] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1328.661082][T18710] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1328.661093][T18710] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1328.661103][T18710] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.661113][T18710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.661129][T18710] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1328.759575][ T2105] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1328.783762][T29681] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1328.801010][ T7235] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1328.801035][ T7235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.801050][ T7235] usb 4-1: Product: syz [ 1328.801062][ T7235] usb 4-1: Manufacturer: syz [ 1328.801073][ T7235] usb 4-1: SerialNumber: syz [ 1328.849544][ T7235] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1329.007589][ T17] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1329.017252][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.017907][ T2608] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.025503][ T17] usb 1-1: Product: syz [ 1329.039754][ T17] usb 1-1: Manufacturer: syz [ 1329.044366][ T17] usb 1-1: SerialNumber: syz [ 1329.088337][ T17] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1329.177794][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1329.188738][ T2105] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1329.198676][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1329.210307][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1329.220051][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1329.229770][ T2105] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1329.239739][ T2105] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1329.297838][ T2608] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1329.307842][ T2608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.315875][ T2608] usb 6-1: Product: syz [ 1329.320298][ T2608] usb 6-1: Manufacturer: syz [ 1329.324914][ T2608] usb 6-1: SerialNumber: syz [ 1329.368985][ T2608] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1329.467738][ T2105] usb 2-1: New USB device found, idVendor=08ca, idProduct=0020, bcdDevice=a4.31 [ 1329.476921][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.485015][ T2105] usb 2-1: Product: syz [ 1329.489486][ T2105] usb 2-1: Manufacturer: ¼㵫茿੪냓束儩閙缤⬒๢庭믳ˆ [ 1329.497414][ T2105] usb 2-1: SerialNumber: syz [ 1329.506954][ T2105] usb 2-1: config 0 descriptor?? [ 1329.528313][T18704] raw-gadget gadget: fail, usb_ep_enable returned -22 10:25:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1329.647681][ T7235] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1329.657751][ T17] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1329.679877][ T8086] usb 4-1: USB disconnect, device number 22 [ 1329.837817][ T2105] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1329.846774][ T2105] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 1329.863537][ T2105] input: failed to attach handler kbd to device input48, error: -5 [ 1329.872460][T29681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1329.881670][T29681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.889789][T29681] usb 3-1: Product: syz [ 1329.894090][T29681] usb 3-1: Manufacturer: syz [ 1329.898770][T29681] usb 3-1: SerialNumber: syz [ 1329.907297][ T2105] usb 2-1: USB disconnect, device number 78 [ 1329.978406][T29681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1330.098765][T29987] usb 1-1: USB disconnect, device number 51 [ 1330.127676][ T2608] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1330.559606][ T2608] usb 6-1: ath9k_htc: Invalid TX pipe: 0 [ 1330.565433][ T2608] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1330.587616][T29681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1330.687501][ T17] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1330.694641][ T17] ath9k_htc: Failed to initialize the device [ 1330.697702][ T7235] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1330.701614][T29987] usb 1-1: ath9k_htc: USB layer deinitialized [ 1330.713180][ T7235] ath9k_htc: Failed to initialize the device [ 1330.726993][ T8086] usb 4-1: ath9k_htc: USB layer deinitialized [ 1330.761368][ T32] usb 6-1: USB disconnect, device number 53 [ 1330.770990][ T2608] ath9k_htc: Failed to initialize the device [ 1330.777602][ T32] usb 6-1: ath9k_htc: USB layer deinitialized [ 1331.009018][ T2608] usb 3-1: USB disconnect, device number 5 [ 1331.067564][T29987] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1331.077667][ T8086] usb 4-1: new high-speed USB device number 23 using dummy_hcd 10:25:02 executing program 5: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x42001) write$hidraw(r0, &(0x7f00000002c0)="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", 0xfffffc71) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x8040) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c4, &(0x7f0000000180)=ANY=[]) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xffff, 0x1, 0x5, 0x80, 0x1fc, 0x8}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x1000}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "99bbd177", {0x1, 0x4, 0x4, 0x2, 0x81}}) r4 = syz_usb_connect_ath9k(0x3, 0x1b7b51b926f19f58, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x0, 0x0) 10:25:02 executing program 4 (fault-call:2 fault-nth:28): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000003c0)=""/220) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe07, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x81, 0x84102) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x17, 0xe0, &(0x7f00000001c0)="3bb4d796ee5c2b1851d8941e7155ff2faf3ced5f9ba0714416a3eb8b76024807b5b30182c565cba94be3b33ee7351628482ec09c0f7e737967acb9ab6fe44dccc307e18a73309b387259512e9ecac1564bd0fa5786bfa8d8fc74d2e9454d3aea38dd870a6489b880acc3e61bfb923358b8d99c5940aaff557bfe99f5f94c76a3867bfcd4a1fe3dcd484a1fcb024b58e31ff1d3a130a8698cf48813d142f429661b35c4a399ff30e77a52eab11db9d9a28848dfec3c70631f749a246a6651ba9b4e15f4d2562dc404c492dd0784705ca88a3c65d7d1221bc0b743ad7aad04bfa4"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000500)={0x0, 0x1a, 0x0, 0x401, "a0879294166ae93799e9ad5868af000000000000000000000100"}) syz_usb_connect(0x0, 0x7d, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xc4, 0xa8, 0xe, 0x40, 0x8ca, 0x20, 0xa431, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x0, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x41, 0xfb, 0x9f, 0x0, [], [{{0x9, 0x5, 0x2, 0x1, 0x0, 0x0, 0x80, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0x1f, 0x0, [@generic={0xe, 0x0, "42bfb0b1b9fbc866328db50b"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82}]}}, {}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x201, 0x3, 0xe5, 0x0, 0xff, 0x17}, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0d0f050000"], 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2001}}, {0x26, &(0x7f0000000100)=ANY=[@ANYBLOB="2603bc006b3d3f836a0ad3b05f6729519995247f122b620ead5ef3bb88"]}]}) 10:25:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ee, [{{0x9, 0x2, 0x3f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1004, &(0x7f0000000200)={[{0x1000, 0x4e00, "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"}]}) [ 1331.340944][T18794] FAULT_INJECTION: forcing a failure. [ 1331.340944][T18794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.340994][T18794] CPU: 1 PID: 18794 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1331.341023][T18794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.341039][T18794] Call Trace: [ 1331.341048][T18794] dump_stack+0x143/0x1db [ 1331.341079][T18794] should_fail.cold+0x5/0xa [ 1331.341109][T18794] _copy_from_user+0x2c/0x180 [ 1331.341139][T18794] input_event_from_user+0x131/0x3a0 [ 1331.341167][T18794] ? input_event_to_user+0x3a0/0x3a0 [ 1331.341192][T18794] evdev_write+0x356/0x760 [ 1331.341218][T18794] ? evdev_read+0xe40/0xe40 [ 1331.341242][T18794] ? security_file_permission+0x248/0x560 [ 1331.341274][T18794] ? evdev_read+0xe40/0xe40 [ 1331.341310][T18794] vfs_write+0x28e/0x9e0 [ 1331.341338][T18794] ksys_write+0x1ee/0x250 [ 1331.341364][T18794] ? __ia32_sys_read+0xb0/0xb0 [ 1331.341391][T18794] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1331.341423][T18794] ? syscall_enter_from_user_mode+0x27/0x70 [ 1331.341454][T18794] do_syscall_64+0x3a/0xb0 [ 1331.341478][T18794] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1331.341508][T18794] RIP: 0033:0x4665d9 [ 1331.341528][T18794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.341551][T18794] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1331.341578][T18794] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1331.341596][T18794] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1331.341614][T18794] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.341629][T18794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.341646][T18794] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1331.358169][ T8086] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1331.607639][ T2105] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1331.647559][T29681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1331.654779][T29681] ath9k_htc: Failed to initialize the device [ 1331.663339][ T2608] usb 3-1: ath9k_htc: USB layer deinitialized [ 1331.737471][T29987] usb 1-1: device not accepting address 52, error -71 [ 1331.857480][ T7439] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1332.017535][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1332.028544][ T2105] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1332.038425][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1332.049316][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1332.059090][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1332.068854][ T2105] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1332.078729][ T2105] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1332.089313][ T2608] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1332.107538][T29987] usb 1-1: new high-speed USB device number 53 using dummy_hcd 10:25:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e65e, [{{0x9, 0x2, 0xfffffd28}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfc, &(0x7f0000000140)=@generic={0x0, 0x0, 0xf4, "9394c60d", "80e287bdd24f81a09264070a93af7cfe51796e730b9e12b8248c665cf78b5b15309ac9f8059a5f384ac2481639e5b32ee06662654746e34cfb4210aabd05e1f14ed22657475a35251339f3b788ba489f8ab9fa326d7d012dd87e6f00778775f7d324f7fbc06e8ccb518c00d42882ad6a98309da5df1959367c38571b2878815ae66705e3827d2bb5077dea4cb5860c3f25337e05bfecbf863a39a806e765bd25a01d02ec3706ffeb3a6cc6ba18f78824dbfb1493ce566609ec5f1d237e882ade699cd7b30804840b2c12432b88605da0c53d8a139ae46d25788d20ec3fbbf14339ec9cabf92653a4d08ecd6b6481fe0db01ef235"}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x8a00, 0x1f, 0x800, 0x5, 0x50, 0x2f8}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)=ANY=[@ANYBLOB="1500004e7ad9fa4d15e5369fcfe961c5ebfb6381054c4500000000000000004e0f3a19f96e1b82179955719b3ff2a30565a38c2f9d936521f0d076b96a00000000000001ff86cc76e80b59560100004ef90000000100004ecaf8ee3838a1004e000000000100004ef10000000100"/124]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1154, &(0x7f0000000900)=ANY=[@ANYBLOB="0010004ec896768253ff8c49dfaf6fbd9769e302d8ff698ddcc2aa59ed8ecafda137eb072c2fcb4c6a6e62335791f25f8c4c5fe2b05f9cd6ae918c5a8bee051080f256cdcb4c09dd21b96028134f1fc05e611dcf2eedd79c9e6b428a976ac6cd1b32d577254ab26c74711f087af685fa7e4f4b502391db5d97de6829dff410c8e9f1c2b5d00be5d335025597d7795027d6485b2faa25c304784a7367a3049299e4e70e012d5865b0bebc339461662c27cf004dac28bebd9c9a0669ad55205db50c1d7733e9323179ad7f9aca6a6a6c3eb930192a1e1a6d85eda0ee6092d619b8597c5cc3d1516f2d9d785e5d9b3c82d90fc402764f3c5f365644931fdd139b7027abcaa805ea6823d5d4594433a1922164378d51d1804b2aa46cd4c0e1bd779e71e5a219ef73d584e7683450e2d548d8ae1006f17fdb0c7c5d0f9d53ccbe525fd9e1950963f6cc62bd0d03e8ee0374a16664531ddd5f55642edf378ab1ca757528e87987a69d2e682a8d230a46f5ed1796b0095152f4b9d420460bb01c58b1b0e7e8826998151f3563ae717b1e097a8b3572228bb543700d38d986694dfe1a2536d3db2d6a7977b0fee3df50b207ec762fe02c9874a70c5013b61cb8fa099200623e53d855c3d4459bbc5bc73b03c399f5bc5b229c2b9c307d9e7c183f5d0e71a45cbd49c8b2808e75bd17b4f5eede0deb425e0e4a6827f6e3a272c6c3c4561043634aee72401fb85718db6bf367a74093a2a796c40c95e78a78ffd0de9696c4b8556a1977bdfacc35442340d232ae66cd3fe3478120c05198d39486bbc504f087fb1e77cd95d8e8c75759d2fd522275b4b922558b8f36ce846a70b21f797a951382e21bb454e2a963ba28163a20870ddf0beb5186102b0a2ad4e7119911f38e4e81b735801d402442827a62420eb73dfd46cb33c835eccec6f009fc69241afa7e8b3fedd7bf2191c7980199b96cbe798753a2091a4116161c416e76ba78d507a8055752e2261380c232be97af80031150ae8f776a30216c2304e53abc4cccac8ab8722b2e81fed132d33654919085e4ba008b676e8cb7f8d8e825bab98787c2f5fa448c66b018e5b21737d32df0eb2610910f73ad2fddbabec0c6308b511db45d0bd690c8f686436724426a3b4ad550f5d27f8934e442e76d24a5b516eceb07e22a02b598f04d5ecaf6302fc33e9f13b589716eb32ccc2f2c5b7637e698c34a217e612740f4b20ca2deafa453b19adecda1d3b49cff7e8715377b0ad3b1bef9f38224dac55b9412735e25cae7e1e9a29f557337118c9a9d33dfd54620946d911f92502e2a9497a9dcc9d8f700dec5805fd1a91c4d2c235071fe23b2642fe2e76201da49a749aa40a4404cb46ca7906bb7b156a9469cfa34c7cde3dbef6030eaf9d217288d8a65841b957f044436d8011ead43276f9e8f37abb93d8352acb5bbb7962df5e1e53cb5dbb739d7c2a6feb7a22192b83373012b9bcfcf31dcbff14e65646a643682757877198801344eea1370b82e73bc652603e2e43c82c749bc79acb21b483bb472b8a584d99aa3f4f9d74a41384d1dc0e631003dbcf4f4194ee377ff78e4afd3e4234707c76a9e8ed857edc8142634d6dc3d84a2af8d3bea76533337ba4a7296cbb3cb39784e3c82188c38d6c9a5fb85ad2ce507e5e190ecd2719dbecc41cdea7462f58db2d3984309224a42e7dcbe61631b144c7cf8717a73d90342ed5d702fd6860a99145dd3ec3cc1f24d536059d254d4158b51e5c65f36dfed6fe7d6c786c03db6412f25eaa79e2d31c406e05d79582b742492e9295e31568d5e9a1ae6903057d0ad53f6ef11263d0f5a9f4837f7fc58f7492ef35098ada6bcf97475de47f4c35e5a667eb2e0d041fcf4dbd49457ee997c5d54444e00fb75cbe3e45cf5bb3759d71839ce124d2d7679371a8ad4f2ac4ba1cb3e93222bb7efd18ece9ffe36a599483710e9e5df405e74867226148c8da3e40d3853bcbc423662c359dd1dbb1a4362c70cead8113a6c25b3c0ee2eb47e38d870ee8e3a2889fbb63b8b629549e478221537a81f2fff87fb0f2c806e9919a1bd6bc5986b5c8d2aa0ac6a28d0706d05fac3f0d0aa0b59407bd7f6895cefb6ebbe86a4e80f92e52f43162818bcede5c7333a5538c7b001d53461a7f9636124f41d8c8750b95738bec081f33074f42234f54d1c92c7efdf9028367be8470ae0a155f460b726d2f8893ee9a34791e138a09843fe9a9be103655812a3ba11d97bbb91413655dfe3caca14141c695ffadb092efc61987b26011a220e0a53fa84f2e213149b8c7bc809e50ca72dfb6f11a78703daa3013920e3591164460213ff6241681769eda9d62ea5c3dfeba9a8890505bd6d0f6ca2a7cfb3ef9037154243bffc279f4ad433948ae71f41fcfba2a16d24bdb10b928334ffd43cef89a9227c7ae4b5df0a2bc26e12778773f3db5353bd61a885d6632644b37af3b5d29efeacaef2a8a9512cbb205e8c783522682028a3822436d4e16a271f1e060dbc239e6a19cacf181ce52499219e9301a274e3d7c31982cf5f2094c2798300a75db191d710368172458d0d3ac8e3d21593ec181d90eb3b6a5234a36293ebd7914afc1ae5b64e2bea28c4fad2c0f1d540e96b40d21632fdc06620fd7d11fc8f1bf47ae2b726502ec1e58bf7ad7d8e78bd28f1e32bdbc390660b8b9ea205183facef64f36c699fd131cef399e6c79f5285d9254907c3c09ccf961bcd7a182b9a9eb480009622816211b25e6c9d1c9a96d3ed2cd0799d9614616d5d21600b041e39cbd0ee4fec0eeffc452dbe3a23d1620b8e87dfc815c31cc6c9ef0b03cd87fdf99a0768e1f6a26fe1d89220687b163e4c92ef5a18ef10b9b493293df58d83403824511d9f617bf313c50f09f422d659926f516c82e23ce007c13c1424211caec081110efc7981854767cb7c21ed1a2f6ad02e22ffdd0afa7242ef99667b43bac99ff0dbcf094f71df5361c78992d702ffa907eaffade9898122f074fba7f4527c394ccc64c633be85112078353cd17e824b696e05ec1c9d4b53ad7ad73ea5c5f3a670fbc4cc31b7f01e315d972b4302e3f480462c0c02e2cfcc69d49d4c20b2f63febffc4c35402d22575ff98442d3fb707137adca0517ec3aa2e846eb73fa8a027e8b1c35cb0abb0ede9252b4618ac4b353be295d7efe992fd7e4ea1943435a90da28642097edb85b372c63aa89066e9a242916de6b3107f4d7a39ef1b6aa67561d533191517af0388c7bec8dcacc43c34c7f28bc31e2dfea6494308c85fc5e23b91cee767981cea3384aa279ba890a19bd464cc5e22065bab8e10309ce0cf0209cfdad0f185b44b9efd10f7f3f379dc32bf197e512d8646c0be88e6a798e4be23487104ca7d02a5664789969a3bf6f5f11c24907e49031ea5a5e2f1b83d79dc34dd417e3c6e8ee2d961e842ba11ba58dfbe8d8caf079c0924c294f18203d54ce00f66fc7a37ec0b94c73c958e22609c6180be15f6c11568f222f31095d4483431eacba12ccf12634ea2db01fd30fdd1920b138d86ec17b63b8b8b2b4386c59bb028a74b35a821b78696651641e6b90fce56a94a03a64d71a180ecde65432f1a69a3d9b3ef48c5c2ddba185689b13e94a2314ed1b029791d60aa27c9ccfbe5900d2216de99b31a722c648467da2b6a546a1b59e3aa835ee5d93f8778ae99a12aa903b65b6ecd03dfeecbf78b46da2c62f264e7cae1aa3a4775dbf39d7b332c9e2d505f7afa45414c55c9b3abbc002b531090ca5440aa84c3e17b6baab348fc7707ff199d1203906bea22c7d00ce8a8490a56dc1e8936e0d0d272c7638674da5a49bb8d96db21e6ef6beb4b26c984037e54ca0f14e603b80ffb09c3e48ae19e9ae82ee48449b54626886a572fe11356949d9ff0b8bdca1a6610c97919a7c224a3418dcfdfbf3ddc36e79922b76f4669b91cf754b34e1778ee215b33b136f3ddf9fbcd1b6d9e057972e7a019310ba5fa372de47f79056d0c6ff06228d0953252657c54f5aa825bd9660786d66ee279471acbefb8edce834618f17b06189b10d477f6f05e636186091157a07930091483446d3b719c0f7f4d515a27ba12f5ec508d37267dfde290aec30e33a3d049407060651fdb22982844e89599d27b0a81e366e5de7732ec5c94b7488ba2075344ea974c6bcc78bf195e3bf9fa5263b0dceab118e527cda43d827fcde26aba5700510d1a623adfc46168a6aef3d2f2bfae4226c7c5ced992e8a81f56849f5d1f80d78fb70dbf62cd4cd4ebcc6b5c106c5af08a71de1e2c264bacf3c7f80b332a611b0462cf197fe65b4701f87c8ba4ba44934ac983f3cfea3a220db55ef0c2d397903e79b9e3112eb36d6b94dab0ae0554d92b22f985ac4817d15b11cc6426019303e4718fe17b979a1115f293b119f4a714f843723bed96ef3bcdae569147ff551fa3ce9f3b610aaff7ab92447ede73392eece746ef60e5d4412a0b727d44c43480f2bf86f72e275bae0f6d36fd70cb2fd07d827cfe75d6b39b714d1a00ada674d64d823ec222b54a426ef6d00450a1f46e949b02c73b45c2f94c07f086983ddd3edd1500af0878de85f75ac07fe5ee839e7e5e79dc342506aebd70619f8ef3ea0252b6921a0f8316ac8a9bc12f53a61bf8de8fd0aad1665eb8bf0d943b69f815a4fae14efda863071b7e668e5c92a805bc64bff066f5a1cd4ab2ec43a25429bdc3e714d897d9d3a34a1e1678427ba37231786c5d3e2dc774daf6d6ec0a92c15ce877cb12b14376637de1248be50be825364572406ea0b973d0f9ae144a21605e6131ef982589040fdd5d28e208c83bdc4e1b71e90dd9668321de4bab768a836e705cd167bff4cdf144328d344313771799fd46b4317a8901c2b59643a4dfe9134a9b6d3a6accf91ccb8cec53339cbd7beccc3ee0a224a8bf5c990e70000e652439dccf0d9fd6ba93145374c2037b858e6b760393fd929827a1942bfe90c9265ee4049e399b755c69ee445743dca910d751e7312ec4076c17cef4163dc9829791b3454a5c486aebc59ab1ba60f7ec45e3c6bcdf081ba2e6e586e960d049b492fa12d6c6f9cf2b570974f8a6bf3662026ce48aade3b129c27cc3a0a3b6d662fb7a02e9852bc00c7a9c60a76132fc77ecb2e75956ea3fd78e235744da30bf106d032998158bc055fb0174c87539b90565f3a82ab4e36810c4271c92bb19a4dc60cb1bc7d454fb3b8cd4eeb5b9fc5a7cde5d9993565613080b9e4d55fff15b44a67bfb0a8c2830c8149b16b448485d9987fe0b8d0da82800bc34ea7ae27e9a32f2dc1eba6c7941acd3a06aeede8c4e744794102122be6d84abfcbe1fc6f207c7af06802afcfac224ed47360fcb286f5cf9f6dc67809caf7229f7da3b5e58f0831ee624d326f3507951ae85c5c41a8e6a7705264f4811978e2ce411a1a240f835c984c0dcbd8f1094816bdde0a9e0b638373078704fa32ef43105c7e55a454d294c04be9b1cc7f334406e065e61d2097c7ef35892b930fd266a325b6e3b9d9bf58c90acc8a75492a2deaaa1bdd337c267152968e9887b80622246b3610b188ee3c328dabc024cbc3bb40e45330bfd95474e914488251382c3b067cac4a1c38f1cd8c6d565a507998a6c898071e0e4fc4369ddc06d4bfac9ea3be495c4c99369bdf7e82ffa2633322d0f9a91135cea47d60f41f78fa47953a72ff47fb69a5517d2e2b8f0e188e2b33a76ef2f4b5409057ede4903c7df2d744b25affccd536f08596f439249a2ea69a88ff484c78f91f4adff0ab263b3c817f939ad489335c528f38eb0e2f55ce74400004e2141378664a5bc7dc334fac370ba21a9bb220008df3aaadc971c3517aaea198b5e20491f2837ee5e009debf0c9e0ce5f4c0f631c9b2a55a00e3139a2ee029ae8eb05e415ce328ae1d9524d8cd0c3f679886400000200004e8e1c00005500004e6128ff2fe258a6d76c973f5a20427a904fa8b2889fb48b7fb777aee8e9e15f90c2517bc9b4e620fc5f100e2cf79e3a7ccebf202b50e5df28adc3cd5ba29ff56a479375d6f90c50c5ebb0ac0bfe8398ceb19f12e4dd0000004400004ef6542c2d4c2c00c7a7a12b09cce49fb5e07b1eaa38b3f4d1f6307c4b46389ceabed9c3452e3caf4dabf9da548ff010f689e73c644515b1088f577ad1a0f2caeb26dc796f4500004e2ac4e78a1dc51eddf575ea9aa39c272084396f879fd204b4ca6c934edf61fd786b6d6c83445ff7be32df0ff0f232cb304e97a3d27483b5b3595d4282385ca87719ba0d4425000000"]) 10:25:03 executing program 4 (fault-call:2 fault-nth:29): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1332.137950][ T7439] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 1332.157807][ T8086] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1332.167004][ T8086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.175264][ T8086] usb 4-1: Product: syz [ 1332.179568][ T8086] usb 4-1: Manufacturer: syz 10:25:03 executing program 4 (fault-call:2 fault-nth:30): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1332.184339][ T8086] usb 4-1: SerialNumber: syz [ 1332.191921][T18817] FAULT_INJECTION: forcing a failure. [ 1332.191921][T18817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.205276][T18817] CPU: 1 PID: 18817 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1332.205327][T18817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.205347][T18817] Call Trace: [ 1332.205360][T18817] dump_stack+0x143/0x1db [ 1332.205402][T18817] should_fail.cold+0x5/0xa [ 1332.205440][T18817] _copy_from_user+0x2c/0x180 [ 1332.205476][T18817] input_event_from_user+0x131/0x3a0 [ 1332.205515][T18817] ? input_event_to_user+0x3a0/0x3a0 [ 1332.205543][T18817] evdev_write+0x356/0x760 [ 1332.205574][T18817] ? evdev_read+0xe40/0xe40 [ 1332.205601][T18817] ? security_file_permission+0x248/0x560 [ 1332.205635][T18817] ? evdev_read+0xe40/0xe40 10:25:03 executing program 4 (fault-call:2 fault-nth:31): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1332.205659][T18817] vfs_write+0x28e/0x9e0 [ 1332.205690][T18817] ksys_write+0x1ee/0x250 [ 1332.205718][T18817] ? __ia32_sys_read+0xb0/0xb0 [ 1332.205750][T18817] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1332.205786][T18817] ? syscall_enter_from_user_mode+0x27/0x70 [ 1332.205821][T18817] do_syscall_64+0x3a/0xb0 [ 1332.205848][T18817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1332.205881][T18817] RIP: 0033:0x4665d9 [ 1332.205903][T18817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.205933][T18817] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1332.205963][T18817] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1332.205984][T18817] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1332.206002][T18817] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.206020][T18817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.206037][T18817] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1332.258531][ T8086] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1332.287956][ T2105] usb 2-1: New USB device found, idVendor=08ca, idProduct=0020, bcdDevice=a4.31 [ 1332.288000][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.288030][ T2105] usb 2-1: Product: syz [ 1332.288052][ T2105] usb 2-1: Manufacturer: ¼㵫茿੪냓束儩閙缤⬒๢庭믳ˆ [ 1332.288076][ T2105] usb 2-1: SerialNumber: syz [ 1332.290094][ T2105] usb 2-1: config 0 descriptor?? [ 1332.307973][T18793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1332.324532][T18826] FAULT_INJECTION: forcing a failure. [ 1332.324532][T18826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.324573][T18826] CPU: 0 PID: 18826 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1332.324600][T18826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.324616][T18826] Call Trace: [ 1332.324624][T18826] dump_stack+0x143/0x1db [ 1332.324655][T18826] should_fail.cold+0x5/0xa [ 1332.324684][T18826] _copy_from_user+0x2c/0x180 [ 1332.324714][T18826] input_event_from_user+0x131/0x3a0 [ 1332.324738][T18826] ? input_event_to_user+0x3a0/0x3a0 [ 1332.324763][T18826] evdev_write+0x356/0x760 [ 1332.324789][T18826] ? evdev_read+0xe40/0xe40 [ 1332.324814][T18826] ? security_file_permission+0x248/0x560 [ 1332.324846][T18826] ? evdev_read+0xe40/0xe40 [ 1332.324870][T18826] vfs_write+0x28e/0x9e0 [ 1332.324898][T18826] ksys_write+0x1ee/0x250 [ 1332.324925][T18826] ? __ia32_sys_read+0xb0/0xb0 [ 1332.324953][T18826] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1332.324987][T18826] ? syscall_enter_from_user_mode+0x27/0x70 [ 1332.325018][T18826] do_syscall_64+0x3a/0xb0 [ 1332.325042][T18826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1332.325073][T18826] RIP: 0033:0x4665d9 [ 1332.325092][T18826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.325118][T18826] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1332.325148][T18826] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1332.325166][T18826] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1332.325183][T18826] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.325201][T18826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.325218][T18826] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1332.389654][T29987] usb 1-1: too many configurations: 238, using maximum allowed: 8 [ 1332.392891][T18828] FAULT_INJECTION: forcing a failure. [ 1332.392891][T18828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.467617][T29987] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1332.470074][T18828] CPU: 0 PID: 18828 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1332.470110][T18828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.558476][T29987] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1332.559238][T18828] Call Trace: [ 1332.638493][T29987] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1332.652746][T18828] dump_stack+0x143/0x1db [ 1332.652781][T18828] should_fail.cold+0x5/0xa [ 1332.652811][T18828] _copy_from_user+0x2c/0x180 [ 1332.652840][T18828] input_event_from_user+0x131/0x3a0 [ 1332.652864][T18828] ? input_event_to_user+0x3a0/0x3a0 [ 1332.652886][T18828] evdev_write+0x356/0x760 [ 1332.652909][T18828] ? evdev_read+0xe40/0xe40 [ 1332.738252][T29987] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1332.743980][T18828] ? security_file_permission+0x248/0x560 [ 1332.744027][T18828] ? evdev_read+0xe40/0xe40 [ 1332.744053][T18828] vfs_write+0x28e/0x9e0 [ 1332.744082][T18828] ksys_write+0x1ee/0x250 [ 1332.744107][T18828] ? __ia32_sys_read+0xb0/0xb0 [ 1332.815495][ T8086] usb 4-1: USB disconnect, device number 23 [ 1332.816550][T18828] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1332.816595][T18828] ? syscall_enter_from_user_mode+0x27/0x70 [ 1332.816628][T18828] do_syscall_64+0x3a/0xb0 [ 1332.829847][ T7476] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1332.835348][T18828] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1332.840653][T29987] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1332.844132][T18828] RIP: 0033:0x4665d9 [ 1332.861976][ T8086] usb 4-1: ath9k_htc: USB layer deinitialized [ 1332.865301][T18828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.865333][T18828] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1332.865362][T18828] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1332.865381][T18828] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1332.865399][T18828] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.865414][T18828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.937755][T29987] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1332.941311][T18828] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:25:04 executing program 4 (fault-call:2 fault-nth:32): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1333.018345][ T2608] usb 3-1: device descriptor read/64, error -71 [ 1333.028734][ T7439] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1333.038136][ T7439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.046285][ T7439] usb 6-1: Product: syz [ 1333.050676][ T7439] usb 6-1: Manufacturer: syz [ 1333.055298][ T7439] usb 6-1: SerialNumber: syz [ 1333.067692][ T2105] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1333.076101][ T2105] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49 [ 1333.098015][T29987] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1333.111686][ T2105] input: failed to attach handler kbd to device input49, error: -5 [ 1333.120114][ T7439] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1333.123354][T18845] FAULT_INJECTION: forcing a failure. [ 1333.123354][T18845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.141565][T18845] CPU: 0 PID: 18845 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1333.141596][T18845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.141612][T18845] Call Trace: [ 1333.141622][T18845] dump_stack+0x143/0x1db [ 1333.141666][T18845] should_fail.cold+0x5/0xa [ 1333.141695][T18845] _copy_from_user+0x2c/0x180 [ 1333.141725][T18845] input_event_from_user+0x131/0x3a0 [ 1333.141751][T18845] ? input_event_to_user+0x3a0/0x3a0 [ 1333.141777][T18845] evdev_write+0x356/0x760 [ 1333.141803][T18845] ? evdev_read+0xe40/0xe40 [ 1333.141828][T18845] ? security_file_permission+0x248/0x560 [ 1333.141866][T18845] ? evdev_read+0xe40/0xe40 [ 1333.141888][T18845] vfs_write+0x28e/0x9e0 [ 1333.141914][T18845] ksys_write+0x1ee/0x250 [ 1333.141939][T18845] ? __ia32_sys_read+0xb0/0xb0 [ 1333.141966][T18845] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1333.141999][T18845] ? syscall_enter_from_user_mode+0x27/0x70 [ 1333.142029][T18845] do_syscall_64+0x3a/0xb0 [ 1333.142050][T18845] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1333.142078][T18845] RIP: 0033:0x4665d9 [ 1333.142096][T18845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.142119][T18845] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1333.142147][T18845] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1333.142166][T18845] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1333.142184][T18845] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1333.142201][T18845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.142218][T18845] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1333.156823][ T2105] usb 2-1: USB disconnect, device number 79 [ 1333.187946][T29987] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1333.347783][T29987] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1333.347824][T29987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.347851][T29987] usb 1-1: Product: syz [ 1333.347872][T29987] usb 1-1: Manufacturer: syz [ 1333.347891][T29987] usb 1-1: SerialNumber: syz [ 1333.388688][T29987] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1333.457675][ T2608] usb 3-1: too many configurations: 94, using maximum allowed: 8 10:25:04 executing program 4 (fault-call:2 fault-nth:33): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)=ANY=[@ANYBLOB="1500004e7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b267418d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e92000000"]) [ 1333.527583][ T8086] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1333.569232][T18871] FAULT_INJECTION: forcing a failure. [ 1333.569232][T18871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.582656][T18871] CPU: 1 PID: 18871 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1333.591456][T18871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.601629][T18871] Call Trace: [ 1333.605099][T18871] dump_stack+0x143/0x1db [ 1333.609434][T18871] should_fail.cold+0x5/0xa [ 1333.614036][T18871] _copy_from_user+0x2c/0x180 [ 1333.618723][T18871] input_event_from_user+0x131/0x3a0 [ 1333.624017][T18871] ? input_event_to_user+0x3a0/0x3a0 [ 1333.629352][T18871] evdev_write+0x356/0x760 [ 1333.633806][T18871] ? evdev_read+0xe40/0xe40 [ 1333.638360][T18871] ? security_file_permission+0x248/0x560 [ 1333.644129][T18871] ? evdev_read+0xe40/0xe40 [ 1333.648717][T18871] vfs_write+0x28e/0x9e0 [ 1333.652981][T18871] ksys_write+0x1ee/0x250 [ 1333.657355][T18871] ? __ia32_sys_read+0xb0/0xb0 [ 1333.662337][T18871] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1333.668377][T18871] ? syscall_enter_from_user_mode+0x27/0x70 [ 1333.675179][T18871] do_syscall_64+0x3a/0xb0 [ 1333.679682][T18871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1333.685595][T18871] RIP: 0033:0x4665d9 [ 1333.689509][T18871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.709160][T18871] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1333.717797][T18871] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1333.725805][T18871] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1333.733969][T18871] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1333.741968][T18871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.749950][T18871] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1333.797560][ T2608] usb 3-1: config index 0 descriptor too short (expected 64808, got 72) [ 1333.887803][ T2608] usb 3-1: config index 1 descriptor too short (expected 64808, got 72) [ 1333.917651][ T7439] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1333.977938][ T2608] usb 3-1: config index 2 descriptor too short (expected 64808, got 72) [ 1333.997768][ T8086] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1334.067545][ T2608] usb 3-1: config index 3 descriptor too short (expected 64808, got 72) [ 1334.147510][ T2105] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1334.167789][ T2608] usb 3-1: config index 4 descriptor too short (expected 64808, got 72) [ 1334.197629][T29987] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1334.257763][ T2608] usb 3-1: config index 5 descriptor too short (expected 64808, got 72) [ 1334.313221][ T17] usb 1-1: USB disconnect, device number 53 [ 1334.342952][T18798] udc-core: couldn't find an available UDC or it's busy [ 1334.350023][T18798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1334.357529][ T2608] usb 3-1: config index 6 descriptor too short (expected 64808, got 72) [ 1334.369414][ T7235] usb 6-1: USB disconnect, device number 54 [ 1334.467596][ T2608] usb 3-1: config index 7 descriptor too short (expected 64808, got 72) [ 1334.476187][ T2105] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1334.687915][ T2608] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1334.696980][ T2608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.705048][ T2608] usb 3-1: Product: syz [ 1334.709459][ T2608] usb 3-1: Manufacturer: syz [ 1334.714141][ T2608] usb 3-1: SerialNumber: syz [ 1334.778464][ T2608] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1334.817618][ T8086] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1334.826714][ T8086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.834988][ T8086] usb 4-1: Product: syz [ 1334.839302][ T8086] usb 4-1: Manufacturer: syz [ 1334.844043][ T8086] usb 4-1: SerialNumber: syz [ 1334.880610][T18889] udc-core: couldn't find an available UDC or it's busy [ 1334.887826][T18889] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1334.888338][ T8086] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:25:06 executing program 5: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x42001) write$hidraw(r0, &(0x7f00000002c0)="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", 0xfffffc71) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x8040) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c4, &(0x7f0000000180)=ANY=[]) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xffff, 0x1, 0x5, 0x80, 0x1fc, 0x8}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x1000}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "99bbd177", {0x1, 0x4, 0x4, 0x2, 0x81}}) r4 = syz_usb_connect_ath9k(0x3, 0x1b7b51b926f19f58, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x0, 0x0) 10:25:06 executing program 4 (fault-call:2 fault-nth:34): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffff, "ed1000000000000500"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x7, 0x12, 0x12b6, 0xfffffffe, "3d58fa184d67b6788e1dc306cead5c335606b13d63813451d0eb4bdb7f321d36"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000900)=""/4096) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x600) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5eb7c66791397e9358f00004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d779c08801c96ff1bbbff200000100004ecc0000000100004ef90000ff0100004ecaa2e4000100004e000000000100004ef10000000100004e2f0000000100004e92000000"]) [ 1334.973653][T18899] FAULT_INJECTION: forcing a failure. [ 1334.973653][T18899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1334.987093][T18899] CPU: 0 PID: 18899 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1334.987140][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.987159][T18899] Call Trace: [ 1334.987169][T18899] dump_stack+0x143/0x1db [ 1334.987199][T18899] should_fail.cold+0x5/0xa [ 1334.987225][T18899] _copy_from_user+0x2c/0x180 [ 1334.987254][T18899] input_event_from_user+0x131/0x3a0 [ 1334.987285][T18899] ? input_event_to_user+0x3a0/0x3a0 [ 1334.987313][T18899] evdev_write+0x356/0x760 [ 1334.987348][T18899] ? evdev_read+0xe40/0xe40 [ 1334.987377][T18899] ? security_file_permission+0x248/0x560 [ 1334.987412][T18899] ? evdev_read+0xe40/0xe40 [ 1334.987439][T18899] vfs_write+0x28e/0x9e0 [ 1335.007481][ T7439] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1335.009912][T18899] ksys_write+0x1ee/0x250 [ 1335.009953][T18899] ? __ia32_sys_read+0xb0/0xb0 [ 1335.009980][T18899] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1335.014728][ T7439] ath9k_htc: Failed to initialize the device [ 1335.018945][T18899] ? syscall_enter_from_user_mode+0x27/0x70 [ 1335.018991][T18899] do_syscall_64+0x3a/0xb0 [ 1335.019019][T18899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1335.019049][T18899] RIP: 0033:0x4665d9 [ 1335.019069][T18899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.019093][T18899] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1335.019120][T18899] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1335.019135][T18899] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1335.019152][T18899] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.019174][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:25:06 executing program 4 (fault-call:2 fault-nth:35): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xec, &(0x7f0000000280)={[{0x1d, 0x4e00, "c5061b800be234041d763334bc5dc97c56d1e3a56204d85b954b784591"}, {0xc4, 0x4e00, "42579410737cc7e17012bffad06752e7db4562e8007b176845b49af1a68acabacb63a6373bf82f3b48d7572dd1c6b57a684dc2800b89024ae38e12d720abf5251c9de2ec01c76800a8cb4b3cce75c86f210f1bab9a00015774bf4c0600189bee7fa9158021deb3763dee8a5d510074bdca534d470b461fa095db56804734c04c3a82976b21d0f467d9729180cf8473d63cf0b37108b03add6a566d2250bf7ed59c2739da0d60d0583573923ff22d10957d3f51924d364df413c95e03782f6faeef89181a"}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xad, &(0x7f0000000140)=@generic={0x0, 0x0, 0xa5, "2814eb1f", "4d1999c35fb436203051515d36637ee2db11e2fbbdfe1b6e919d619a0163daeaa5b3b121389bfda91e938dcff0f9df44d89d9067622bc61877f1083cd611adcd1c0fda21a9873080e0c995c09d7c608cd0919d7f6a41fb9fc5a3a76d377e8e033c6d7f205ebd4f1e3a17cb82017e830a1c2c746a2a9a7b41dfd5b9d805cb84d1fcce56554bf1437b0fe5094fc4cb881799fb9f720972fe9a58c29b0338a3918a907c67346b"}) [ 1335.019190][T18899] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1335.184310][ T7235] usb 6-1: ath9k_htc: USB layer deinitialized [ 1335.189278][ T7476] usb 3-1: USB disconnect, device number 6 [ 1335.209043][ T2608] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1335.244519][ T7476] usb 3-1: ath9k_htc: USB layer deinitialized [ 1335.250880][T29987] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1335.267001][T29987] ath9k_htc: Failed to initialize the device [ 1335.275170][T18913] FAULT_INJECTION: forcing a failure. [ 1335.275170][T18913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.288647][T18913] CPU: 0 PID: 18913 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1335.297736][T18913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.307912][T18913] Call Trace: [ 1335.309095][ T17] usb 1-1: ath9k_htc: USB layer deinitialized [ 1335.311207][T18913] dump_stack+0x143/0x1db [ 1335.321785][T18913] should_fail.cold+0x5/0xa [ 1335.326324][T18913] _copy_from_user+0x2c/0x180 [ 1335.331036][T18913] input_event_from_user+0x131/0x3a0 [ 1335.336353][T18913] ? input_event_to_user+0x3a0/0x3a0 [ 1335.341670][T18913] evdev_write+0x356/0x760 [ 1335.346116][T18913] ? evdev_read+0xe40/0xe40 [ 1335.350657][T18913] ? security_file_permission+0x248/0x560 [ 1335.356412][T18913] ? evdev_read+0xe40/0xe40 [ 1335.360953][T18913] vfs_write+0x28e/0x9e0 [ 1335.365232][T18913] ksys_write+0x1ee/0x250 [ 1335.369594][T18913] ? __ia32_sys_read+0xb0/0xb0 [ 1335.374398][T18913] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1335.380417][T18913] ? syscall_enter_from_user_mode+0x27/0x70 [ 1335.386347][T18913] do_syscall_64+0x3a/0xb0 [ 1335.390800][T18913] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1335.396738][T18913] RIP: 0033:0x4665d9 [ 1335.400670][T18913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.420395][T18913] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1335.428842][T18913] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1335.436849][T18913] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 10:25:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x17, 0x20, &(0x7f00000000c0)="70e20e0037aafd4571f9632135bddd4daff537690c41a07acc984c562147c46b"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x5, 0x10001]) [ 1335.444863][T18913] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.452957][T18913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1335.460994][T18913] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:25:06 executing program 4 (fault-call:2 fault-nth:36): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:06 executing program 5: syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x42001) write$hidraw(r0, &(0x7f00000002c0)="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", 0xfffffc71) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x8040) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c4, &(0x7f0000000180)=ANY=[]) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8]) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0xffff, 0x1, 0x5, 0x80, 0x1fc, 0x8}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd", {0x1, 0x0, 0x1000}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "99bbd177", {0x1, 0x4, 0x4, 0x2, 0x81}}) r4 = syz_usb_connect_ath9k(0x3, 0x1b7b51b926f19f58, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x0, 0x0) [ 1335.561765][T18931] FAULT_INJECTION: forcing a failure. [ 1335.561765][T18931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.561803][T18931] CPU: 0 PID: 18931 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1335.561830][T18931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.561845][T18931] Call Trace: [ 1335.561855][T18931] dump_stack+0x143/0x1db [ 1335.601498][T18931] should_fail.cold+0x5/0xa [ 1335.601541][T18931] _copy_from_user+0x2c/0x180 [ 1335.610811][T18931] input_event_from_user+0x131/0x3a0 [ 1335.610853][T18931] ? input_event_to_user+0x3a0/0x3a0 [ 1335.610877][T18931] evdev_write+0x356/0x760 [ 1335.610900][T18931] ? evdev_read+0xe40/0xe40 [ 1335.610924][T18931] ? security_file_permission+0x248/0x560 [ 1335.636152][T18931] ? evdev_read+0xe40/0xe40 [ 1335.636190][T18931] vfs_write+0x28e/0x9e0 [ 1335.636218][T18931] ksys_write+0x1ee/0x250 [ 1335.649352][T18931] ? __ia32_sys_read+0xb0/0xb0 [ 1335.649397][T18931] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1335.649429][T18931] ? syscall_enter_from_user_mode+0x27/0x70 [ 1335.649459][T18931] do_syscall_64+0x3a/0xb0 [ 1335.649482][T18931] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1335.657570][ T8086] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1335.660353][T18931] RIP: 0033:0x4665d9 [ 1335.660384][T18931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.660409][T18931] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1335.660438][T18931] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1335.687516][ T17] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1335.689837][T18931] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1335.689860][T18931] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.689878][T18931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1335.689894][T18931] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1335.907547][ T2105] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1335.916731][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.924919][ T2105] usb 2-1: Product: syz [ 1335.929200][ T2105] usb 2-1: Manufacturer: syz [ 1335.933837][ T2105] usb 2-1: SerialNumber: syz [ 1335.978336][ T2105] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1336.047736][ T17] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1336.063343][T18840] udc-core: couldn't find an available UDC or it's busy [ 1336.070446][T18840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1336.079438][T18840] udc-core: couldn't find an available UDC or it's busy [ 1336.086507][T18840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1336.095527][T18840] udc-core: couldn't find an available UDC or it's busy [ 1336.102580][T18840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1336.111588][T18840] udc-core: couldn't find an available UDC or it's busy [ 1336.118672][T18840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1336.127200][T18840] udc-core: couldn't find an available UDC or it's busy [ 1336.134250][T18840] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1336.187470][ T7235] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1336.353501][ T7476] usb 4-1: USB disconnect, device number 24 [ 1336.487753][ T7235] usb 6-1: too many configurations: 210, using maximum allowed: 8 [ 1336.577667][ T2105] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1336.586650][ T2608] usb 2-1: USB disconnect, device number 80 [ 1336.603024][ T2608] usb 2-1: ath9k_htc: USB layer deinitialized 10:25:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:25:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e202, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500004e7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f599143cb94e89b86cc76e80b595618d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e9200000004599d611c0539d12f83b001734ff4b93cfbec61e1101b3db81e67129ba78c5801f201c72c97272fc9974b44f7"]) 10:25:07 executing program 4 (fault-call:2 fault-nth:37): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)=ANY=[@ANYBLOB="1500004e7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b267418d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e92000000"]) [ 1336.908021][T18960] FAULT_INJECTION: forcing a failure. [ 1336.908021][T18960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.921285][T18960] CPU: 0 PID: 18960 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1336.930091][T18960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.940189][T18960] Call Trace: [ 1336.943501][T18960] dump_stack+0x143/0x1db [ 1336.947868][T18960] should_fail.cold+0x5/0xa [ 1336.952421][T18960] _copy_from_user+0x2c/0x180 [ 1336.957144][T18960] input_event_from_user+0x131/0x3a0 [ 1336.962480][T18960] ? input_event_to_user+0x3a0/0x3a0 [ 1336.967802][T18960] evdev_write+0x356/0x760 [ 1336.972257][T18960] ? evdev_read+0xe40/0xe40 [ 1336.976792][T18960] ? security_file_permission+0x248/0x560 [ 1336.982555][T18960] ? evdev_read+0xe40/0xe40 [ 1336.987104][T18960] vfs_write+0x28e/0x9e0 [ 1336.991387][T18960] ksys_write+0x1ee/0x250 [ 1336.995753][T18960] ? __ia32_sys_read+0xb0/0xb0 [ 1337.000551][T18960] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1337.006586][T18960] ? syscall_enter_from_user_mode+0x27/0x70 [ 1337.012541][T18960] do_syscall_64+0x3a/0xb0 [ 1337.017038][T18960] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1337.022989][T18960] RIP: 0033:0x4665d9 [ 1337.026913][T18960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.046556][T18960] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1337.055001][T18960] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1337.063000][T18960] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1337.071098][T18960] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1337.079098][T18960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.087359][T18960] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1337.097994][ T17] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 10:25:08 executing program 4 (fault-call:2 fault-nth:38): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1337.107092][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.115409][ T17] usb 1-1: Product: syz [ 1337.119706][ T17] usb 1-1: Manufacturer: syz [ 1337.124505][ T17] usb 1-1: SerialNumber: syz [ 1337.167703][ T8086] usb 4-1: Service connection timeout for: 257 [ 1337.173134][T18974] FAULT_INJECTION: forcing a failure. [ 1337.173134][T18974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.173920][ T8086] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1337.174270][ T8086] ath9k_htc: Failed to initialize the device [ 1337.187217][T18974] CPU: 0 PID: 18974 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1337.210004][T18974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.210027][T18974] Call Trace: [ 1337.210036][T18974] dump_stack+0x143/0x1db [ 1337.210066][T18974] should_fail.cold+0x5/0xa [ 1337.210094][T18974] _copy_from_user+0x2c/0x180 [ 1337.210123][T18974] input_event_from_user+0x131/0x3a0 [ 1337.210149][T18974] ? input_event_to_user+0x3a0/0x3a0 [ 1337.210173][T18974] evdev_write+0x356/0x760 [ 1337.210198][T18974] ? evdev_read+0xe40/0xe40 [ 1337.210222][T18974] ? security_file_permission+0x248/0x560 [ 1337.210253][T18974] ? evdev_read+0xe40/0xe40 [ 1337.210277][T18974] vfs_write+0x28e/0x9e0 [ 1337.210304][T18974] ksys_write+0x1ee/0x250 [ 1337.210330][T18974] ? __ia32_sys_read+0xb0/0xb0 [ 1337.210356][T18974] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1337.210389][T18974] ? syscall_enter_from_user_mode+0x27/0x70 [ 1337.210420][T18974] do_syscall_64+0x3a/0xb0 [ 1337.210444][T18974] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1337.210473][T18974] RIP: 0033:0x4665d9 [ 1337.210493][T18974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.210518][T18974] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1337.210547][T18974] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1337.210565][T18974] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1337.210582][T18974] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 10:25:08 executing program 4 (fault-call:2 fault-nth:39): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1337.210609][T18974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.210626][T18974] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1337.218851][ T17] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1337.389003][ T7476] usb 4-1: ath9k_htc: USB layer deinitialized [ 1337.437823][T18985] FAULT_INJECTION: forcing a failure. [ 1337.437823][T18985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.451315][T18985] CPU: 1 PID: 18985 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1337.465344][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.475595][T18985] Call Trace: [ 1337.478976][T18985] dump_stack+0x143/0x1db [ 1337.483428][T18985] should_fail.cold+0x5/0xa [ 1337.488048][T18985] _copy_from_user+0x2c/0x180 [ 1337.492739][T18985] input_event_from_user+0x131/0x3a0 [ 1337.498077][T18985] ? input_event_to_user+0x3a0/0x3a0 [ 1337.503458][T18985] evdev_write+0x356/0x760 [ 1337.507691][ T7235] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1337.507889][T18985] ? evdev_read+0xe40/0xe40 [ 1337.516926][ T7235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.521421][T18985] ? security_file_permission+0x248/0x560 [ 1337.521468][T18985] ? evdev_read+0xe40/0xe40 [ 1337.521490][T18985] vfs_write+0x28e/0x9e0 [ 1337.521518][T18985] ksys_write+0x1ee/0x250 [ 1337.521542][T18985] ? __ia32_sys_read+0xb0/0xb0 [ 1337.521566][T18985] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1337.529648][ T7235] usb 6-1: Product: syz [ 1337.535267][T18985] ? syscall_enter_from_user_mode+0x27/0x70 [ 1337.539873][ T7235] usb 6-1: Manufacturer: syz [ 1337.544029][T18985] do_syscall_64+0x3a/0xb0 [ 1337.548618][ T7235] usb 6-1: SerialNumber: syz [ 1337.553311][T18985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1337.588950][T18985] RIP: 0033:0x4665d9 [ 1337.592870][T18985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.612507][T18985] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1337.618744][ T7235] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1337.620948][T18985] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1337.637519][T18985] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1337.645510][T18985] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1337.653510][T18985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.661526][T18985] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1337.670368][ T32] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1337.678223][ T7003] usb 2-1: new high-speed USB device number 81 using dummy_hcd 10:25:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x79, 0x19, 0xfff, 0x6c, "1ddc4896d7bc4380972d46362f4bf673658e8199bcdeb85375f8b6f9815a05da"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:25:09 executing program 4 (fault-call:2 fault-nth:40): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1337.967812][ T7003] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1337.979574][ T2105] usb 1-1: USB disconnect, device number 54 [ 1337.987734][ T17] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1337.996797][ T2105] usb 1-1: ath9k_htc: USB layer deinitialized [ 1337.998193][ T7476] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1338.038275][T19000] FAULT_INJECTION: forcing a failure. [ 1338.038275][T19000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.051647][T19000] CPU: 0 PID: 19000 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1338.060624][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.070709][T19000] Call Trace: [ 1338.074014][T19000] dump_stack+0x143/0x1db [ 1338.078381][T19000] should_fail.cold+0x5/0xa [ 1338.082929][T19000] _copy_from_user+0x2c/0x180 [ 1338.087655][T19000] input_event_from_user+0x131/0x3a0 [ 1338.092983][T19000] ? input_event_to_user+0x3a0/0x3a0 [ 1338.098417][T19000] evdev_write+0x356/0x760 [ 1338.102885][T19000] ? evdev_read+0xe40/0xe40 [ 1338.107431][T19000] ? security_file_permission+0x248/0x560 [ 1338.113207][T19000] ? evdev_read+0xe40/0xe40 [ 1338.117949][T19000] vfs_write+0x28e/0x9e0 [ 1338.122237][T19000] ksys_write+0x1ee/0x250 [ 1338.128568][T19000] ? __ia32_sys_read+0xb0/0xb0 [ 1338.133389][T19000] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1338.139505][T19000] ? syscall_enter_from_user_mode+0x27/0x70 [ 1338.145445][T19000] do_syscall_64+0x3a/0xb0 [ 1338.149899][T19000] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1338.156006][T19000] RIP: 0033:0x4665d9 [ 1338.159946][T19000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1338.179591][T19000] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:09 executing program 4 (fault-call:2 fault-nth:41): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1338.188559][T19000] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1338.196560][T19000] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1338.204556][T19000] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1338.212594][T19000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1338.220595][T19000] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1338.266736][T19008] FAULT_INJECTION: forcing a failure. [ 1338.266736][T19008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.280046][T19008] CPU: 1 PID: 19008 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1338.288936][T19008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.299111][T19008] Call Trace: [ 1338.302563][T19008] dump_stack+0x143/0x1db [ 1338.306909][T19008] should_fail.cold+0x5/0xa [ 1338.311431][T19008] _copy_from_user+0x2c/0x180 [ 1338.316218][T19008] input_event_from_user+0x131/0x3a0 [ 1338.321517][T19008] ? input_event_to_user+0x3a0/0x3a0 [ 1338.326816][T19008] evdev_write+0x356/0x760 [ 1338.331271][T19008] ? evdev_read+0xe40/0xe40 [ 1338.335793][T19008] ? security_file_permission+0x248/0x560 [ 1338.341569][T19008] ? evdev_read+0xe40/0xe40 [ 1338.346156][T19008] vfs_write+0x28e/0x9e0 [ 1338.350420][T19008] ksys_write+0x1ee/0x250 [ 1338.354825][T19008] ? __ia32_sys_read+0xb0/0xb0 [ 1338.359683][T19008] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1338.365701][T19008] ? syscall_enter_from_user_mode+0x27/0x70 [ 1338.371609][T19008] do_syscall_64+0x3a/0xb0 [ 1338.376052][T19008] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1338.381967][T19008] RIP: 0033:0x4665d9 [ 1338.385883][T19008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1338.405503][T19008] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1338.413923][T19008] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1338.421936][T19008] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1338.429912][T19008] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1338.438016][T19008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1338.446123][T19008] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:25:09 executing program 4 (fault-call:2 fault-nth:42): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1338.462811][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1338.472147][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.480224][ T32] usb 3-1: Product: syz [ 1338.484419][ T32] usb 3-1: Manufacturer: syz [ 1338.489121][ T32] usb 3-1: SerialNumber: syz [ 1338.508025][ T7476] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1338.538663][ T32] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1338.562691][T19015] FAULT_INJECTION: forcing a failure. [ 1338.562691][T19015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.576007][T19015] CPU: 0 PID: 19015 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1338.576058][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.576078][T19015] Call Trace: [ 1338.576088][T19015] dump_stack+0x143/0x1db [ 1338.576129][T19015] should_fail.cold+0x5/0xa [ 1338.576164][T19015] _copy_from_user+0x2c/0x180 [ 1338.576197][T19015] input_event_from_user+0x131/0x3a0 [ 1338.576224][T19015] ? input_event_to_user+0x3a0/0x3a0 [ 1338.588473][ T7439] usb 6-1: USB disconnect, device number 55 [ 1338.595056][T19015] evdev_write+0x356/0x760 [ 1338.595099][T19015] ? evdev_read+0xe40/0xe40 10:25:09 executing program 5: r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x161f42) write$hidraw(r0, &(0x7f0000000000)="03", 0xfd50) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1cf) read$hidraw(0xffffffffffffffff, &(0x7f00000000c0)=""/42, 0x2a) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f00000002c0)="0b969cfea3342060ee1629ff470f9e753e861e8244d4308ae25c429155ffa5720c1eb5e1adfbbe717a1ad3e474bbefa90d99dedae77817d4a79840721aaee08003507d0e08561ec92179505366871b223f07b751a7719554b7edfe9823332758a0f26d1e962e58bd1090fc8c1834dede5f8e29640f1becd93c6a08b5009af94d7dcff27813aa3df1ed7826c5d663d0f60a7cc8b452f5955d5d9df8f8838d52ec74a01cc8f82c6ace4e16496d5fb487a1e6ae2f0d650691a48bc7599073644ac3e7c448d55f606a275c148f7ca93a3d502fb93360", 0xd4) syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffffffffd, 0x408042) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="36825607e3cd963aa192562e7b67bcd930c81aceaada3f", 0x17) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000200)="1585cb69d33c4521"}) syz_open_dev$hidraw(&(0x7f0000000240), 0xdf, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffed3, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x18, [{{0x9, 0x2, 0xfffffffffffffde5}}]}}, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x40, 0x511200) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) read$hidraw(0xffffffffffffffff, &(0x7f00000003c0)=""/103, 0x67) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a0092bd", {0x1, 0x0, 0x0, 0x0, 0x5}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x22, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1]) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) [ 1338.595123][T19015] ? security_file_permission+0x248/0x560 [ 1338.643050][T19015] ? evdev_read+0xe40/0xe40 [ 1338.643087][T19015] vfs_write+0x28e/0x9e0 [ 1338.643115][T19015] ksys_write+0x1ee/0x250 [ 1338.656208][T19015] ? __ia32_sys_read+0xb0/0xb0 10:25:09 executing program 4 (fault-call:2 fault-nth:43): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1338.656250][T19015] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1338.656284][T19015] ? syscall_enter_from_user_mode+0x27/0x70 [ 1338.656316][T19015] do_syscall_64+0x3a/0xb0 [ 1338.656340][T19015] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1338.656371][T19015] RIP: 0033:0x4665d9 [ 1338.656391][T19015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1338.656416][T19015] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1338.656446][T19015] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1338.656464][T19015] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1338.656482][T19015] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1338.656500][T19015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1338.656516][T19015] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1338.665575][ T7235] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1338.665684][ T7439] usb 6-1: ath9k_htc: USB layer deinitialized [ 1338.762356][T19025] FAULT_INJECTION: forcing a failure. [ 1338.762356][T19025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.837439][ T2105] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1338.838368][T19025] CPU: 1 PID: 19025 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1338.838399][T19025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.883981][T19025] Call Trace: [ 1338.883995][T19025] dump_stack+0x143/0x1db [ 1338.884016][T19025] should_fail.cold+0x5/0xa [ 1338.884034][T19025] _copy_from_user+0x2c/0x180 [ 1338.884051][T19025] input_event_from_user+0x131/0x3a0 [ 1338.884067][T19025] ? input_event_to_user+0x3a0/0x3a0 [ 1338.884080][T19025] evdev_write+0x356/0x760 [ 1338.884096][T19025] ? evdev_read+0xe40/0xe40 [ 1338.884110][T19025] ? security_file_permission+0x248/0x560 [ 1338.884129][T19025] ? evdev_read+0xe40/0xe40 [ 1338.884142][T19025] vfs_write+0x28e/0x9e0 [ 1338.884158][T19025] ksys_write+0x1ee/0x250 [ 1338.884173][T19025] ? __ia32_sys_read+0xb0/0xb0 [ 1338.884189][T19025] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1338.884209][T19025] ? syscall_enter_from_user_mode+0x27/0x70 [ 1338.884228][T19025] do_syscall_64+0x3a/0xb0 [ 1338.884250][T19025] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1338.884279][T19025] RIP: 0033:0x4665d9 [ 1338.884299][T19025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1338.884329][T19025] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1338.884350][T19025] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1338.884361][T19025] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1338.884371][T19025] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1338.884380][T19025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1338.884390][T19025] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1339.077626][ T7003] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1339.086750][ T7003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.094857][ T7003] usb 2-1: Product: syz [ 1339.099223][ T7003] usb 2-1: Manufacturer: syz [ 1339.103940][ T7003] usb 2-1: SerialNumber: syz [ 1339.148920][ T7003] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1339.168552][ T2105] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1339.227598][ T32] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1339.477709][ T7476] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1339.486819][ T7476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.495151][ T7476] usb 4-1: Product: syz [ 1339.499525][ T7476] usb 4-1: Manufacturer: syz [ 1339.504131][ T7476] usb 4-1: SerialNumber: syz [ 1339.548309][ T7476] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1339.652075][ T7235] usb 3-1: USB disconnect, device number 7 [ 1339.717628][ T7003] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:25:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1339.884041][ T8086] usb 2-1: USB disconnect, device number 81 [ 1339.918994][T29987] usb 4-1: USB disconnect, device number 25 [ 1339.937785][ T7476] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1339.946684][T29987] usb 4-1: ath9k_htc: USB layer deinitialized [ 1340.187761][ T2105] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1340.196941][ T2105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.205664][ T2105] usb 1-1: Product: syz [ 1340.209918][ T2105] usb 1-1: Manufacturer: syz [ 1340.214782][ T2105] usb 1-1: SerialNumber: syz [ 1340.271636][ T2105] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1340.287593][ T32] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1340.295444][ T32] ath9k_htc: Failed to initialize the device [ 1340.302733][ T7235] usb 3-1: ath9k_htc: USB layer deinitialized [ 1340.367621][T29987] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1340.647660][T29987] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1340.687596][ T7235] usb 3-1: new high-speed USB device number 8 using dummy_hcd 10:25:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x4040) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x190, &(0x7f0000000200)={[{0x15, 0x4e00, "7ad9fa69156354a88573864d000000000000000000"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0xffffffffffffffc3, 0x4e00, "43cc000000000000000000ffff"}, {0x1, 0x4e00, "f9"}, {0xf, 0x4e00, "0e505f24cf63a67aa47b275df1b84d"}, {0x89, 0x4e00, "13daf4624b48ec07b49deece4e466838dd0ecc5fe21068631e6acde9b3507cd68304d046a0e185d90df850e156d1a6a6ade36e419113ddf6cdf4bfe3eb81ffd242bfe1753207b2c04d59b47b37235f71fa7b5fcb98af12c676bbcc1719c3cbdef63b00660d19109b85d7a1c30c64e42705e5a3ca5cec2761c79a48089aeb9e81000000000000000000"}, {0x1, 0x4e00, "f1"}, {0x14, 0x4e00, "2f1ef879856a195d0ebd72ff79a9b3d7f8a0063a"}, {0x65, 0x4e00, "664768338b5b4d0607c7d0480d646754a42f41f3407f8901622f8c7066b968382d44e73ef062e0ecd6f5a6bd9d25592c10606f26b3d3324458e394771b30df06770618f1d3d1050a076272ff347ecf3520f7d3abd3357fe22ffb493dfd7b389394a13ffcab"}]}) 10:25:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x400) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x3, 0x40]) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x800, 0x805) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0xffffffffffffff31}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000380)=@ready={0x0, 0x0, 0x8, "8cf282ab", {0x1, 0x6, 0x0, 0xff}}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "ed105400000000003ec13e2000"}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000100)={0x17, 0xd8, &(0x7f00000003c0)="4cd709cd79f11afabbd37ec05b33d89791a3f88b78e576d65b993b923c42a3c825d6b8f4e79b72f3fe762b5df8d0b318e99bab73f1033c324cacdc963cb9dc93d87fb4e163b965239c5f9f983cfd4769570e8bf634d0ed43372347a61a26fa9a9e9e82d9feb867617b788f88afa8f8072079a1dbd21de91cdf9ec5453a8c591f1ff60eb7ea286d9b887d799836cac60e59b0cb120409efc6adce1ff375bc7807d358f6276e241c469a7f83749570918e762975db8277430e58b09468d9b80b7ef8a4a6a33eac82bacae6e124c9fc8c57f60df9363e64ec0f"}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000280)=[0x80000001, 0x3ff]) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1400, &(0x7f0000000580)={[{0x18, 0x4e00, "6b66a65f048fba5836a1f32306e64b91eb9d5ed16c498380"}, {0xef, 0x4e00, "650502ec84e8549ad21ee7cd4db7d234f1192cdd96926d55afe4b1faa2f9c8a47d9648f83531fdce63ce78e2084ebccbe516f807bea0c43ce6d1ee2757c3cfdca4fafd37902340e00cb9a6f930628cc5c7762dea1c41f65b09e2ba4a551e636de000ae6a537f257540bd15043d50163f209d000356632987b0ed6507fd45e7be81424d161391bcfb02d676801a2c4d201839625161dab0485e3f63655d21071614b97db9bd3a16fd2ac31da3bbd8d3cd19dd6ab9872030ed87ada4c5f942583b4e055f6411492e3f7434f3dbcfc514c5fdf319b156e0e8cc073a7d87c79759d8c9fbe16d84e09fdcadfd2a67ab2d7b"}, {0x52, 0x4e00, "fe821760751fbb49748f6298e0dcdc90daeb3fc2458aeb61ee863bd0c5bc23cc41e9a89d14200bbd5fe150dfd40e61a5d8d3fb9c79711a032b11bebf526592b85a90a35f569d7e00b6c439b31e056e8818f9"}, {0x56, 0x4e00, "1772aee7b098184c11a86aa2b3b08ede1f7a10c4f9da8028590c5050f1fee168466cf58ec6b169f9353facdbe29f1650f08bc482973f1007f53c91f91f0611f28585e77e72da5ee547d1c3f41ecbfa52c13807d17be2"}, {0xe8, 0x4e00, "fd78ecf461c68bf5e0e1bdf3b9143fe60093f7062dff189fef1c95b11044d60dd3d09c48d9bb5dcc8656d8d1be1c4eff9aa1bf582c45bbd8c957349c5483e6e463e6f7e7418868897cb5117e4597af76367e99332a803f6a7650fa1ae7643c0085a69d95c04e71a7ec5081552ec2ba056aa97e7d498fd755bbdbdc4d9df0573c97f32d91ab5bbe600dc98d098ca683a3d9d90e83db0d3f6e4ef716be5e8002f0285543598ed4d5bccbbc44dd04457f92e9c0f8918ffe450241b5d17f53f91b982a000d70a59f347632ba4c2eabc72737fb8dfd6a7dce9573d69c1bd940c05363c2dabd4323dbd447"}, {0x1000, 0x4e00, "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"}, {0x93, 0x4e00, "e88ec63e9907aca128ae5004ce341af14c6d8be0a788df5490bea66ffcf7e5b3785b80f82284ac831cb222febdd102aa2e06a10a9a11290651f4aebc4de8fc5316586ec1140a2a44b899a45bb5d959291b3381aa1fab575a95d2ddc6dba301e05b3e7ad8bae85a7135ce6c23c7eb449fb698dd56851eefc7fbe0e4cd43cbb4d2567441fa8f7c7be413417f3219581256d3ec76"}, {0xaf, 0x4e00, "005c33fcd4fe06b2210945003ce818d51491d49431bc7dec1d0715ec2b5debbaab56b3bb8524bb7409723bc61cde3aea967df251762ba1ef6cd63fc169938705da62c93e8bddb42f7deba7bf60181cb3888508cf9a17d0a5af3b9db09500d7286072f1a8b6fd874af529d623461ecbb0d4ca034f2bbb06b605d26fa8f18b6e8d927d2e7b5f8e5bc2b08ff9e495283f5c9ca3ef414525ee91bf5373993366ef107f94fbf803b53e569236fe3bf1d318"}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xcc, &(0x7f0000000300)=ANY=[@ANYBLOB="020000c4ee3b86faf91e8fe4d5b74a4f59fa57df133b4cf1720c27d9af38fc86df0261b6e84bca38c3adf70cec989b26a2455c71c957538c3c5f0daab53ec2bb50993f66b5d54abc479c1e9ebb6ccf9ad1b0e64c6ffb06934c"]) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x10, &(0x7f00000000c0)=ANY=[]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x55, &(0x7f00000004c0)=@generic={0x1, 0x2, 0x4d, "01d2759d", "161aab893cc448a69643b2e7c280acd128096f4a29ab0d188a9d44bd003b22f38a6e39d14d6347eae20066fa2f6fe0866dfb5269b29254af6e4f9c31b2ab24267d2c2236727a17e0bfa0487198"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:25:11 executing program 4 (fault-call:2 fault-nth:44): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)=ANY=[@ANYBLOB="1500004e7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b267418d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e92000000"]) [ 1340.772421][ T7003] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1340.783417][ T7003] ath9k_htc: Failed to initialize the device [ 1340.808283][ T8086] usb 2-1: ath9k_htc: USB layer deinitialized [ 1340.828522][T19075] FAULT_INJECTION: forcing a failure. [ 1340.828522][T19075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.841871][T19075] CPU: 1 PID: 19075 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1340.850783][T19075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.860919][T19075] Call Trace: [ 1340.864226][T19075] dump_stack+0x143/0x1db [ 1340.868595][T19075] should_fail.cold+0x5/0xa [ 1340.873140][T19075] _copy_from_user+0x2c/0x180 [ 1340.877877][T19075] input_event_from_user+0x131/0x3a0 [ 1340.883210][T19075] ? input_event_to_user+0x3a0/0x3a0 [ 1340.888544][T19075] evdev_write+0x356/0x760 [ 1340.893183][T19075] ? evdev_read+0xe40/0xe40 [ 1340.897771][T19075] ? security_file_permission+0x248/0x560 [ 1340.903535][T19075] ? evdev_read+0xe40/0xe40 [ 1340.908079][T19075] vfs_write+0x28e/0x9e0 [ 1340.912364][T19075] ksys_write+0x1ee/0x250 [ 1340.916734][T19075] ? __ia32_sys_read+0xb0/0xb0 [ 1340.921545][T19075] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1340.927583][T19075] ? syscall_enter_from_user_mode+0x27/0x70 [ 1340.933528][T19075] do_syscall_64+0x3a/0xb0 [ 1340.937976][T19075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1340.943881][T19075] RIP: 0033:0x4665d9 [ 1340.947790][T19075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1340.967519][T19075] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1340.975934][T19075] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1340.983916][T19075] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1340.991919][T19075] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.000008][T19075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.008234][T19075] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:25:12 executing program 4 (fault-call:2 fault-nth:45): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x1, 0x9, 0x3, 0x1f, "c6644f1f64f9083b2e3b4b3ccbd1136b6d6f7b03d5a2ffe41dab08269c1a990c"}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/138) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) [ 1341.084787][ T17] usb 1-1: USB disconnect, device number 55 [ 1341.098581][ T2105] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1341.123811][ T17] usb 1-1: ath9k_htc: USB layer deinitialized 10:25:12 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000001200), 0x2, 0x80100) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000001400)={0x3, 0xffffffff, 0x6cb1c64f, 0x5, 0x1, 0x4}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000000c0)={0x10001, 0x5, 0x5, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404e04151200000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1341.152245][T19091] FAULT_INJECTION: forcing a failure. [ 1341.152245][T19091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.152286][T19091] CPU: 1 PID: 19091 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1341.174371][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.184543][T19091] Call Trace: [ 1341.187846][T19091] dump_stack+0x143/0x1db [ 1341.192333][T19091] should_fail.cold+0x5/0xa [ 1341.196891][T19091] _copy_from_user+0x2c/0x180 [ 1341.196932][T19091] input_event_from_user+0x131/0x3a0 [ 1341.196959][T19091] ? input_event_to_user+0x3a0/0x3a0 [ 1341.196983][T19091] evdev_write+0x356/0x760 [ 1341.197009][T19091] ? evdev_read+0xe40/0xe40 [ 1341.197034][T19091] ? security_file_permission+0x248/0x560 [ 1341.197066][T19091] ? evdev_read+0xe40/0xe40 [ 1341.197090][T19091] vfs_write+0x28e/0x9e0 [ 1341.197117][T19091] ksys_write+0x1ee/0x250 [ 1341.197144][T19091] ? __ia32_sys_read+0xb0/0xb0 [ 1341.197171][T19091] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1341.197205][T19091] ? syscall_enter_from_user_mode+0x27/0x70 [ 1341.197245][T19091] do_syscall_64+0x3a/0xb0 [ 1341.197270][T19091] entry_SYSCALL_64_after_hwframe+0x44/0xae 10:25:12 executing program 4 (fault-call:2 fault-nth:46): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1341.197299][T19091] RIP: 0033:0x4665d9 [ 1341.197320][T19091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.197345][T19091] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1341.197372][T19091] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1341.197389][T19091] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1341.197406][T19091] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.197424][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.197441][T19091] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1341.207726][T29681] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1341.417972][ T7235] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1341.440503][T19108] FAULT_INJECTION: forcing a failure. [ 1341.440503][T19108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.499836][T19108] CPU: 1 PID: 19108 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1341.499876][T19108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.499893][T19108] Call Trace: [ 1341.499908][T19108] dump_stack+0x143/0x1db [ 1341.499946][T19108] should_fail.cold+0x5/0xa [ 1341.499978][T19108] _copy_from_user+0x2c/0x180 [ 1341.500111][T19108] input_event_from_user+0x131/0x3a0 [ 1341.500129][T19108] ? input_event_to_user+0x3a0/0x3a0 [ 1341.500144][T19108] evdev_write+0x356/0x760 [ 1341.500160][T19108] ? evdev_read+0xe40/0xe40 [ 1341.500173][T19108] ? security_file_permission+0x248/0x560 [ 1341.500193][T19108] ? evdev_read+0xe40/0xe40 [ 1341.500207][T19108] vfs_write+0x28e/0x9e0 [ 1341.500227][T19108] ksys_write+0x1ee/0x250 [ 1341.500243][T19108] ? __ia32_sys_read+0xb0/0xb0 [ 1341.500261][T19108] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1341.500281][T19108] ? syscall_enter_from_user_mode+0x27/0x70 [ 1341.500301][T19108] do_syscall_64+0x3a/0xb0 [ 1341.500315][T19108] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1341.500333][T19108] RIP: 0033:0x4665d9 [ 1341.500346][T19108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.500361][T19108] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1341.500378][T19108] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1341.500389][T19108] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1341.500399][T19108] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.500409][T19108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:25:12 executing program 4 (fault-call:2 fault-nth:47): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1341.500419][T19108] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1341.507919][T29681] usb 6-1: too many configurations: 186, using maximum allowed: 8 [ 1341.512418][ T8086] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1341.628217][T29681] usb 6-1: config index 0 descriptor too short (expected 65329, got 72) [ 1341.728265][T19110] FAULT_INJECTION: forcing a failure. [ 1341.728265][T19110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.741444][T19110] CPU: 0 PID: 19110 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1341.750217][T19110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.760291][T19110] Call Trace: [ 1341.763608][T19110] dump_stack+0x143/0x1db [ 1341.767975][T19110] should_fail.cold+0x5/0xa [ 1341.772510][T19110] _copy_from_user+0x2c/0x180 [ 1341.777190][T19110] input_event_from_user+0x131/0x3a0 [ 1341.777460][ T17] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1341.782504][T19110] ? input_event_to_user+0x3a0/0x3a0 [ 1341.782540][T19110] evdev_write+0x356/0x760 [ 1341.782573][T19110] ? evdev_read+0xe40/0xe40 [ 1341.790415][T29987] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1341.795410][T19110] ? security_file_permission+0x248/0x560 [ 1341.795454][T19110] ? evdev_read+0xe40/0xe40 [ 1341.799938][T29987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.804416][T19110] vfs_write+0x28e/0x9e0 [ 1341.813506][T29987] usb 4-1: Product: syz [ 1341.819126][T19110] ksys_write+0x1ee/0x250 [ 1341.819168][T19110] ? __ia32_sys_read+0xb0/0xb0 [ 1341.819196][T19110] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1341.823680][T29987] usb 4-1: Manufacturer: syz [ 1341.831807][T19110] ? syscall_enter_from_user_mode+0x27/0x70 [ 1341.831849][T19110] do_syscall_64+0x3a/0xb0 [ 1341.831877][T19110] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1341.836090][T29987] usb 4-1: SerialNumber: syz [ 1341.840235][T19110] RIP: 0033:0x4665d9 [ 1341.840261][T19110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1341.904139][T19110] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1341.908548][T29987] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1341.912580][T19110] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 10:25:13 executing program 4 (fault-call:2 fault-nth:48): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1341.928710][T19110] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1341.936702][T19110] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.944692][T19110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1341.952681][T19110] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1341.994920][T19118] FAULT_INJECTION: forcing a failure. [ 1341.994920][T19118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.008676][T19118] CPU: 1 PID: 19118 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1342.017492][T19118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.018085][T29681] usb 6-1: config index 1 descriptor too short (expected 65329, got 72) [ 1342.027562][T19118] Call Trace: [ 1342.027581][T19118] dump_stack+0x143/0x1db [ 1342.027620][T19118] should_fail.cold+0x5/0xa [ 1342.048035][T19118] _copy_from_user+0x2c/0x180 [ 1342.052757][T19118] input_event_from_user+0x131/0x3a0 [ 1342.058058][T19118] ? input_event_to_user+0x3a0/0x3a0 [ 1342.063446][T19118] evdev_write+0x356/0x760 [ 1342.067878][T19118] ? evdev_read+0xe40/0xe40 [ 1342.072394][T19118] ? security_file_permission+0x248/0x560 [ 1342.078119][T19118] ? evdev_read+0xe40/0xe40 [ 1342.082639][T19118] vfs_write+0x28e/0x9e0 [ 1342.086901][T19118] ksys_write+0x1ee/0x250 [ 1342.091255][T19118] ? __ia32_sys_read+0xb0/0xb0 [ 1342.096102][T19118] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1342.102451][T19118] ? syscall_enter_from_user_mode+0x27/0x70 [ 1342.108345][T19118] do_syscall_64+0x3a/0xb0 [ 1342.112791][T19118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1342.118703][T19118] RIP: 0033:0x4665d9 [ 1342.122591][T19118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1342.142233][T19118] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1342.150685][T19118] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1342.158690][T19118] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1342.166677][T19118] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.174873][T19118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.182880][T19118] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1342.193262][ T8086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.204211][ T8086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.214134][ T8086] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1342.227014][ T8086] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1342.236117][ T8086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:25:13 executing program 4 (fault-call:2 fault-nth:49): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1342.248131][T29681] usb 6-1: config index 2 descriptor too short (expected 65329, got 72) [ 1342.251770][ T8086] usb 2-1: config 0 descriptor?? [ 1342.305384][T19122] FAULT_INJECTION: forcing a failure. [ 1342.305384][T19122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.305427][T19122] CPU: 0 PID: 19122 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1342.327227][T19122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.327253][T19122] Call Trace: [ 1342.327263][T19122] dump_stack+0x143/0x1db [ 1342.327297][T19122] should_fail.cold+0x5/0xa [ 1342.327331][T19122] _copy_from_user+0x2c/0x180 [ 1342.327362][T19122] input_event_from_user+0x131/0x3a0 [ 1342.327388][T19122] ? input_event_to_user+0x3a0/0x3a0 [ 1342.327413][T19122] evdev_write+0x356/0x760 [ 1342.327440][T19122] ? evdev_read+0xe40/0xe40 [ 1342.327465][T19122] ? security_file_permission+0x248/0x560 [ 1342.327498][T19122] ? evdev_read+0xe40/0xe40 [ 1342.327522][T19122] vfs_write+0x28e/0x9e0 [ 1342.327551][T19122] ksys_write+0x1ee/0x250 [ 1342.327577][T19122] ? __ia32_sys_read+0xb0/0xb0 [ 1342.327605][T19122] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1342.327641][T19122] ? syscall_enter_from_user_mode+0x27/0x70 [ 1342.327673][T19122] do_syscall_64+0x3a/0xb0 [ 1342.327696][T19122] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1342.407557][ T17] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1342.409477][T19122] RIP: 0033:0x4665d9 [ 1342.409521][T19122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1342.451073][T19122] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1342.451111][T19122] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1342.451128][T19122] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1342.451145][T19122] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.451162][T19122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1342.491723][T19122] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1342.528051][T29681] usb 6-1: config index 3 descriptor too short (expected 65329, got 72) [ 1342.628419][T29681] usb 6-1: config index 4 descriptor too short (expected 65329, got 72) [ 1342.717608][T29987] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1342.718047][T29681] usb 6-1: config index 5 descriptor too short (expected 65329, got 72) [ 1342.739384][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.746576][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.753937][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.761217][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.768461][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.776150][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.783454][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.790739][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.798030][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.805214][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.812504][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.817805][T29681] usb 6-1: config index 6 descriptor too short (expected 65329, got 72) [ 1342.819835][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.835339][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.842660][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.850010][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.857184][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.864504][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.873163][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.880488][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.887734][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.894910][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.902400][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.909739][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.916919][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.918063][ T7235] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1342.924278][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.933205][ T7235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.933248][ T7235] usb 3-1: Product: syz [ 1342.940570][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.948639][ T7235] usb 3-1: Manufacturer: syz [ 1342.952822][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.960061][ T7235] usb 3-1: SerialNumber: syz [ 1342.960461][T29681] usb 6-1: config index 7 descriptor too short (expected 65329, got 72) [ 1342.964802][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.992241][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1342.999543][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1343.006745][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1343.008110][ T7] usb 4-1: USB disconnect, device number 26 [ 1343.014090][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1343.032739][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1343.040000][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1343.047527][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1343.054703][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1343.062087][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 10:25:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1343.069352][ T8086] hid-alps 0003:044E:1215.002A: unknown main item tag 0x0 [ 1343.088596][ T7235] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1343.123865][ T8086] hid-alps 0003:044E:1215.002A: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.1-1/input0 [ 1343.141568][ T8086] usb 2-1: USB disconnect, device number 82 [ 1343.167717][T29681] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1343.176873][T29681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.185366][T29681] usb 6-1: Product: syz [ 1343.190193][T29681] usb 6-1: Manufacturer: syz [ 1343.194836][T29681] usb 6-1: SerialNumber: syz [ 1343.278675][T29681] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1343.507589][ T17] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1343.516760][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.524895][ T17] usb 1-1: Product: syz [ 1343.529206][ T17] usb 1-1: Manufacturer: syz [ 1343.533843][ T17] usb 1-1: SerialNumber: syz [ 1343.578405][ T17] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1343.798100][ T8086] usb 6-1: USB disconnect, device number 56 [ 1343.811773][T29987] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1343.827590][T29681] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1343.837636][T29987] ath9k_htc: Failed to initialize the device 10:25:15 executing program 2: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:25:15 executing program 4 (fault-call:2 fault-nth:50): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:15 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000001200), 0x2, 0x80100) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000001400)={0x3, 0xffffffff, 0x6cb1c64f, 0x5, 0x1, 0x4}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000000c0)={0x10001, 0x5, 0x5, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404e04151200000000000109022400010000000009040000090300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:25:15 executing program 5: syz_open_dev$hidraw(&(0x7f00000000c0), 0x2, 0x400000) r0 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x2802) write$hidraw(r0, &(0x7f0000000000)="f7bb2d92e0c1e4cf35e6f20b2891c3ab75f933d8eef65f63f85adcf238b3f8abd586f91d4b6e4df95520", 0x2a) write$hidraw(r0, &(0x7f0000000fc0)="587f0e1b035ef2286e06a07d93f789421714e4588ed1242e8f87c231f0ea7af1e667c3c510817aa3ee6c1a962f32831b53b967ca182c880c616c9ec695e881b3a3", 0xfffffdef) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0xf, &(0x7f0000000440)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x96, &(0x7f00000003c0)=ANY=[@ANYBLOB="08f6008e66dd7eb89f2d6c40d31c3238d5f4270f8f844454fe4adb6c7326cc1689aa5f1b4cc41e9ece79508a1258debc0411cfd1d2db247d5ca2693c422f29f80ccb"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x9, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x400000) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000080)) syz_open_dev$hidraw(&(0x7f0000000140), 0x9, 0xd00) [ 1343.845506][ T8086] usb 6-1: ath9k_htc: USB layer deinitialized [ 1343.846918][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 1343.868832][ T2608] usb 3-1: USB disconnect, device number 8 [ 1343.887528][ T7235] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1343.905133][ T2608] usb 3-1: ath9k_htc: USB layer deinitialized [ 1343.929824][T19184] FAULT_INJECTION: forcing a failure. [ 1343.929824][T19184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.943261][T19184] CPU: 1 PID: 19184 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1343.952075][T19184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.962189][T19184] Call Trace: [ 1343.965496][T19184] dump_stack+0x143/0x1db [ 1343.969866][T19184] should_fail.cold+0x5/0xa [ 1343.974419][T19184] _copy_from_user+0x2c/0x180 [ 1343.979135][T19184] input_event_from_user+0x131/0x3a0 [ 1343.984462][T19184] ? input_event_to_user+0x3a0/0x3a0 [ 1343.989777][T19184] evdev_write+0x356/0x760 [ 1343.994217][T19184] ? evdev_read+0xe40/0xe40 [ 1343.998743][T19184] ? security_file_permission+0x248/0x560 [ 1344.004504][T19184] ? evdev_read+0xe40/0xe40 [ 1344.009045][T19184] vfs_write+0x28e/0x9e0 [ 1344.013320][T19184] ksys_write+0x1ee/0x250 [ 1344.017690][T19184] ? __ia32_sys_read+0xb0/0xb0 [ 1344.022493][T19184] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1344.028521][T19184] ? syscall_enter_from_user_mode+0x27/0x70 [ 1344.034463][T19184] do_syscall_64+0x3a/0xb0 [ 1344.038918][T19184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.044859][T19184] RIP: 0033:0x4665d9 [ 1344.048781][T19184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.068431][T19184] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1344.076876][T19184] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1344.084879][T19184] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1344.092887][T19184] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 10:25:15 executing program 4 (fault-call:2 fault-nth:51): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1344.100897][T19184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.108903][T19184] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1344.168510][ T32] usb 1-1: USB disconnect, device number 56 [ 1344.181068][T19201] FAULT_INJECTION: forcing a failure. [ 1344.181068][T19201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.181195][ T17] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1344.194255][T19201] CPU: 0 PID: 19201 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1344.211862][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.211885][T19201] Call Trace: [ 1344.211894][T19201] dump_stack+0x143/0x1db [ 1344.211927][T19201] should_fail.cold+0x5/0xa [ 1344.211957][T19201] _copy_from_user+0x2c/0x180 [ 1344.222915][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1344.225484][T19201] input_event_from_user+0x131/0x3a0 [ 1344.225524][T19201] ? input_event_to_user+0x3a0/0x3a0 [ 1344.225548][T19201] evdev_write+0x356/0x760 [ 1344.260074][T19201] ? evdev_read+0xe40/0xe40 10:25:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5eb980f0000e100002a00004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088012c0df1bbbff200000100004e0462d869b3a88e107f073932cc0000000100ed4ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f00000001009e4e92000000"]) [ 1344.260120][T19201] ? security_file_permission+0x248/0x560 [ 1344.260159][T19201] ? evdev_read+0xe40/0xe40 [ 1344.260182][T19201] vfs_write+0x28e/0x9e0 [ 1344.260208][T19201] ksys_write+0x1ee/0x250 [ 1344.260233][T19201] ? __ia32_sys_read+0xb0/0xb0 [ 1344.288371][T19201] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1344.288419][T19201] ? syscall_enter_from_user_mode+0x27/0x70 [ 1344.288452][T19201] do_syscall_64+0x3a/0xb0 [ 1344.304741][T19201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.304786][T19201] RIP: 0033:0x4665d9 [ 1344.314581][T19201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:25:15 executing program 4 (fault-call:2 fault-nth:52): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1344.314613][T19201] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1344.314644][T19201] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1344.314662][T19201] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 10:25:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x1000, &(0x7f0000001140)="7e73bc405aa8d64c05ec5152f144f63c9b5087662a4a730eebe5ef3339d38081096c1ae5e92e1ab2b23695a381c403bf73aa1ac5703390f368a5dde0a210d53f0c5b13c0dfa4a02779c42609ada27c2ffb14bf9efb8a298e21e8091303a7b33c45227eb86a08dc25ab8efebdf1e7195d4e7986641f04782640a970fd339c23d8ce1da8c64398367c9f3a61e0dde2b89fc747e2d28b6eced5fc2baf66e9e109c8ffd98badd60eb7b7c790972ee0620ce4e338e6e0ed33ccdd19e64ffc4cbf7ba4ddb61ce7c985a23740a9fc0f062efda816f622810764e113508823494d0099eaee6490b3a1b3689ea7093cc99bc03ead19b0a28d6335064b9b07aebb1029c6eed802236594618483bd9f6240b613f62fb534c0cfed0852f6f028ed7b2cd69062f872f73fbef64535f75af0c161a66276158b27f0b54005c86e4c6d98c61b79d0b48831ce15977a3bfcffc42490d064e61c1857e32094e9b398e66c68dea3af5e6be10a9532e549ea5ce9da3f22d195dea9dee55929ffd8267c06d8d0a33f7a7cd37762e72fa1b02347544f10a45be200e23306c82d89551d703afc6010419a8e37612a5709f343b7743bf28f8dd26215a68f52bd538f20971083555ac06124b90b6250f3f7235fc0a2eeed1d038445d2e963c2ecc9110b428fc873722e854b34564f5d13a21036c7dc84cc4bac0bf3137a756855541787e232a643058c4cffc82237263274c3984cd0d5eb2f2b21f4bd5812b472717ee7bbfd07074eab239500db85b37734ca7b41f0b081318a22b375382bfab63ffa1d4963dbe6dc7f325f5f83119a89bf8cbe3c4beee6ef1b9efe8266310074a64e245c3d7718b88886a9e259d859b28bf6e0efa0ea385eadd4e04baff24734e0a6f434d04b1c1313a3529f4ac4c3cf8743b28a5c11aa5a95a7ffed27ed3dd21bc09418c92435f121799aef5cf6f3e66dcdb0cfe19743a9028c7195a2f60026e23382659f7d4ef636410fa7372548bcc62fb4cc260f414642dabf733291c770f87049a06912ec21ba275c14f0922a0584ff8daa7cf1a85155e725137c3821e88270e532f38ceab62cb6d4f3ed06233f630cce4f73cad424679830e2010817136640a1b2331fd238efa7c5d17475f97df813b52864f9160d7da8ccabf7fd07badb16ddccc913facf31230da1d9c9de9c69a799c5529fa4819dbddf790f259efdbfc6d75943faaaf618e18cd784899795d62bd2e2fc9fb8cfcb7fb65e161aa847badeecd0188d6565353d37d8bea632062b25dcec8fc00c7eba7519682b72b4790f8d0c21d7caa970750e77b37558bc536a96fc91178e49c6c2855fb707b3d9137a578149b54eff214db2ebdc76ad8b320c2b1ede4e79bc70c7cc1fb8851d7e71bc9e5530d3ffdfe485bc5792ea9579f611a89491f5b823907c9c283f47f75a578eda1dfee57951b892ef755c74a7902bdcc527596de51b78888ecc7a833fc376ce84a3dfd3c82595868c523b4552fc0f36c60043a0203dd6bc3479af353661c28e035645f0d76c4593c8dd23fa5411a9ca12deba50965fa6db24378817411e33b3f18acb6b96a430cd9c8601b0365812c15712a82f2f29d6180c9fe5ea38fc0813bee6d0e904ee64f2607f91e4ca91dc11351fdc819abeef88e8b26f04b95d7100486e3fc7759d8cb119d59d7ac5fb7406cdc9580fbeb9c50e7490dde476cc62a18ef339083046d14d6b67b990616665095b462133eeadacf62dfd9acfbee26cd9005fee2a6b8dcf141a6b6a7c49ec06b56f29b2427e5a748b84a97e80286794b7a5c05db52aaa440a178b84353bddc7253faaff95282354450485185274cd725f5e2ac7d6bcdb51b99736049fcbfc89a68351caee140e677045ff85cd0cc2f57f80666a568c41f7fe19486a415f3ce6c21caed3369928c12cb8db595b1c3d931ab044d1463b4c8c5daf18258f3a8082408240fe953fbb0cc8fe7f870ac749bf53620946c80268187dddde145ae3b6f41cc9e64ac900126b0dbf0b768feb856df3ef01e8f07b6aef13958a8b38e355c619990dc1df6bf73b4a9192e4c319c2ba3add270d52bab4d2a79b4c15677c0ba28e7470f0d8c0ff115103c97ed439a82043f62c5faf9853e2e92d06bc4102c40d92b5ecefaf37e947452d8297dd30c3fc93c190007ceceecf8302381fd63c7bd12bb336d8ebfff16cc96acf93380f4f581ea688604e954a710630e1fcc5dea7d99d7d3d7941932da31ed950bc211e3cb827fbb424cacef99423c7d7ea1a4603d49d14115c22791dbe94275890629cb7cac1e01b934d8852bbb1a2155000eb4819594209b2b661b3d51b292a9b6552b14f07e36214c7bad541981b3ac4da07d7808554a6a96705d9244df78d134abca645f7730ed7223645a534eae206caa195507fd1a9517f4f2245144a1ea1cd571609b8a3657958849cc5d8d093421b1c2b84124d85573d7c90ccdf4680374e63851e6074445af4c724f271d095ae496516b95563d3adf96d87dbcb9c9d0a759e74c55601f5b4644cc39b611acbfc5cd9a4c9ca5d19a0bf35b2fd4413e01d95a39f1d601eec3f0831d13ed7312360f49e7458b365c8bb4efb41409f04cab0baa74b81dafd6c67e4cf6341bd8a44cc050e24f12851aef6a224438419cd45581281dbba795e71c787cdbe28d620ac8dcb4063dd096cdfb1bb71dc97c037ba68c5ce5ea777830ae06f92b36d6d512dca6661dc57d258ae5028d522458698a007d19dfc5701ecbffd36a9fdd73e9661ce7386a26962a64644704bf7725e10433e220734af00c4a2f08cccdc7ff52d6faddc4dda568cf9a2fbb9149065c357589e0a64db7fe61b934d59a5950daabd5adb1b0557a1e847bf0e5a063231b17d47249aced309a8574cc328635d9a715528d6edcb658d5f64c3d5205b880e2cf4ff8e151f94dfa7f16b6c5a7308599991294799a0462d92d10ec50007422241a1b0f7999cbfb84fe0c47753a2dd2b6ea5c00cb37fb5dd36c7ec1b9ece17a96f402121fdc90ab8b3b8522ae391f3c68751ec1c948e53066eb0365dc778398792a5b3e49c1a98828492cc2d4606e2e3c8a13380466ca7fb25b4fc4c749d35d147be0e4fe8a31a0453867d781f216a450d5e82ba4dd4719a6b1348e276546792ff9626c46a2b5164497d3994ccc307a9147360442a6b218df20977595140a1f7a81fc9d4ff8d9ce23aee0d69b58e552880fd1c32a5e2e561d48dc5fb5333cae20537d1a597c14b4f15f61ee244a0ac671c948311c52f1e53da52a9cb134aa972e58ff7f52d04d41d31c4dd1c59bc2060dec0371aaa41a3a62d2d49a8e8eb40e7a019c878ab1ebfa7a2d62c038c24f9b4f3d750fa5daf55151b238dbee5db7ea9c70caf36aa27450bde2c7b5067626979c43b3c7efba292d515cc581160958f38da676e82bf33abb4255aef3f8e98b611b9b505a78311734ce84c4d1b28874681e79352ee2892ee81f9911ce11bd7dff25b8c8a135d0d954255017d1f9c62a6831253b6953c288feaf9dcdbcfaf347c3db2ab24f204ce085bd0292ff505a95bc7e0cedb251288139811fceae6eb05ae0f49d6ea2f36dce46f3be93f363fd8d4dcc02004edd0a239e74e938afca4510b08786706442b392badf55c3a8f2d3c120a775fd2a619fadf1e177c423697f0ca9e9f553cd343085b6117d3bf9630e921e4b7375e417f86c18ac1c17ba34d7df9eba4fbf4e37e02c0a8ee61e48709bf56ab313afbeac831b8fe6c67e7b6224276f0fef0e29d0110b4a46fa2019bacf070966dc3c9529e8f823ac78038b38468ef28ca04af082305613d863320ef47d1bbf8b26aad9e4342cac32dadc3a1be06b3b527a89f056ddd6f2548e5adbaaf33814e327dae88dd68c548fba72c61b190282dd5ff6f4b23902ffd9b2f39a248e8bc0fe36590c10d9d518ced9c5775fbe78c2368134f2292ba84394d0e485e8421d7f6cd5725d2d350e037f5b8615f58a91de13b43db52c2413da4fa967501500be30a9f9f2b716f7d9d752b2ff0075235e5267ed7a4fc113a88d1288fd6947639e773be682a3c61e0ea9650243c75248512a1e1d46a042465e7961886bcced61760fe2375a08ba5c952d59e0c432927b626723fb44cc119e78493511533fb00cbb55b7ff5e610a1d62ee6694dbe5a57cd504f56a4de74944235af671029219ec5508f41927c5a27e3ac0314b236ac144085aecf02640b4e9958e6e6ba6ba87c3caf7bc2d7de4a2cb2e94e51c436141c19ac45896ffba92b703dda1453b88cf740c9039543812f7ecf4554588b6fc83bfefa76c4e80c14d380e939d83ab880fd426973b6ba0277b4803b7dca69ef643663133282586b83e06893353973d8fec1fe2d3034f2d9187b512c3681d5662436cd4995b5c3912f4077d86e9e5a24f5b1adfcc6f55afdb68425d399cd1275c19a24483149a9986018464f257f8f5a7b4df862d3c2e6c23aa65d4c3529a3826020e220d96529baccc5d0764732d99c716539c09dd2115b66bcf8069c0f944bcaebcb6a54b0bcc92918fc3745ba29e3ee4479b10887b4e65efb56cdf670e2b3769f97b0f48a3676fa5de78b9b64f93a406c6becb7e9cbed2d3c0798c44ecd708eebf32cae6ba474df5ae15759f0535fe2058db0190853c29938adaa045b4d063df5e6689307444ca535df0ccc88787bb69af7f7ade1728750569d4416e69cdb7686b0f8901b55c06f5524a5846277249f97b7b246b030e148eba5b08edd65d4898eea2c022fa43dfca9ab4fc766bb78ae0df2dc2cfb46849ecc9104c50af5cf20dd3dd065da447c9071085e21a81571fae2711a16886f7c6bb1f97e45dee0eeb3256bda9d169e38847be30247cc9fa4d36c03ecbf78909b2a496346a17722e1eea64b5f3f75770e6ca044c92f2be529c203d33e29bddbf92b0902928869f69e0774561b92dcf1b80ac4e2ece57d2cb18a8eff95d36a2bc21bc3afbd29a7a82261f792de2c6b358d0614c19ae9da81c8715aa04faca451b415b688c8c0a6afadb7af55dc07bee7c856db6e5c1115846fa5034576aa26839f7388e2e3217fbf258ff71fa6c6b0457ed6e9af842ad1524458b3362bba67fa9fed223f72f748998c41b944fc3cb6abda0cb92980c5e296f2cbca58edc246b1d4bcccefffa752d584b4ad0869a115085a581fb6cbdcffc375cc6347b18720dcbc3111ac86298a9879a75df6a49d6ef4f25cd4452fb7b8b6dfb0b1529b0f8fefb7b4d6a71a831c33c4daa1b599a2820abfdba121d1e4fb9c18929ca3115599732e929274de9742a1a7c3e74c0487d2563b127259271217c472ec00d729dd799e2c5f6810181589008cd16cafd9fafd24f788ec3af7ef02431a889ab72fb03dc69b49ff1b5eaa7d254bb33dc5f5ff696e7bcc12eece82e98a9ef230605d63bba446c4aca864ccf4c9fb0e3cb33a00e19c7efd5b137d481ab90091fbe3d68f919d72badd8173d2f842e0304ce0e5975edbdaface7a99634aa87c92ce6a5e0490794512b9632edc13e9d3e8b232ebf4069256099cd8bb881fcd8b1eaba4b54a149d58b1f564cdb178db3afc7d5bd7cddde04c1255b731e9a1af37115e0f3d54cd503dde0184d30c1d8c406d9bde54cbb3cdec605f256f803f94e2d2cd7ee295e807a98c6da6e6dcdacbbcf5d06d08eb9916039f9bf09586adb39c8a3501628df64ec1ed0bf09e06f206779857da75407cb223a8436a57e5b52dd4f8d5596e528b994e40eb32dc6e12e332c1d3faf7a4284b333c8ec94a8a90a7e74e877beeb2db629984cfa5763779889113484bf3395574af0a"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/129) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000002c0)={0x1, 0xa, 0xb54, 0x1000, "8ed62d28dd1178a606dfeb7ffa3a47445d823d516b659092734260798e9e04bd"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB="120000467ad9fa6915e5369fcfe961c5ebfb638105e100dcb5ba6c8c8f5c06002a00004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff200000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f000000"]) syz_usb_connect_ath9k(0x3, 0x34, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1344.314680][T19201] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.314696][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.314714][T19201] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1344.440982][T19211] FAULT_INJECTION: forcing a failure. [ 1344.440982][T19211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.467923][ T8086] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1344.470228][T19211] CPU: 0 PID: 19211 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1344.486363][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.486385][T19211] Call Trace: [ 1344.486395][T19211] dump_stack+0x143/0x1db [ 1344.486429][T19211] should_fail.cold+0x5/0xa [ 1344.486459][T19211] _copy_from_user+0x2c/0x180 [ 1344.486487][T19211] input_event_from_user+0x131/0x3a0 [ 1344.486513][T19211] ? input_event_to_user+0x3a0/0x3a0 [ 1344.486536][T19211] evdev_write+0x356/0x760 [ 1344.486561][T19211] ? evdev_read+0xe40/0xe40 [ 1344.486585][T19211] ? security_file_permission+0x248/0x560 [ 1344.486617][T19211] ? evdev_read+0xe40/0xe40 [ 1344.486640][T19211] vfs_write+0x28e/0x9e0 [ 1344.486669][T19211] ksys_write+0x1ee/0x250 [ 1344.486695][T19211] ? __ia32_sys_read+0xb0/0xb0 [ 1344.486723][T19211] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1344.486758][T19211] ? syscall_enter_from_user_mode+0x27/0x70 [ 1344.486791][T19211] do_syscall_64+0x3a/0xb0 [ 1344.486825][T19211] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.486857][T19211] RIP: 0033:0x4665d9 [ 1344.486878][T19211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.486903][T19211] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1344.486932][T19211] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1344.486949][T19211] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1344.486967][T19211] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 10:25:15 executing program 4 (fault-call:2 fault-nth:53): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1344.486984][T19211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.487001][T19211] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1344.578584][ T7] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1344.589060][ T2105] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1344.589241][ T2608] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1344.742984][T19220] FAULT_INJECTION: forcing a failure. [ 1344.742984][T19220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.756416][T19220] CPU: 1 PID: 19220 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1344.756458][T19220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.756478][T19220] Call Trace: [ 1344.756488][T19220] dump_stack+0x143/0x1db [ 1344.756523][T19220] should_fail.cold+0x5/0xa [ 1344.787566][T19220] _copy_from_user+0x2c/0x180 [ 1344.787608][T19220] input_event_from_user+0x131/0x3a0 [ 1344.787633][T19220] ? input_event_to_user+0x3a0/0x3a0 [ 1344.803135][T19220] evdev_write+0x356/0x760 [ 1344.803177][T19220] ? evdev_read+0xe40/0xe40 [ 1344.803200][T19220] ? security_file_permission+0x248/0x560 [ 1344.803239][T19220] ? evdev_read+0xe40/0xe40 [ 1344.822784][T19220] vfs_write+0x28e/0x9e0 [ 1344.827116][T19220] ksys_write+0x1ee/0x250 [ 1344.831565][T19220] ? __ia32_sys_read+0xb0/0xb0 [ 1344.836347][T19220] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1344.842364][T19220] ? syscall_enter_from_user_mode+0x27/0x70 [ 1344.848416][T19220] do_syscall_64+0x3a/0xb0 [ 1344.852846][T19220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1344.858778][T19220] RIP: 0033:0x4665d9 [ 1344.862672][T19220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.884311][T19220] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:16 executing program 4 (fault-call:2 fault-nth:54): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1344.892765][T19220] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1344.900762][T19220] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1344.908760][T19220] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.916765][T19220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1344.924757][T19220] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1344.970865][T19222] FAULT_INJECTION: forcing a failure. [ 1344.970865][T19222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.984432][T19222] CPU: 0 PID: 19222 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1344.993242][T19222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.997469][ T17] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1345.003310][T19222] Call Trace: [ 1345.003334][T19222] dump_stack+0x143/0x1db [ 1345.003368][T19222] should_fail.cold+0x5/0xa [ 1345.003400][T19222] _copy_from_user+0x2c/0x180 [ 1345.003435][T19222] input_event_from_user+0x131/0x3a0 [ 1345.033055][T19222] ? input_event_to_user+0x3a0/0x3a0 [ 1345.038354][T19222] evdev_write+0x356/0x760 [ 1345.042812][T19222] ? evdev_read+0xe40/0xe40 [ 1345.047528][T19222] ? security_file_permission+0x248/0x560 [ 1345.053286][T19222] ? evdev_read+0xe40/0xe40 [ 1345.057893][T19222] vfs_write+0x28e/0x9e0 [ 1345.062164][T19222] ksys_write+0x1ee/0x250 [ 1345.066533][T19222] ? __ia32_sys_read+0xb0/0xb0 [ 1345.071368][T19222] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1345.077403][T19222] ? syscall_enter_from_user_mode+0x27/0x70 [ 1345.083353][T19222] do_syscall_64+0x3a/0xb0 [ 1345.087788][T19222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1345.094192][T19222] RIP: 0033:0x4665d9 [ 1345.098140][T19222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.118157][T19222] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1345.126834][T19222] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1345.134839][T19222] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1345.143570][T19222] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.151923][T19222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.160010][T19222] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1345.167711][ T8086] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1345.177065][ T8086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.185417][ T8086] usb 6-1: Product: syz [ 1345.189761][ T8086] usb 6-1: Manufacturer: syz [ 1345.194449][ T8086] usb 6-1: SerialNumber: syz 10:25:16 executing program 4 (fault-call:2 fault-nth:55): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1345.218128][ T7] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1345.227606][ T2608] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1345.238412][ T8086] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1345.276267][T19230] FAULT_INJECTION: forcing a failure. [ 1345.276267][T19230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.289763][T19230] CPU: 1 PID: 19230 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1345.298710][T19230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.308785][T19230] Call Trace: [ 1345.312074][T19230] dump_stack+0x143/0x1db [ 1345.316445][T19230] should_fail.cold+0x5/0xa [ 1345.320971][T19230] _copy_from_user+0x2c/0x180 [ 1345.325738][T19230] input_event_from_user+0x131/0x3a0 [ 1345.331036][T19230] ? input_event_to_user+0x3a0/0x3a0 [ 1345.336329][T19230] evdev_write+0x356/0x760 [ 1345.340771][T19230] ? evdev_read+0xe40/0xe40 [ 1345.345322][T19230] ? security_file_permission+0x248/0x560 [ 1345.351179][T19230] ? evdev_read+0xe40/0xe40 [ 1345.355716][T19230] vfs_write+0x28e/0x9e0 [ 1345.359977][T19230] ksys_write+0x1ee/0x250 [ 1345.364440][T19230] ? __ia32_sys_read+0xb0/0xb0 [ 1345.369265][T19230] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1345.375282][T19230] ? syscall_enter_from_user_mode+0x27/0x70 [ 1345.381209][T19230] do_syscall_64+0x3a/0xb0 [ 1345.385659][T19230] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1345.391571][T19230] RIP: 0033:0x4665d9 [ 1345.395487][T19230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.415197][T19230] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1345.423616][T19230] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1345.431593][T19230] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1345.439574][T19230] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.447546][T19230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.455521][T19230] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1345.463957][ T17] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1345.488383][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.499466][ T2105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.509292][ T2105] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1345.522167][ T2105] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1345.531318][ T2105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.544479][ T2105] usb 2-1: config 0 descriptor?? [ 1345.987565][ T8086] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1346.049749][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.057090][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.064303][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.071570][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.078848][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.086015][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.093212][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.100405][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.107578][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.114709][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.121897][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.129087][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.136221][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.143441][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.150789][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.158016][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.165248][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.172551][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.179716][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.186885][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.194068][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.201254][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.208512][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.215673][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.222859][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.230108][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.237247][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.244438][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.251631][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.258837][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.265983][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.267899][ T17] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1346.273167][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.282211][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.289319][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.289348][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.289381][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.297379][ T17] usb 1-1: Product: syz [ 1346.304485][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.311712][ T17] usb 1-1: Manufacturer: syz [ 1346.318802][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.322861][ T17] usb 1-1: SerialNumber: syz 10:25:17 executing program 4 (fault-call:2 fault-nth:56): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1346.329985][ T2105] hid-alps 0003:044E:1215.002B: unknown main item tag 0x0 [ 1346.398717][T19243] FAULT_INJECTION: forcing a failure. [ 1346.398717][T19243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.412081][T19243] CPU: 1 PID: 19243 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1346.417882][ T7] usb 4-1: unable to read config index 6 descriptor/all [ 1346.420872][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.427858][ T7] usb 4-1: can't read configurations, error -71 [ 1346.437853][T19243] Call Trace: [ 1346.437866][T19243] dump_stack+0x143/0x1db [ 1346.437898][T19243] should_fail.cold+0x5/0xa [ 1346.456367][T19243] _copy_from_user+0x2c/0x180 [ 1346.461113][T19243] input_event_from_user+0x131/0x3a0 [ 1346.466414][T19243] ? input_event_to_user+0x3a0/0x3a0 [ 1346.471799][T19243] evdev_write+0x356/0x760 [ 1346.476247][T19243] ? evdev_read+0xe40/0xe40 [ 1346.480805][T19243] ? security_file_permission+0x248/0x560 [ 1346.486555][T19243] ? evdev_read+0xe40/0xe40 [ 1346.491089][T19243] vfs_write+0x28e/0x9e0 [ 1346.495370][T19243] ksys_write+0x1ee/0x250 [ 1346.499717][T19243] ? __ia32_sys_read+0xb0/0xb0 [ 1346.504507][T19243] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1346.510512][T19243] ? syscall_enter_from_user_mode+0x27/0x70 [ 1346.516452][T19243] do_syscall_64+0x3a/0xb0 [ 1346.520887][T19243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1346.526802][T19243] RIP: 0033:0x4665d9 [ 1346.530800][T19243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.550644][T19243] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1346.559083][T19243] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1346.567165][T19243] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1346.575156][T19243] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.583143][T19243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.591153][T19243] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1346.601774][ T17] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1346.657543][T29681] usb 6-1: USB disconnect, device number 57 [ 1346.670300][ T2105] hid-alps 0003:044E:1215.002B: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.1-1/input0 [ 1346.704837][ T2105] usb 2-1: USB disconnect, device number 83 [ 1346.907772][ T2608] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1346.916902][ T2608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.925069][ T2608] usb 3-1: Product: syz [ 1346.929321][ T2608] usb 3-1: Manufacturer: syz [ 1346.933934][ T2608] usb 3-1: SerialNumber: syz [ 1346.998368][ T2608] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1347.007503][ T8086] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1347.016065][ T8086] ath9k_htc: Failed to initialize the device 10:25:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xaec, 0x9]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:25:18 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x81, 0x771001) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x86, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x557, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x1b, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a82629d", {0x1, 0x808}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "56991c17", {0x3, 0x0, 0x0, 0x0, 0x7}}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x22, &(0x7f0000000080)=@generic={0x7, 0x0, 0x1a, "8164c093", "3b8d4164ab6ddfe50f3376ff88ab21d4f98483d631d4123801e3"}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "3f8e6b9f", {0x3, 0x102, 0x0, 0x7f, 0x3, 0x80, 0x5}}) syz_usb_disconnect(r1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1d2, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:25:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787915692f03b12fda222071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1347.042906][T29681] usb 6-1: ath9k_htc: USB layer deinitialized [ 1347.051426][ T32] usb 3-1: USB disconnect, device number 9 [ 1347.075992][ T2608] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1347.099165][ T32] usb 3-1: ath9k_htc: USB layer deinitialized [ 1347.177596][ T17] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1347.397780][ T7235] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1347.467430][ T7] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1347.547507][ T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1347.557519][T29681] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1347.588656][T19215] udc-core: couldn't find an available UDC or it's busy [ 1347.595675][T19215] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1347.608693][ T2105] usb 1-1: USB disconnect, device number 57 [ 1347.707795][ T7235] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 1347.758443][ T7] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1347.827795][ T32] usb 3-1: too many configurations: 186, using maximum allowed: 8 10:25:19 executing program 4 (fault-call:2 fault-nth:57): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/163) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040ac054182810000000001090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:25:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x204000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/181) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) [ 1348.197699][T29681] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1348.207297][T29681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.215437][T29681] usb 6-1: Product: syz [ 1348.217447][ T17] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1348.219685][T29681] usb 6-1: Manufacturer: syz [ 1348.229069][ T17] ath9k_htc: Failed to initialize the device [ 1348.239418][ T2105] usb 1-1: ath9k_htc: USB layer deinitialized [ 1348.265368][T19303] FAULT_INJECTION: forcing a failure. [ 1348.265368][T19303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.278640][T19303] CPU: 1 PID: 19303 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1348.287439][T19303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.297521][T19303] Call Trace: [ 1348.300865][T19303] dump_stack+0x143/0x1db [ 1348.305230][T19303] should_fail.cold+0x5/0xa [ 1348.309773][T19303] _copy_from_user+0x2c/0x180 [ 1348.314485][T19303] input_event_from_user+0x131/0x3a0 [ 1348.319806][T19303] ? input_event_to_user+0x3a0/0x3a0 [ 1348.325132][T19303] evdev_write+0x356/0x760 [ 1348.329586][T19303] ? evdev_read+0xe40/0xe40 [ 1348.334135][T19303] ? security_file_permission+0x248/0x560 [ 1348.340020][T19303] ? evdev_read+0xe40/0xe40 [ 1348.344561][T19303] vfs_write+0x28e/0x9e0 [ 1348.348847][T19303] ksys_write+0x1ee/0x250 [ 1348.353218][T19303] ? __ia32_sys_read+0xb0/0xb0 [ 1348.358021][T19303] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1348.364050][T19303] ? syscall_enter_from_user_mode+0x27/0x70 [ 1348.367950][T29681] usb 6-1: can't set config #1, error -71 [ 1348.369987][T19303] do_syscall_64+0x3a/0xb0 [ 1348.370027][T19303] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1348.370062][T19303] RIP: 0033:0x4665d9 [ 1348.370084][T19303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.380138][T29681] usb 6-1: USB disconnect, device number 58 10:25:19 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x400401) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800005efc05399faf98c959bcee8eea60ca7dd1e26ff4a0382b5b0bc8e501bf6e14e729d5839523b78f1edc412b4441faa9d909697f45772f219457125026f38593e84e3d17596993c75e3caf363773310e0fcca3d255c33bc5ec88a2706ec7bcef7c27d6d6"]) [ 1348.380237][T19303] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1348.423968][T19303] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1348.431970][T19303] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1348.439962][T19303] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.447944][T19303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.455977][T19303] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:25:19 executing program 4 (fault-call:2 fault-nth:58): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1348.532174][T19320] FAULT_INJECTION: forcing a failure. [ 1348.532174][T19320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.545388][T19320] CPU: 0 PID: 19320 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1348.554189][T19320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.564279][T19320] Call Trace: [ 1348.567583][T19320] dump_stack+0x143/0x1db [ 1348.571950][T19320] should_fail.cold+0x5/0xa [ 1348.576498][T19320] _copy_from_user+0x2c/0x180 [ 1348.581227][T19320] input_event_from_user+0x131/0x3a0 [ 1348.586554][T19320] ? input_event_to_user+0x3a0/0x3a0 [ 1348.591891][T19320] evdev_write+0x356/0x760 [ 1348.596360][T19320] ? evdev_read+0xe40/0xe40 [ 1348.600920][T19320] ? security_file_permission+0x248/0x560 [ 1348.606685][T19320] ? evdev_read+0xe40/0xe40 [ 1348.611230][T19320] vfs_write+0x28e/0x9e0 [ 1348.615508][T19320] ksys_write+0x1ee/0x250 [ 1348.619879][T19320] ? __ia32_sys_read+0xb0/0xb0 [ 1348.624683][T19320] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1348.630705][T19320] ? syscall_enter_from_user_mode+0x27/0x70 [ 1348.636618][T19320] do_syscall_64+0x3a/0xb0 [ 1348.641072][T19320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1348.646983][T19320] RIP: 0033:0x4665d9 [ 1348.650898][T19320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.670602][T19320] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:19 executing program 4 (fault-call:2 fault-nth:59): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1348.679051][T19320] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1348.687023][T19320] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1348.694997][T19320] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.703057][T19320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.711055][T19320] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1348.758385][T19325] FAULT_INJECTION: forcing a failure. [ 1348.758385][T19325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.771548][T19325] CPU: 1 PID: 19325 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1348.780462][T19325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.790545][T19325] Call Trace: [ 1348.793836][T19325] dump_stack+0x143/0x1db [ 1348.798177][T19325] should_fail.cold+0x5/0xa [ 1348.802721][T19325] _copy_from_user+0x2c/0x180 [ 1348.807447][T19325] input_event_from_user+0x131/0x3a0 [ 1348.807649][ T7235] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1348.812770][T19325] ? input_event_to_user+0x3a0/0x3a0 [ 1348.812812][T19325] evdev_write+0x356/0x760 [ 1348.812842][T19325] ? evdev_read+0xe40/0xe40 [ 1348.812869][T19325] ? security_file_permission+0x248/0x560 [ 1348.822249][ T7235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.827440][T19325] ? evdev_read+0xe40/0xe40 [ 1348.827479][T19325] vfs_write+0x28e/0x9e0 [ 1348.827505][T19325] ksys_write+0x1ee/0x250 [ 1348.827530][T19325] ? __ia32_sys_read+0xb0/0xb0 [ 1348.831971][ T7235] usb 2-1: Product: syz [ 1348.836465][T19325] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1348.842265][ T7235] usb 2-1: Manufacturer: syz [ 1348.850257][T19325] ? syscall_enter_from_user_mode+0x27/0x70 [ 1348.850304][T19325] do_syscall_64+0x3a/0xb0 [ 1348.850328][T19325] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1348.850357][T19325] RIP: 0033:0x4665d9 [ 1348.850376][T19325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.854877][ T7235] usb 2-1: SerialNumber: syz [ 1348.859121][T19325] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1348.859157][T19325] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1348.859172][T19325] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1348.859187][T19325] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.859203][T19325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.859219][T19325] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1348.937458][ T17] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1348.978352][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1348.993798][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.002076][ T7] usb 4-1: Product: syz 10:25:20 executing program 4 (fault-call:2 fault-nth:60): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1349.006265][ T7] usb 4-1: Manufacturer: syz [ 1349.011093][ T7] usb 4-1: SerialNumber: syz [ 1349.016516][ T7235] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1349.024844][T29681] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1349.081958][T19335] FAULT_INJECTION: forcing a failure. [ 1349.081958][T19335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.095496][T19335] CPU: 0 PID: 19335 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1349.104649][T19335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.115025][T19335] Call Trace: [ 1349.118330][T19335] dump_stack+0x143/0x1db [ 1349.122685][T19335] should_fail.cold+0x5/0xa [ 1349.127242][T19335] _copy_from_user+0x2c/0x180 [ 1349.132162][T19335] input_event_from_user+0x131/0x3a0 [ 1349.137799][T19335] ? input_event_to_user+0x3a0/0x3a0 [ 1349.143370][T19335] evdev_write+0x356/0x760 [ 1349.148057][T19335] ? evdev_read+0xe40/0xe40 [ 1349.152607][T19335] ? security_file_permission+0x248/0x560 [ 1349.158544][T19335] ? evdev_read+0xe40/0xe40 [ 1349.163250][T19335] vfs_write+0x28e/0x9e0 [ 1349.167508][T19335] ksys_write+0x1ee/0x250 [ 1349.172027][T19335] ? __ia32_sys_read+0xb0/0xb0 [ 1349.176892][T19335] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1349.183033][T19335] ? syscall_enter_from_user_mode+0x27/0x70 [ 1349.188985][T19335] do_syscall_64+0x3a/0xb0 [ 1349.193447][T19335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1349.199380][T19335] RIP: 0033:0x4665d9 [ 1349.203322][T19335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.223462][T19335] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1349.232006][T19335] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1349.240064][T19335] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1349.248326][T19335] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.256416][T19335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.264507][T19335] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1349.273545][ T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:25:20 executing program 4 (fault-call:2 fault-nth:61): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1349.318057][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1349.327824][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.335942][ T32] usb 3-1: Product: syz [ 1349.340245][ T32] usb 3-1: Manufacturer: syz [ 1349.345068][ T32] usb 3-1: SerialNumber: syz [ 1349.362066][T19343] FAULT_INJECTION: forcing a failure. [ 1349.362066][T19343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.362108][T19343] CPU: 0 PID: 19343 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1349.384106][T19343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.394306][T19343] Call Trace: [ 1349.394321][T19343] dump_stack+0x143/0x1db [ 1349.394353][T19343] should_fail.cold+0x5/0xa [ 1349.394383][T19343] _copy_from_user+0x2c/0x180 [ 1349.394414][T19343] input_event_from_user+0x131/0x3a0 [ 1349.394440][T19343] ? input_event_to_user+0x3a0/0x3a0 [ 1349.394464][T19343] evdev_write+0x356/0x760 [ 1349.394489][T19343] ? evdev_read+0xe40/0xe40 [ 1349.394511][T19343] ? security_file_permission+0x248/0x560 [ 1349.394541][T19343] ? evdev_read+0xe40/0xe40 [ 1349.394564][T19343] vfs_write+0x28e/0x9e0 [ 1349.445808][T19343] ksys_write+0x1ee/0x250 [ 1349.445850][T19343] ? __ia32_sys_read+0xb0/0xb0 [ 1349.445876][T19343] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1349.461827][T19343] ? syscall_enter_from_user_mode+0x27/0x70 [ 1349.461881][T19343] do_syscall_64+0x3a/0xb0 [ 1349.461906][T19343] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1349.478524][T19343] RIP: 0033:0x4665d9 [ 1349.478556][T19343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.478578][T19343] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:20 executing program 4 (fault-call:2 fault-nth:62): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1349.478605][T19343] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1349.519250][T19343] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1349.519278][T19343] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.519294][T19343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.519307][T19343] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1349.556336][ T32] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1349.587184][T19349] FAULT_INJECTION: forcing a failure. [ 1349.587184][T19349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.587227][T19349] CPU: 1 PID: 19349 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1349.587255][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.587272][T19349] Call Trace: [ 1349.587282][T19349] dump_stack+0x143/0x1db [ 1349.587311][T19349] should_fail.cold+0x5/0xa [ 1349.587345][T19349] _copy_from_user+0x2c/0x180 [ 1349.587378][T19349] input_event_from_user+0x131/0x3a0 [ 1349.587404][T19349] ? input_event_to_user+0x3a0/0x3a0 [ 1349.587426][T19349] evdev_write+0x356/0x760 [ 1349.587451][T19349] ? evdev_read+0xe40/0xe40 [ 1349.587476][T19349] ? security_file_permission+0x248/0x560 [ 1349.587510][T19349] ? evdev_read+0xe40/0xe40 [ 1349.587534][T19349] vfs_write+0x28e/0x9e0 [ 1349.587561][T19349] ksys_write+0x1ee/0x250 [ 1349.587586][T19349] ? __ia32_sys_read+0xb0/0xb0 [ 1349.587614][T19349] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1349.587648][T19349] ? syscall_enter_from_user_mode+0x27/0x70 [ 1349.587677][T19349] do_syscall_64+0x3a/0xb0 [ 1349.587698][T19349] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1349.587724][T19349] RIP: 0033:0x4665d9 [ 1349.587740][T19349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.587765][T19349] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1349.587794][T19349] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1349.587810][T19349] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1349.587827][T19349] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.587842][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.587857][T19349] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1349.617839][ T17] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1349.667600][T29681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.808023][T29681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.808060][T29681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1349.831216][T29681] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.81 [ 1349.831257][T29681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.835151][T29681] usb 6-1: config 0 descriptor?? [ 1350.067702][ T7235] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1350.098197][ T2608] usb 4-1: USB disconnect, device number 28 [ 1350.117714][ T7] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1350.127243][ T2608] usb 4-1: ath9k_htc: USB layer deinitialized 10:25:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x8) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) 10:25:21 executing program 4 (fault-call:2 fault-nth:63): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:25:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x123040) read$hidraw(r3, &(0x7f0000000040)=""/62, 0xfffffe4d) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x2a0, &(0x7f00000007c0)=ANY=[@ANYRES32=r3]) [ 1350.165058][ T7257] usb 2-1: USB disconnect, device number 84 [ 1350.201889][ T2105] usb 3-1: USB disconnect, device number 10 [ 1350.217991][ T32] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1350.226870][ T2105] usb 3-1: ath9k_htc: USB layer deinitialized [ 1350.265022][T19367] FAULT_INJECTION: forcing a failure. [ 1350.265022][T19367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.279364][T19367] CPU: 0 PID: 19367 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1350.288170][T19367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.298689][T19367] Call Trace: [ 1350.302070][T19367] dump_stack+0x143/0x1db [ 1350.306543][T19367] should_fail.cold+0x5/0xa [ 1350.311093][T19367] _copy_from_user+0x2c/0x180 [ 1350.316076][T19367] input_event_from_user+0x131/0x3a0 [ 1350.321760][T19367] ? input_event_to_user+0x3a0/0x3a0 [ 1350.327264][T19367] evdev_write+0x356/0x760 [ 1350.331729][T19367] ? evdev_read+0xe40/0xe40 [ 1350.336274][T19367] ? security_file_permission+0x248/0x560 [ 1350.342052][T19367] ? evdev_read+0xe40/0xe40 [ 1350.346901][T19367] vfs_write+0x28e/0x9e0 [ 1350.351187][T19367] ksys_write+0x1ee/0x250 [ 1350.355660][T19367] ? __ia32_sys_read+0xb0/0xb0 [ 1350.360488][T19367] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1350.366622][T19367] ? syscall_enter_from_user_mode+0x27/0x70 [ 1350.372569][T19367] do_syscall_64+0x3a/0xb0 [ 1350.377033][T19367] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1350.383079][T19367] RIP: 0033:0x4665d9 [ 1350.387006][T19367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1350.406857][T19367] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1350.415366][T19367] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1350.423597][T19367] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1350.431623][T19367] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.439624][T19367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1350.447921][T19367] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1350.458862][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.466064][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.473336][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.480496][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.487636][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.494721][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.502156][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.509306][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.516391][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.523553][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.530802][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.537955][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.545052][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.552223][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.562868][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.570145][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.577232][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.584562][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.591771][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.599039][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.606147][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.613637][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.620916][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.628132][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.635217][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.642392][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.649822][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.656914][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.664065][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.671227][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.678401][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.685501][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.692639][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.699864][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.706949][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.714191][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.721372][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.728637][T29681] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 1350.737003][T29681] appleir 0003:05AC:8241.002C: No inputs registered, leaving [ 1350.741304][ T17] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1350.753626][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.759542][T29681] appleir 0003:05AC:8241.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 1350.761708][ T17] usb 1-1: Product: syz [ 1350.777808][ T17] usb 1-1: Manufacturer: syz [ 1350.784085][ T17] usb 1-1: SerialNumber: syz [ 1350.789366][T29681] usb 6-1: USB disconnect, device number 59 [ 1350.908717][ T17] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1351.077484][ T2608] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1351.085234][ T2105] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1351.094276][ T7235] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1351.102437][ T7235] ath9k_htc: Failed to initialize the device [ 1351.108986][ T7257] usb 2-1: ath9k_htc: USB layer deinitialized 10:25:22 executing program 4 (fault-call:2 fault-nth:64): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/163) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040ac054182810000000001090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1351.286500][T19419] FAULT_INJECTION: forcing a failure. [ 1351.286500][T19419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.286540][T19419] CPU: 0 PID: 19419 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1351.308468][T19419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.308488][T19419] Call Trace: [ 1351.308497][T19419] dump_stack+0x143/0x1db [ 1351.308528][T19419] should_fail.cold+0x5/0xa [ 1351.330970][T19419] _copy_from_user+0x2c/0x180 [ 1351.331015][T19419] input_event_from_user+0x131/0x3a0 [ 1351.331043][T19419] ? input_event_to_user+0x3a0/0x3a0 [ 1351.331066][T19419] evdev_write+0x356/0x760 [ 1351.331094][T19419] ? evdev_read+0xe40/0xe40 [ 1351.331118][T19419] ? security_file_permission+0x248/0x560 [ 1351.331150][T19419] ? evdev_read+0xe40/0xe40 [ 1351.331174][T19419] vfs_write+0x28e/0x9e0 [ 1351.331201][T19419] ksys_write+0x1ee/0x250 [ 1351.331228][T19419] ? __ia32_sys_read+0xb0/0xb0 [ 1351.331262][T19419] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1351.331294][T19419] ? syscall_enter_from_user_mode+0x27/0x70 [ 1351.331327][T19419] do_syscall_64+0x3a/0xb0 [ 1351.331351][T19419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1351.331380][T19419] RIP: 0033:0x4665d9 [ 1351.331400][T19419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1351.331425][T19419] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1351.331453][T19419] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1351.331472][T19419] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1351.331488][T19419] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 10:25:22 executing program 4 (fault-call:2 fault-nth:65): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xffff, 0x88000) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0xa, 0x0, 0x101, "ed105400000000003ec13e2000000005000000003f00"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) [ 1351.331505][T19419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.331520][T19419] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1351.397778][ T2608] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1351.420848][ T2105] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1351.507787][T29987] usb 1-1: USB disconnect, device number 58 [ 1351.522435][ T17] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1351.562928][T29987] usb 1-1: ath9k_htc: USB layer deinitialized [ 1351.565163][T19428] FAULT_INJECTION: forcing a failure. [ 1351.565163][T19428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.582824][T19428] CPU: 0 PID: 19428 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1351.582865][T19428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.582886][T19428] Call Trace: [ 1351.582897][T19428] dump_stack+0x143/0x1db [ 1351.582934][T19428] should_fail.cold+0x5/0xa [ 1351.582972][T19428] _copy_from_user+0x2c/0x180 [ 1351.583010][T19428] input_event_from_user+0x131/0x3a0 [ 1351.583041][T19428] ? input_event_to_user+0x3a0/0x3a0 [ 1351.583068][T19428] evdev_write+0x356/0x760 [ 1351.583100][T19428] ? evdev_read+0xe40/0xe40 [ 1351.583128][T19428] ? security_file_permission+0x248/0x560 [ 1351.583163][T19428] ? evdev_read+0xe40/0xe40 [ 1351.583189][T19428] vfs_write+0x28e/0x9e0 [ 1351.583220][T19428] ksys_write+0x1ee/0x250 [ 1351.583249][T19428] ? __ia32_sys_read+0xb0/0xb0 [ 1351.583288][T19428] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1351.583326][T19428] ? syscall_enter_from_user_mode+0x27/0x70 [ 1351.583358][T19428] do_syscall_64+0x3a/0xb0 [ 1351.583384][T19428] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1351.583415][T19428] RIP: 0033:0x4665d9 [ 1351.583435][T19428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1351.583466][T19428] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1351.583498][T19428] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1351.583524][T19428] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1351.583544][T19428] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1351.583563][T19428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:25:22 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x3f, 0x17, 0x3ff, 0xfffffffb, "66f1b64611c4e78fde4897a2228c56eb5c74ca996e46340ed55501c85f271394"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5ebfb638105e100002a00004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff200000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e9200000003676605dc01f5477658ad"]) 10:25:22 executing program 4 (fault-call:2 fault-nth:66): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1351.583583][T19428] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1351.606661][ T7257] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1351.767064][T29681] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1351.892703][T19439] FAULT_INJECTION: forcing a failure. [ 1351.892703][T19439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.906205][T19439] CPU: 0 PID: 19439 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1351.915119][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.925347][T19439] Call Trace: [ 1351.928659][T19439] dump_stack+0x143/0x1db [ 1351.933051][T19439] should_fail.cold+0x5/0xa [ 1351.937647][T19439] _copy_from_user+0x2c/0x180 [ 1351.942868][T19439] input_event_from_user+0x131/0x3a0 [ 1351.948202][T19439] ? input_event_to_user+0x3a0/0x3a0 [ 1351.953538][T19439] evdev_write+0x356/0x760 [ 1351.957999][T19439] ? evdev_read+0xe40/0xe40 [ 1351.962550][T19439] ? security_file_permission+0x248/0x560 [ 1351.968317][T19439] ? evdev_read+0xe40/0xe40 [ 1351.972861][T19439] vfs_write+0x28e/0x9e0 [ 1351.977204][T19439] ksys_write+0x1ee/0x250 [ 1351.981580][T19439] ? __ia32_sys_read+0xb0/0xb0 [ 1351.986384][T19439] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1351.992414][T19439] ? syscall_enter_from_user_mode+0x27/0x70 [ 1351.998328][T19439] do_syscall_64+0x3a/0xb0 [ 1352.002958][T19439] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1352.009015][T19439] RIP: 0033:0x4665d9 [ 1352.013132][T19439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1352.032808][T19439] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:23 executing program 4 (fault-call:2 fault-nth:67): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1352.041259][T19439] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1352.049362][T19439] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1352.057440][T19439] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.065448][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1352.073452][T19439] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1352.122197][T19445] FAULT_INJECTION: forcing a failure. [ 1352.122197][T19445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.135793][T19445] CPU: 0 PID: 19445 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1352.135832][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.135850][T19445] Call Trace: [ 1352.135860][T19445] dump_stack+0x143/0x1db [ 1352.162512][T19445] should_fail.cold+0x5/0xa [ 1352.162560][T19445] _copy_from_user+0x2c/0x180 [ 1352.162587][T19445] input_event_from_user+0x131/0x3a0 [ 1352.162613][T19445] ? input_event_to_user+0x3a0/0x3a0 [ 1352.162637][T19445] evdev_write+0x356/0x760 [ 1352.186796][T19445] ? evdev_read+0xe40/0xe40 [ 1352.191333][T19445] ? security_file_permission+0x248/0x560 [ 1352.197095][T19445] ? evdev_read+0xe40/0xe40 [ 1352.201633][T19445] vfs_write+0x28e/0x9e0 [ 1352.205983][T19445] ksys_write+0x1ee/0x250 [ 1352.210372][T19445] ? __ia32_sys_read+0xb0/0xb0 [ 1352.215181][T19445] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1352.221197][T19445] ? syscall_enter_from_user_mode+0x27/0x70 [ 1352.228015][T19445] do_syscall_64+0x3a/0xb0 [ 1352.232741][T19445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1352.238678][T19445] RIP: 0033:0x4665d9 [ 1352.242602][T19445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1352.263110][T19445] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:23 executing program 4 (fault-call:2 fault-nth:68): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1352.271877][T19445] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1352.279883][T19445] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1352.288475][T19445] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.296675][T19445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1352.304671][T19445] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1352.354826][T19447] FAULT_INJECTION: forcing a failure. [ 1352.354826][T19447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.368101][T19447] CPU: 1 PID: 19447 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1352.377071][T19447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.387486][T19447] Call Trace: [ 1352.390799][T19447] dump_stack+0x143/0x1db [ 1352.395240][T19447] should_fail.cold+0x5/0xa [ 1352.399836][T19447] _copy_from_user+0x2c/0x180 [ 1352.404555][T19447] input_event_from_user+0x131/0x3a0 [ 1352.409861][T19447] ? input_event_to_user+0x3a0/0x3a0 [ 1352.415190][T19447] evdev_write+0x356/0x760 [ 1352.419730][T19447] ? evdev_read+0xe40/0xe40 [ 1352.424377][T19447] ? security_file_permission+0x248/0x560 [ 1352.427688][T29681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.430131][T19447] ? evdev_read+0xe40/0xe40 [ 1352.430182][T19447] vfs_write+0x28e/0x9e0 [ 1352.430217][T19447] ksys_write+0x1ee/0x250 [ 1352.430246][T19447] ? __ia32_sys_read+0xb0/0xb0 [ 1352.441254][T29681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.445692][T19447] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1352.450213][T29681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1352.454682][T19447] ? syscall_enter_from_user_mode+0x27/0x70 [ 1352.459720][T29681] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.81 [ 1352.469336][T19447] do_syscall_64+0x3a/0xb0 [ 1352.469376][T19447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1352.469405][T19447] RIP: 0033:0x4665d9 [ 1352.469426][T19447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1352.469450][T19447] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 [ 1352.475468][T29681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.488298][T19447] ORIG_RAX: 0000000000000001 [ 1352.488321][T19447] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1352.488338][T19447] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1352.488352][T19447] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.488368][T19447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1352.488383][T19447] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1352.488829][T29987] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1352.527648][ T7257] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1352.615925][ T7257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.624008][ T7257] usb 2-1: Product: syz [ 1352.628395][ T7257] usb 2-1: Manufacturer: syz [ 1352.633025][ T7257] usb 2-1: SerialNumber: syz [ 1352.639013][T29681] usb 6-1: config 0 descriptor?? [ 1352.708328][ T7257] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1352.798612][ T2608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1352.807751][ T2608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.816344][ T2608] usb 4-1: Product: syz [ 1352.820691][ T2608] usb 4-1: Manufacturer: syz [ 1352.825314][ T2608] usb 4-1: SerialNumber: syz [ 1352.837575][T29987] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1352.848604][ T2105] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1352.857798][ T2105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.865997][ T2105] usb 3-1: Product: syz [ 1352.870583][ T2105] usb 3-1: Manufacturer: syz [ 1352.875289][ T2105] usb 3-1: SerialNumber: syz [ 1352.880877][ T2608] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1352.938401][ T2105] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1353.099021][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.106142][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.113343][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.120634][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.127910][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.135160][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.142316][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.149505][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.156593][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.163916][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.171077][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.178228][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.185322][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.192650][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.199796][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.206885][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.214063][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.221222][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.228618][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.235718][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.242860][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.250216][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.257311][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.264464][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.271666][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.278831][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.280307][ T32] usb 4-1: USB disconnect, device number 29 [ 1353.286186][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.286224][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.286252][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.286279][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.320785][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.327955][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.333448][ T8086] usb 3-1: USB disconnect, device number 11 [ 1353.335029][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.335064][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.355171][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.362336][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.369447][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.376526][T29681] appleir 0003:05AC:8241.002D: unknown main item tag 0x0 [ 1353.384260][ T2608] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1353.393339][ T32] usb 4-1: ath9k_htc: USB layer deinitialized 10:25:24 executing program 4 (fault-call:2 fault-nth:69): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/13) syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x59, &(0x7f0000000200)="906db3de345e76bb671ce9b888a8cd3e3ad58637738bd117358d5d11fd640e33bad91f48de7517f7e30f3ae7acc13ee76b7a9bcb0b5e6a8ab1f212fba1708298ca85abdf6a77678b652c19734990873a62d8b8d3cfefb5a9ae"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2401, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x45, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e717, [{{0x9, 0x2, 0x1}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x5d642a5da249f0b4, &(0x7f0000000380)=@generic={0x4, 0x2, 0x0, "261a7901", "d9a3ac4ece4aa50f7d3d1586df02fd9b2f987bed00d647d7fba62af14aec14db65d16514f49539c3d66403cfb250e2d4ecd01fca4a2af44bd6bdb0deed6c674ad2b1bc151dd5a090c258d2b9da856834854d261db7043f960fc1d974d82589ef898d4ab4f46b53f17b4aebe9c09f24e823b9b06f7c6839571d88483db5b5740fa6d8637dce833f4cc76bbcdaddf37d268f309fdb69901765a65f2cdadeb364c1ab68a9e1a459922e7c6b56bb70e543fc7019c87bc70fa0d9bf02a2c915ea5406504878afda9b6f0a9eb8ba4b8db3fd0bbeb8ab82815e81b2bb99c02baf2497eda4e9e7a2afbafa5032e42e24e66c703adb65f60b695f"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b57f0545", {0x1, 0x0, 0x0, 0x9, 0x8}}) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffff3ec, 0xc0000) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x101000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/21) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000100)={0x8, 0x5, 0x67, 0xe67, "424131d74e36068f8ebfe18f6838ae6480f970cec0c38c1fd639bf51d4b48635"}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r4, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000002c0)={0x12, 0xb1, &(0x7f0000000200)="86e808ddebfea0229c6de25303d52fd097965bda36b35710cea71cec5cfddd77b0457773a5e10fb43af9e0b499593a11a89b40496776a4a3dac635618d90186ed5abecba0d03f6a2e72fe3a3b1e4b57b63b46907600005a9bb77c2e80171fd47fdab934c4ea7bbc2426dd5a9213758504287f3acb5dc5ca5ded24127f5034028f21784f744620e4795211138b490df08062c11cb8da3633645c2cc5ae47f9c2c9acd629a4b4da4d2301fa7fdc51eb826a0"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) 10:25:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1353.393753][ T2105] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1353.409827][ T8086] usb 3-1: ath9k_htc: USB layer deinitialized 10:25:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_open_dev$evdev(&(0x7f0000000180), 0x7ff, 0x44500) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000840)={0x98, 0x0, 0x0, 0x0, "e0e61bde8f9bdc658831fdaa6948082a5496b297c8b621885d7c2728dab8ef14"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffea1, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e524, [{{0x9, 0x2, 0xfffffffffffffe58}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, &(0x7f0000000640)={0x5, 0xf, 0x5}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x33d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000fc0)=0x8) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x101a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x90, 0xfe, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x8}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)=ANY=[], 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x41, &(0x7f00000005c0)=@string={0x41, 0x3, "b5e3e330a7219ad489b4008f72c6014eda654bcbae109a38e83df6047b9c43021a3e21c6864d6e0b12fa42878d8da2c1b92cb0ad9da0f14a7e75fe9a62d811"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f00000007c0)=@generic={0x3, 0x0, 0x0, "4dab806b"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1353.441754][ T17] usb 2-1: USB disconnect, device number 85 [ 1353.457648][ T7257] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1353.469957][ T17] usb 2-1: ath9k_htc: USB layer deinitialized [ 1353.500105][T19487] FAULT_INJECTION: forcing a failure. [ 1353.500105][T19487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1353.513555][T19487] CPU: 1 PID: 19487 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1353.522365][T19487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.532459][T19487] Call Trace: [ 1353.535774][T19487] dump_stack+0x143/0x1db [ 1353.540139][T19487] should_fail.cold+0x5/0xa [ 1353.544827][T19487] _copy_from_user+0x2c/0x180 [ 1353.549557][T19487] input_event_from_user+0x131/0x3a0 [ 1353.554913][T19487] ? input_event_to_user+0x3a0/0x3a0 [ 1353.560240][T19487] evdev_write+0x356/0x760 [ 1353.564699][T19487] ? evdev_read+0xe40/0xe40 [ 1353.569239][T19487] ? security_file_permission+0x248/0x560 [ 1353.575135][T19487] ? evdev_read+0xe40/0xe40 [ 1353.579684][T19487] vfs_write+0x28e/0x9e0 [ 1353.583981][T19487] ksys_write+0x1ee/0x250 [ 1353.588358][T19487] ? __ia32_sys_read+0xb0/0xb0 [ 1353.593173][T19487] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1353.599204][T19487] ? syscall_enter_from_user_mode+0x27/0x70 [ 1353.605282][T19487] do_syscall_64+0x3a/0xb0 [ 1353.609743][T19487] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1353.615683][T19487] RIP: 0033:0x4665d9 [ 1353.619610][T19487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1353.639257][T19487] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1353.647708][T19487] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1353.655719][T19487] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1353.663770][T19487] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1353.671779][T19487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1353.679782][T19487] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1353.757144][T29681] appleir 0003:05AC:8241.002D: No inputs registered, leaving [ 1353.779202][T29681] appleir 0003:05AC:8241.002D: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 10:25:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1353.807776][T29987] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1353.813018][T29681] usb 6-1: USB disconnect, device number 60 [ 1353.816940][T29987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.831438][T29987] usb 1-1: Product: syz [ 1353.835627][T29987] usb 1-1: Manufacturer: syz [ 1353.840318][T29987] usb 1-1: SerialNumber: syz [ 1353.958573][T29987] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1354.037589][ T17] usb 2-1: new high-speed USB device number 86 using dummy_hcd 10:25:25 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x3, 0x45, &(0x7f0000000100)="3bebc2951e88686d3370ae855d906905bc40629fbcb1e273b3bcbf6df4671629ad83e3d9146cfd9567d3937b062bbbef8d81353c1bb33ac0e50bfd78f8a9f9f838eead3c9f"}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="050c807a45c85497662c25b78e"]}) 10:25:25 executing program 4 (fault-call:2 fault-nth:70): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1354.087642][ T8086] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1354.136186][T19535] FAULT_INJECTION: forcing a failure. [ 1354.136186][T19535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.136226][T19535] CPU: 1 PID: 19535 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1354.136252][T19535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.136269][T19535] Call Trace: [ 1354.171620][T19535] dump_stack+0x143/0x1db [ 1354.175985][T19535] should_fail.cold+0x5/0xa [ 1354.180530][T19535] _copy_from_user+0x2c/0x180 [ 1354.185243][T19535] input_event_from_user+0x131/0x3a0 [ 1354.191171][T19535] ? input_event_to_user+0x3a0/0x3a0 [ 1354.196621][T19535] evdev_write+0x356/0x760 [ 1354.201060][T19535] ? evdev_read+0xe40/0xe40 [ 1354.205606][T19535] ? security_file_permission+0x248/0x560 [ 1354.211338][T19535] ? evdev_read+0xe40/0xe40 [ 1354.215864][T19535] vfs_write+0x28e/0x9e0 [ 1354.220252][T19535] ksys_write+0x1ee/0x250 [ 1354.224601][T19535] ? __ia32_sys_read+0xb0/0xb0 [ 1354.229454][T19535] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1354.235479][T19535] ? syscall_enter_from_user_mode+0x27/0x70 [ 1354.241519][T19535] do_syscall_64+0x3a/0xb0 [ 1354.245954][T19535] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1354.252209][T19535] RIP: 0033:0x4665d9 [ 1354.256180][T19535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.275815][T19535] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:25 executing program 4 (fault-call:2 fault-nth:71): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1354.284445][T19535] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1354.292435][T19535] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1354.300413][T19535] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1354.308415][T19535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.316479][T19535] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1354.328627][ T2608] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1354.369653][T19541] FAULT_INJECTION: forcing a failure. [ 1354.369653][T19541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.383139][T19541] CPU: 0 PID: 19541 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1354.391953][T19541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.402037][T19541] Call Trace: [ 1354.405322][T19541] dump_stack+0x143/0x1db [ 1354.410302][T19541] should_fail.cold+0x5/0xa [ 1354.414861][T19541] _copy_from_user+0x2c/0x180 [ 1354.419562][T19541] input_event_from_user+0x131/0x3a0 [ 1354.424872][T19541] ? input_event_to_user+0x3a0/0x3a0 [ 1354.430311][T19541] evdev_write+0x356/0x760 [ 1354.434836][T19541] ? evdev_read+0xe40/0xe40 [ 1354.439400][T19541] ? security_file_permission+0x248/0x560 [ 1354.445276][T19541] ? evdev_read+0xe40/0xe40 [ 1354.449799][T19541] vfs_write+0x28e/0x9e0 [ 1354.454075][T19541] ksys_write+0x1ee/0x250 [ 1354.458457][T19541] ? __ia32_sys_read+0xb0/0xb0 [ 1354.463232][T19541] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1354.469267][T19541] ? syscall_enter_from_user_mode+0x27/0x70 [ 1354.475209][T19541] do_syscall_64+0x3a/0xb0 [ 1354.477820][ T8086] usb 3-1: too many configurations: 23, using maximum allowed: 8 [ 1354.479674][T19541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1354.479718][T19541] RIP: 0033:0x4665d9 [ 1354.479741][T19541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.487874][ T17] usb 2-1: too many configurations: 221, using maximum allowed: 8 [ 1354.493708][T19541] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1354.533860][T19541] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1354.542037][T19541] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1354.550015][T19541] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1354.557999][T19541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.566024][T19541] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1354.578242][ T8086] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1354.647479][T29681] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1354.668016][ T8086] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1354.717581][T29987] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1354.757527][ T8086] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1354.828399][ T2608] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1354.837553][ T8086] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 10:25:26 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x11, 0xc4, &(0x7f0000000200)="3b91c3b9a1a18b86ee181b7723aee13b931b9983ded895e50a50368e71de2c5d14d3d556a3aa5f7c7cd3866fdf8e6786843658afbe20e0036881507add7ab91087920c877ca81264cd80b612e76fbce7cb8619b3b06b9b76dc8535405d998849223ed3365f4449f6cdeecc66d577df0597937e8eaba1ea9babf28a16e3ff7c1c6243063f35e6c48ebdf14b7c4f3871dcd0efe6eacce6022092f5d891c0f9994353bb5a1854aa3e26a17bf3fe465a24346e789c53982b3caeaf1f0a6f675a0a75963878d6"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x80, 0x8100) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000100)=0xa0c) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0xef, 0x81, 0x8001, 0x3, "95eb5ba40c858b10a01810adae0ff5395c84b8dde3df6777dcd0da9043d2f025"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:25:26 executing program 4 (fault-call:2 fault-nth:72): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1354.884530][ T7] usb 1-1: USB disconnect, device number 59 [ 1354.917883][T29681] usb 6-1: Using ep0 maxpacket: 32 [ 1354.917951][ T8086] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1354.946050][T19546] FAULT_INJECTION: forcing a failure. [ 1354.946050][T19546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.959460][T19546] CPU: 1 PID: 19546 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1354.968355][T19546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.978440][T19546] Call Trace: [ 1354.981742][T19546] dump_stack+0x143/0x1db [ 1354.986105][T19546] should_fail.cold+0x5/0xa [ 1354.990643][T19546] _copy_from_user+0x2c/0x180 [ 1354.995360][T19546] input_event_from_user+0x131/0x3a0 [ 1355.000676][T19546] ? input_event_to_user+0x3a0/0x3a0 [ 1355.005997][T19546] evdev_write+0x356/0x760 [ 1355.010445][T19546] ? evdev_read+0xe40/0xe40 [ 1355.015081][T19546] ? security_file_permission+0x248/0x560 [ 1355.020932][T19546] ? evdev_read+0xe40/0xe40 [ 1355.025819][T19546] vfs_write+0x28e/0x9e0 [ 1355.030153][T19546] ksys_write+0x1ee/0x250 [ 1355.034519][T19546] ? __ia32_sys_read+0xb0/0xb0 [ 1355.039313][T19546] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1355.045418][T19546] ? syscall_enter_from_user_mode+0x27/0x70 [ 1355.051347][T19546] do_syscall_64+0x3a/0xb0 [ 1355.055805][T19546] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1355.061765][T19546] RIP: 0033:0x4665d9 [ 1355.065665][T19546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1355.085638][T19546] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:26 executing program 4 (fault-call:2 fault-nth:73): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1355.094063][T19546] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1355.102068][T19546] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1355.110225][T19546] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.118210][T19546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1355.126185][T19546] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1355.171801][T19552] FAULT_INJECTION: forcing a failure. [ 1355.171801][T19552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.177948][ T8086] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1355.186295][T19552] CPU: 0 PID: 19552 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1355.203854][T19552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.214208][T19552] Call Trace: [ 1355.217500][T19552] dump_stack+0x143/0x1db [ 1355.221960][T19552] should_fail.cold+0x5/0xa [ 1355.226514][T19552] _copy_from_user+0x2c/0x180 [ 1355.231275][T19552] input_event_from_user+0x131/0x3a0 [ 1355.236603][T19552] ? input_event_to_user+0x3a0/0x3a0 [ 1355.241904][T19552] evdev_write+0x356/0x760 [ 1355.246355][T19552] ? evdev_read+0xe40/0xe40 [ 1355.250963][T19552] ? security_file_permission+0x248/0x560 [ 1355.256689][T19552] ? evdev_read+0xe40/0xe40 [ 1355.261566][T19552] vfs_write+0x28e/0x9e0 [ 1355.265814][T19552] ksys_write+0x1ee/0x250 [ 1355.268316][ T8086] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1355.270162][T19552] ? __ia32_sys_read+0xb0/0xb0 [ 1355.270196][T19552] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1355.270232][T19552] ? syscall_enter_from_user_mode+0x27/0x70 [ 1355.295911][T19552] do_syscall_64+0x3a/0xb0 [ 1355.300357][T19552] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1355.306261][T19552] RIP: 0033:0x4665d9 [ 1355.310316][T19552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1355.330146][T19552] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.338602][T19552] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1355.346650][T19552] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1355.354655][T19552] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.357793][ T8086] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 10:25:26 executing program 4 (fault-call:2 fault-nth:74): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1355.362652][T19552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1355.362675][T19552] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1355.415935][T19554] FAULT_INJECTION: forcing a failure. [ 1355.415935][T19554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.429477][T19554] CPU: 0 PID: 19554 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1355.438341][T19554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.448526][T19554] Call Trace: [ 1355.451802][T19554] dump_stack+0x143/0x1db [ 1355.456172][T19554] should_fail.cold+0x5/0xa [ 1355.460746][T19554] _copy_from_user+0x2c/0x180 [ 1355.465468][T19554] input_event_from_user+0x131/0x3a0 [ 1355.470763][T19554] ? input_event_to_user+0x3a0/0x3a0 [ 1355.476073][T19554] evdev_write+0x356/0x760 [ 1355.480525][T19554] ? evdev_read+0xe40/0xe40 [ 1355.485055][T19554] ? security_file_permission+0x248/0x560 [ 1355.491026][T19554] ? evdev_read+0xe40/0xe40 [ 1355.495542][T19554] vfs_write+0x28e/0x9e0 [ 1355.500143][T19554] ksys_write+0x1ee/0x250 [ 1355.504483][T19554] ? __ia32_sys_read+0xb0/0xb0 [ 1355.507992][ T17] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1355.509384][T19554] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1355.518464][ T17] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.524365][T19554] ? syscall_enter_from_user_mode+0x27/0x70 [ 1355.532470][ T17] usb 2-1: Product: syz [ 1355.538211][T19554] do_syscall_64+0x3a/0xb0 [ 1355.538249][T19554] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1355.542394][ T17] usb 2-1: Manufacturer: syz [ 1355.546789][T19554] RIP: 0033:0x4665d9 [ 1355.552741][ T17] usb 2-1: SerialNumber: syz [ 1355.557246][T19554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1355.585498][T19554] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.593946][T19554] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1355.599431][ T8086] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1355.601951][T19554] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1355.611280][ T8086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.619142][T19554] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.619167][T19554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1355.619183][T19554] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1355.619428][T29681] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1355.627546][ T8086] usb 3-1: Product: syz 10:25:26 executing program 4 (fault-call:2 fault-nth:75): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1355.627570][ T8086] usb 3-1: Manufacturer: syz [ 1355.668398][ T8086] usb 3-1: SerialNumber: syz [ 1355.674635][ T17] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1355.731370][T19564] FAULT_INJECTION: forcing a failure. [ 1355.731370][T19564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.731416][T19564] CPU: 0 PID: 19564 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1355.731443][T19564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.731459][T19564] Call Trace: [ 1355.731471][T19564] dump_stack+0x143/0x1db [ 1355.731502][T19564] should_fail.cold+0x5/0xa [ 1355.775607][T19564] _copy_from_user+0x2c/0x180 [ 1355.775651][T19564] input_event_from_user+0x131/0x3a0 [ 1355.785625][T19564] ? input_event_to_user+0x3a0/0x3a0 [ 1355.785665][T19564] evdev_write+0x356/0x760 [ 1355.785691][T19564] ? evdev_read+0xe40/0xe40 [ 1355.799927][T19564] ? security_file_permission+0x248/0x560 [ 1355.799981][T19564] ? evdev_read+0xe40/0xe40 [ 1355.800008][T19564] vfs_write+0x28e/0x9e0 [ 1355.807472][T29987] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1355.810229][T19564] ksys_write+0x1ee/0x250 [ 1355.810269][T19564] ? __ia32_sys_read+0xb0/0xb0 [ 1355.810296][T19564] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1355.814939][T29987] ath9k_htc: Failed to initialize the device [ 1355.821494][T19564] ? syscall_enter_from_user_mode+0x27/0x70 [ 1355.821538][T19564] do_syscall_64+0x3a/0xb0 [ 1355.821564][T19564] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1355.821595][T19564] RIP: 0033:0x4665d9 [ 1355.821614][T19564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1355.821639][T19564] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.821665][T19564] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1355.821681][T19564] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1355.821697][T19564] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.821712][T19564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1355.821726][T19564] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1355.824438][T29681] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1355.940858][T29681] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1355.940888][T29681] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1355.941400][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 1356.137692][T29681] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1356.146859][T29681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.155077][T29681] usb 6-1: Product: syz [ 1356.159398][T29681] usb 6-1: Manufacturer: syz [ 1356.164128][T29681] usb 6-1: SerialNumber: syz [ 1356.317747][ T17] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1356.327658][ T7] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1356.477655][ T2608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1356.486952][ T2608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.497080][ T2608] usb 4-1: Product: syz [ 1356.501371][ T2608] usb 4-1: Manufacturer: syz [ 1356.506009][ T2608] usb 4-1: SerialNumber: syz 10:25:27 executing program 2: read$hidraw(0xffffffffffffffff, &(0x7f0000000e00)=""/4096, 0x1000) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x101, "ed104cffe2000001000000000000000000000000000008000800"}) syz_open_dev$hidraw(&(0x7f00000000c0), 0x40, 0x103140) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x82) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000400)={0x57, 0x2, 0x1000, {0x5, 0x9}, {0x28f, 0x4}, @period={0x7, 0x1, 0x8, 0x5, 0x8000, {0x9, 0xffff, 0x3, 0x1}, 0x1, &(0x7f00000003c0)=[0x0]}}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x123040) read$hidraw(r4, &(0x7f0000000040)=""/62, 0xfffffe4d) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x108, &(0x7f0000000480)=@generic={0x1, 0x2, 0x100, "d69ef5a7", "d01c63a66e367ad4f81ceda569605653fbaf89a67b0f5cbc394339b7a32bf4d8bd65876417c5dcc15700cf0c6b7f13b5cfbd1eb1149c60d4230eea1c6429092f916b18e090079785f719d30a1cae5dcbeb6f5ec32e495d8a1a975700a4f40fae8e99f236d3357f3f52dd5e088f13758eee8bf52a20be350f8e3b23c95fbd3b8987c98d78d4000000000000008302c9ea0f8c1750176814707fff000a89d7b9ce4f2b1b602ee7c1b0b3a22a9558043c01c7ff28be469532578b56ffa97e86a7460591cdb4cc37c693d94ed820100bf352aeb46a03fbf494ecfa83322f7bb542aabc7aaf96a78f12cf1d5beab9fa50d8353b0ca80f433c077b5c4e30855173dfb5"}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x5a8, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) 10:25:27 executing program 4 (fault-call:2 fault-nth:76): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1356.526194][ T7257] usb 3-1: USB disconnect, device number 12 [ 1356.532824][T29681] usb 6-1: 0:2 : does not exist [ 1356.558331][ T2608] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1356.563569][T19584] FAULT_INJECTION: forcing a failure. [ 1356.563569][T19584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.571186][T29681] usb 6-1: USB disconnect, device number 61 [ 1356.579896][T19584] CPU: 1 PID: 19584 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1356.594357][T19584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.594379][T19584] Call Trace: [ 1356.594387][T19584] dump_stack+0x143/0x1db [ 1356.594417][T19584] should_fail.cold+0x5/0xa [ 1356.594447][T19584] _copy_from_user+0x2c/0x180 [ 1356.594476][T19584] input_event_from_user+0x131/0x3a0 [ 1356.594501][T19584] ? input_event_to_user+0x3a0/0x3a0 [ 1356.594526][T19584] evdev_write+0x356/0x760 [ 1356.594551][T19584] ? evdev_read+0xe40/0xe40 [ 1356.594575][T19584] ? security_file_permission+0x248/0x560 [ 1356.594606][T19584] ? evdev_read+0xe40/0xe40 [ 1356.594630][T19584] vfs_write+0x28e/0x9e0 [ 1356.594657][T19584] ksys_write+0x1ee/0x250 [ 1356.594683][T19584] ? __ia32_sys_read+0xb0/0xb0 [ 1356.594709][T19584] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1356.594742][T19584] ? syscall_enter_from_user_mode+0x27/0x70 [ 1356.594773][T19584] do_syscall_64+0x3a/0xb0 [ 1356.594817][T19584] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1356.594848][T19584] RIP: 0033:0x4665d9 [ 1356.594867][T19584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1356.594893][T19584] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1356.594919][T19584] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1356.594936][T19584] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1356.594952][T19584] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1356.594968][T19584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1356.594984][T19584] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1356.658011][ T7] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1356.724886][T19493] udc-core: couldn't find an available UDC or it's busy [ 1356.828258][T19493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1356.832692][T19493] udc-core: couldn't find an available UDC or it's busy [ 1356.843737][T19493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1356.854722][T19493] udc-core: couldn't find an available UDC or it's busy [ 1356.854747][T19493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1356.855738][T19493] udc-core: couldn't find an available UDC or it's busy [ 1356.877318][T19493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1356.889640][T19493] udc-core: couldn't find an available UDC or it's busy [ 1356.897000][T19493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1356.916731][ T2105] usb 4-1: USB disconnect, device number 30 [ 1356.923389][ T2608] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1356.938374][ T2105] usb 4-1: ath9k_htc: USB layer deinitialized [ 1357.136736][T29681] usb 2-1: USB disconnect, device number 86 [ 1357.147846][ T7257] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1357.467850][ T7257] usb 3-1: too many configurations: 186, using maximum allowed: 8 10:25:28 executing program 4 (fault-call:2 fault-nth:77): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:25:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab537c81472d6dbb997c8100"}) r1 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x7f66bc8e0b0d8d, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001000), 0x0, 0x200c00) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001040)={0xfe, 0x20, 0x9, 0x9, "d1d6ee92887c47af7ff3954060af0d34f1cafb8b53675a58f48195291a4e8e5f"}) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1cf) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000280)={0x0, 0xf1, &(0x7f0000000700)="1dfcf12cd712447e492478674407d968937eabda1ea6ecd6b1d95c37ec2288b49deaef8f8087d7781a36e811ec93e3e96f181c517f665ec49332b25536ecb168d3f81a959ea2cbb9705949678594f09314a9041972f5b29301dc06879ec7001ba80e48b3ca9c00a72d804b733175cfa6378489fd084854452b6e86bc2d9c3770e0a8e417eb36fbba59549b8fb7306a84d9f15068474c4dd1b8212437ebe1e47bb4b0467ca95611cdb9ac9be266328b43774ed1a11a94f30d58b4cd08b6352829f54b7e847800c70e5a4cdec0a585a68f74571db7d9ccac4a9c3be9dd5535e499087b914d54f3a900f7e7c887d7d151a0e5"}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000000c0)={0xa}, 0x5e, &(0x7f0000000880)=ANY=[@ANYBLOB="2d3e6280c5acd37506000000a0c67f784f08cbf66cc21dc244173a4475e429bbf14839e88cf562957b3ecaa1919115a52a5e7d7b37a9de11384f5890691277b6be0169e1871fa95f1c8f8104e013a748c3b45df0b6a4e486a7b6c60441de2bf997d059a3c94ecdc270ba6b7d96aecf64ce04cba715590f4290a2321b745b91d455b7ba313d61a241f682158487fb3c3a5ba79ef64e3a0f79fb1953b368ac9350d00aa6443e1f7560955d3868a0852f9c059d3c43", @ANYRES32, @ANYRESOCT], 0x1555555555555802, [{0x0, &(0x7f00000002c0)=@string={0x0, 0x3, "1a11a31a2e8d47566ef3d9111367c3da8affd7fbea51c18b5ba58d7dc5bec1960f01870fb4a69d81fdad237568ef84a19cde9cb9d0082f4b67ae7fe151c1e7fbb778d8fb703a6d6933f1664df492bcbe5942408b47a67941dbe03d7414a63a287f2a5f2b8f2e2706d0deaf73881bb4dfa708805890b47a467d9201c0ccf5d8c275ece56e5b924c01640f8febf3285db17910a3f738541f1982b15b0ffdbc3f"}}, {0x0, &(0x7f0000000400)}, {0x0, &(0x7f0000000800)}]}) r3 = syz_open_dev$evdev(&(0x7f0000000ec0), 0x8, 0x8600) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000f00)=""/255) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x7, 0x1a, 0x0, 0x0, "7bee12797a79945ceeab479a3fac6a782239a3e4482063a24758c024a50bf063"}) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000001080)=""/51) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xb018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xcaa}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xe0}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x0, 0x3, 0x5}, 0xc7, &(0x7f0000000540)=ANY=[@ANYBLOB="8c100022581befc1a4f8c5ac877bf2910c0f7be039ff7e0004000000000000e29c20addeb0d32a866b88c05bafbdbd2e5d59b9c7d0bcd2284da932a475c8af4412354a35837a8004b2fa04c072a9d193eb47c8913c17aee1a618ef786327db638d502b46e1551392c9580b2a99ba29c953b33b8dd5e78c5a8dd284fab702d00db0ffa3cdf1fbab8e080a85d50b100100040000810080030c100a00e00000000f0011f50b10010c0000000701000614100400200bc41bd9505c5f77404cfbfb358e320000000000"], 0x2, [{0x41, &(0x7f0000000640)=@string={0x41, 0x3, "8a944a51dd52aa3fca7119cdfea03f05d1d3b537380551667737d7f7614601e419d6ca13ef5a649959ed1b43769058460da0abb85d730655713f60635d9ffe"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "13111e4c", {0x3, 0x103, 0x0, 0x40}}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x4004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0xeb3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x5, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x40, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x7, 0x1, 0x0, 0xff, 0xb0}, 0x5, &(0x7f0000000a00)={0x5, 0xf, 0x5}, 0xa, [{0x39, &(0x7f0000000ac0)=ANY=[@ANYBLOB="39032db8e9b6dc51433b9c1b8e9b1ddbcb141d863751c9c11f69e58604eecd6b791b21f37cb8e0c755d90178040f7c82182b021588b347401f"]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x100a}}, {0x1b, &(0x7f0000000b40)=@string={0x1b, 0x3, "3cb2bf2436eb37dd353956805e620ac789080f1ceb74a1a395"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x402}}, {0xa9, &(0x7f0000000bc0)=@string={0xa9, 0x3, "3696da3c5181f8b3ef4c5518127d7c2ba0f0d6bde9c09c5eb70db8b8fbf270c8a769bf541cd19106664685caefea5e79b5e0e0fe439f45c8a38789ad13fe5a169e85d628aee2cd4f1269ed1768e368a73b692fdada8148c340fa1300a9626fb2baa21b160e300589141f48332d55880e39a20f3681bf8d1f357d4316046375e7faa9608c52cebcb5de05dc964a3f0ac76254c2834f7a3533b2af9425084098de286fa840c11672"}}, {0x7d, &(0x7f0000000c80)=@string={0x7d, 0x3, "f251d20d9d5b6f40eeb2a315a5709a488ce1d06a7e210e5cdd790365534749fb49a309033c443a06b44038606a256a439557c65360fa6b21c18154c4e933a2c3d5d1c8963ad204ec5e6ce46bd50f090fe64c1487e475876499eeded95fa2ad626dc70a58a231ef0f9a2dad4e033678d174301415a40ef499d76819"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x3401}}, {0x1e, &(0x7f0000000d40)=@string={0x1e, 0x3, "3eaf6c1e86a34e76e3f5cc843ed5ea0a3dad9c39af4e78aa9340fc3a"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 10:25:28 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2078, 0x10040) syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x100) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x4a, 0x6, 0x80, 0xffff, "4eee11a4696af0332f8ff83a05e625e84c560d2f7c0ca7c79658a37b50fde460"}) r2 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902410001010000000904000012020600000b24060000da467439a76905240000000d240f0103f8a000000000000009058202000200000009050302", @ANYRESHEX], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x6d, 0x5a, 0x1, 0x2, 0x7fffffff, 0x4}) [ 1357.687800][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1357.697054][T19622] FAULT_INJECTION: forcing a failure. [ 1357.697054][T19622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1357.697151][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.710477][T19622] CPU: 1 PID: 19622 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1357.718628][ T7] usb 1-1: Product: syz [ 1357.727386][T19622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.727411][T19622] Call Trace: [ 1357.727423][T19622] dump_stack+0x143/0x1db [ 1357.727453][T19622] should_fail.cold+0x5/0xa [ 1357.727480][T19622] _copy_from_user+0x2c/0x180 [ 1357.731653][ T7] usb 1-1: Manufacturer: syz [ 1357.742223][T19622] input_event_from_user+0x131/0x3a0 [ 1357.742276][T19622] ? input_event_to_user+0x3a0/0x3a0 [ 1357.742299][T19622] evdev_write+0x356/0x760 [ 1357.745797][ T7] usb 1-1: SerialNumber: syz [ 1357.750119][T19622] ? evdev_read+0xe40/0xe40 [ 1357.750157][T19622] ? security_file_permission+0x248/0x560 [ 1357.750188][T19622] ? evdev_read+0xe40/0xe40 [ 1357.750209][T19622] vfs_write+0x28e/0x9e0 [ 1357.750233][T19622] ksys_write+0x1ee/0x250 [ 1357.750258][T19622] ? __ia32_sys_read+0xb0/0xb0 [ 1357.814910][T19622] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1357.814959][T19622] ? syscall_enter_from_user_mode+0x27/0x70 [ 1357.814991][T19622] do_syscall_64+0x3a/0xb0 [ 1357.815016][T19622] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1357.815045][T19622] RIP: 0033:0x4665d9 [ 1357.815065][T19622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1357.815090][T19622] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1357.815116][T19622] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1357.815133][T19622] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1357.815148][T19622] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1357.815165][T19622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1357.815181][T19622] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1357.838433][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:25:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000040)={0x1, 0xd0, &(0x7f0000000200)="d1823502ca0b42a9177c8ebca32587d7d194e5241de13b73532661bea4462d42890172693bc441c2d887b4f1e20f21a9d656e35a8fc2156c9882a7a25785e9b225ed6e35f4741e9896c71fc3e6304c60ff65e9dce3551bed0faac34a7ab31526daf336c412759feab5edb78409d30b439aea967d7fbe595cda5f2a31ae1f824223b32791c7c258d73374a076a3ba3fcb97de58d2120f9dd9411928389cd6cf8c7b63d192c86b5a54c3ce73b53e48937b1814105ec232c69b23bb058e2955b844aa646759db66d06446781a7f3f0b967f"}) syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x10000) 10:25:29 executing program 4 (fault-call:2 fault-nth:78): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1357.955493][ T32] usb 1-1: USB disconnect, device number 60 [ 1357.972119][ T7] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1357.977532][ T17] usb 2-1: Service connection timeout for: 257 [ 1357.987681][ T17] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1357.997873][ T2105] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1358.008252][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1358.025985][ T17] ath9k_htc: Failed to initialize the device [ 1358.048005][T29681] usb 2-1: ath9k_htc: USB layer deinitialized [ 1358.076678][T19647] FAULT_INJECTION: forcing a failure. [ 1358.076678][T19647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.090838][T19647] CPU: 0 PID: 19647 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1358.099653][T19647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.109752][T19647] Call Trace: [ 1358.113117][T19647] dump_stack+0x143/0x1db [ 1358.117515][T19647] should_fail.cold+0x5/0xa [ 1358.122115][T19647] _copy_from_user+0x2c/0x180 [ 1358.126853][T19647] input_event_from_user+0x131/0x3a0 [ 1358.132206][T19647] ? input_event_to_user+0x3a0/0x3a0 [ 1358.137598][T19647] evdev_write+0x356/0x760 [ 1358.142337][T19647] ? evdev_read+0xe40/0xe40 [ 1358.146897][T19647] ? security_file_permission+0x248/0x560 [ 1358.152954][T19647] ? evdev_read+0xe40/0xe40 [ 1358.157499][T19647] vfs_write+0x28e/0x9e0 [ 1358.161993][T19647] ksys_write+0x1ee/0x250 [ 1358.166402][T19647] ? __ia32_sys_read+0xb0/0xb0 [ 1358.171214][T19647] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1358.177243][T19647] ? syscall_enter_from_user_mode+0x27/0x70 [ 1358.183302][T19647] do_syscall_64+0x3a/0xb0 [ 1358.187739][T19647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1358.193696][T19647] RIP: 0033:0x4665d9 [ 1358.197644][T19647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1358.217327][T19647] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:29 executing program 4 (fault-call:2 fault-nth:79): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1358.226040][T19647] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1358.234562][T19647] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1358.242644][T19647] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1358.251413][T19647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1358.259654][T19647] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1358.267882][ T2608] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1358.312258][T19654] FAULT_INJECTION: forcing a failure. [ 1358.312258][T19654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.325778][T19654] CPU: 0 PID: 19654 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1358.335007][T19654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.345502][T19654] Call Trace: [ 1358.349052][T19654] dump_stack+0x143/0x1db [ 1358.353398][T19654] should_fail.cold+0x5/0xa [ 1358.358278][T19654] _copy_from_user+0x2c/0x180 [ 1358.363223][T19654] input_event_from_user+0x131/0x3a0 [ 1358.368698][T19654] ? input_event_to_user+0x3a0/0x3a0 [ 1358.374004][T19654] evdev_write+0x356/0x760 [ 1358.378471][T19654] ? evdev_read+0xe40/0xe40 [ 1358.382994][T19654] ? security_file_permission+0x248/0x560 [ 1358.388859][T19654] ? evdev_read+0xe40/0xe40 [ 1358.393443][T19654] vfs_write+0x28e/0x9e0 [ 1358.397822][T19654] ksys_write+0x1ee/0x250 [ 1358.402522][T19654] ? __ia32_sys_read+0xb0/0xb0 [ 1358.407746][T19654] ? syscall_enter_from_user_mode+0x27/0x70 [ 1358.414209][T19654] ? syscall_enter_from_user_mode+0x31/0x70 [ 1358.420418][T19654] do_syscall_64+0x3a/0xb0 [ 1358.425539][T19654] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1358.431453][T19654] RIP: 0033:0x4665d9 [ 1358.435498][T19654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:25:29 executing program 4 (fault-call:2 fault-nth:80): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1358.456114][T19654] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1358.464746][T19654] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1358.472894][T19654] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1358.481198][T19654] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1358.489565][T19654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1358.497734][T19654] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1358.544066][T19656] FAULT_INJECTION: forcing a failure. [ 1358.544066][T19656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.557748][T19656] CPU: 0 PID: 19656 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1358.566709][T19656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.578584][T19656] Call Trace: [ 1358.582039][T19656] dump_stack+0x143/0x1db [ 1358.586408][T19656] should_fail.cold+0x5/0xa [ 1358.591253][T19656] _copy_from_user+0x2c/0x180 [ 1358.596126][T19656] input_event_from_user+0x131/0x3a0 [ 1358.601430][T19656] ? input_event_to_user+0x3a0/0x3a0 [ 1358.606760][T19656] evdev_write+0x356/0x760 [ 1358.611197][T19656] ? evdev_read+0xe40/0xe40 [ 1358.616150][T19656] ? security_file_permission+0x248/0x560 [ 1358.621919][T19656] ? evdev_read+0xe40/0xe40 [ 1358.626525][T19656] vfs_write+0x28e/0x9e0 [ 1358.630986][T19656] ksys_write+0x1ee/0x250 [ 1358.635591][T19656] ? __ia32_sys_read+0xb0/0xb0 [ 1358.640662][T19656] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1358.646783][T19656] ? syscall_enter_from_user_mode+0x27/0x70 [ 1358.652847][T19656] do_syscall_64+0x3a/0xb0 [ 1358.657314][T19656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1358.663392][T19656] RIP: 0033:0x4665d9 [ 1358.667442][T19656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:25:29 executing program 4 (fault-call:2 fault-nth:81): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1358.687679][T19656] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1358.696460][T19656] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1358.704628][T19656] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1358.712719][T19656] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1358.720787][T19656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1358.728905][T19656] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1358.768179][ T2105] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1358.778359][T19658] FAULT_INJECTION: forcing a failure. [ 1358.778359][T19658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.792863][T19658] CPU: 0 PID: 19658 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1358.801671][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.811878][T19658] Call Trace: [ 1358.815433][T19658] dump_stack+0x143/0x1db [ 1358.819902][T19658] should_fail.cold+0x5/0xa [ 1358.824539][T19658] _copy_from_user+0x2c/0x180 [ 1358.829330][T19658] input_event_from_user+0x131/0x3a0 [ 1358.834669][T19658] ? input_event_to_user+0x3a0/0x3a0 [ 1358.840108][T19658] evdev_write+0x356/0x760 [ 1358.844598][T19658] ? evdev_read+0xe40/0xe40 [ 1358.849124][T19658] ? security_file_permission+0x248/0x560 [ 1358.854862][T19658] ? evdev_read+0xe40/0xe40 [ 1358.859376][T19658] vfs_write+0x28e/0x9e0 [ 1358.863658][T19658] ksys_write+0x1ee/0x250 [ 1358.868014][T19658] ? __ia32_sys_read+0xb0/0xb0 [ 1358.872832][T19658] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1358.878961][T19658] ? syscall_enter_from_user_mode+0x27/0x70 [ 1358.885122][T19658] do_syscall_64+0x3a/0xb0 [ 1358.889557][T19658] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1358.895502][T19658] RIP: 0033:0x4665d9 10:25:30 executing program 4 (fault-call:2 fault-nth:82): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1358.899523][T19658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1358.919893][T19658] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1358.928528][T19658] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1358.936622][T19658] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1358.944748][T19658] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1358.952732][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1358.960842][T19658] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1359.005139][T19660] FAULT_INJECTION: forcing a failure. [ 1359.005139][T19660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.019138][T19660] CPU: 1 PID: 19660 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1359.028049][T19660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.038416][T19660] Call Trace: [ 1359.041755][T19660] dump_stack+0x143/0x1db [ 1359.046363][T19660] should_fail.cold+0x5/0xa [ 1359.050988][T19660] _copy_from_user+0x2c/0x180 [ 1359.055838][T19660] input_event_from_user+0x131/0x3a0 [ 1359.061269][T19660] ? input_event_to_user+0x3a0/0x3a0 [ 1359.066589][T19660] evdev_write+0x356/0x760 [ 1359.071244][T19660] ? evdev_read+0xe40/0xe40 [ 1359.076615][T19660] ? security_file_permission+0x248/0x560 [ 1359.082467][T19660] ? evdev_read+0xe40/0xe40 [ 1359.086993][T19660] vfs_write+0x28e/0x9e0 [ 1359.087844][ T2608] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 48 [ 1359.091277][T19660] ksys_write+0x1ee/0x250 [ 1359.091318][T19660] ? __ia32_sys_read+0xb0/0xb0 [ 1359.091349][T19660] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1359.101248][ T2608] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1359.105456][T19660] ? syscall_enter_from_user_mode+0x27/0x70 [ 1359.117505][T29681] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1359.129295][T19660] do_syscall_64+0x3a/0xb0 [ 1359.129345][T19660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1359.129377][T19660] RIP: 0033:0x4665d9 [ 1359.129397][T19660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.129421][T19660] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1359.129447][T19660] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1359.129463][T19660] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1359.129478][T19660] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.129493][T19660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1359.129509][T19660] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1359.130498][ T32] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1359.136302][ T7257] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1359.243348][ T7257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.251465][ T7257] usb 3-1: Product: syz [ 1359.255648][ T7257] usb 3-1: Manufacturer: syz [ 1359.260402][ T7257] usb 3-1: SerialNumber: syz [ 1359.298022][ T2608] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1359.307165][ T2608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1359.315254][ T2608] usb 6-1: SerialNumber: syz [ 1359.320734][ T7257] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1359.348335][T19621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1359.477566][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1359.569675][T19621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1359.576698][T29681] usb 2-1: too many configurations: 141, using maximum allowed: 8 10:25:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000580)={0x32, 0x1c, 0x9, 0x8, "98d2c48e818d7c9092951b33607dd2f7db6c71d415f3ca097fe3dba6ec57f5e6"}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000300)=ANY=[@ANYBLOB="1500004e7ad9fa692eba0b1487f9ff42882715e5369fcfe961c5ebfb630000e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088000100004eb70000000100004ef90000000100004eca0000000f00004e01dbc90e0fb3000000000000000000000100004ef10000000100004e2f00"]) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x3f, &(0x7f00000003c0)=@generic={0x2, 0x0, 0x37, "dc6ce069", "aec17554db02a6e0152dfe953b96f103aa2b2a36305baa997ca8910848bd83d96453947c24e846ffa94cbe7c95be0fb4233faa427dff8b"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x7d, &(0x7f00000000c0)=@generic={0x7, 0x2, 0x75, "aef143a3", "e316b02fe645582a4286aa25c5e621dc3c2e2886cf93f866173bfd639dff28b9fcb71057269eff50b346dc27a3f800351d3e37cd404ccba1edd6649f2bc6d08f0c0670bd80e3b68c87289549112096467aff5a3e570a55ad57b61efa9bc255cb8c08941bea88c26e33208ec8d84cf8c6221be759b8"}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0xcdd3d42c936ab55b, 0xd5, &(0x7f0000000200)="d39ba06f934515148bbc1cc781fa36affc35838ed0c70503497611e0efede8fed354e98673d0141a1f7fff10323c4f5bda1990e952b2ae5629ec85cf50201bad0e3cd0dffe97010514659fde3a4b4b74794296222b4ce8c48de91028d29f522b9721dcb11434a952145b4aabee99fa11fd62ac39fa43efcbab0b278f435199f355366a362697888a99c1cbe82fc17c89f5ac4b6ba714dc73888fdc720c94e80c382411b1dbfb27fce4ddc0f7a43ad0a16e1663f3d5846e4fc972432a86ec03602a741011d3d7240aa7b1e92e84d1bafcef81000802"}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x61, &(0x7f0000000500)=@generic={0x8, 0x0, 0x59, "1d960ef0", "97336931309fe2ff56a8639f7d2ad7d52ed6cd516ca46b1a995b07908788c6445263e1ddd0c2a9f2ce1694cdf06e2572cb914522448ee27c3da3069b80a40b4453cf03d75cebed06424b8a2917b6094ef564cfb401476ab479"}) 10:25:30 executing program 4 (fault-call:2 fault-nth:83): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1359.634965][T29987] usb 3-1: USB disconnect, device number 13 [ 1359.637568][ T7257] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1359.661269][T29987] usb 3-1: ath9k_htc: USB layer deinitialized [ 1359.700514][T19680] FAULT_INJECTION: forcing a failure. [ 1359.700514][T19680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.713839][T19680] CPU: 1 PID: 19680 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1359.722757][T19680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.732848][T19680] Call Trace: [ 1359.736149][T19680] dump_stack+0x143/0x1db [ 1359.740525][T19680] should_fail.cold+0x5/0xa [ 1359.745074][T19680] _copy_from_user+0x2c/0x180 [ 1359.749763][T19680] input_event_from_user+0x131/0x3a0 [ 1359.755071][T19680] ? input_event_to_user+0x3a0/0x3a0 [ 1359.760419][T19680] evdev_write+0x356/0x760 [ 1359.764879][T19680] ? evdev_read+0xe40/0xe40 [ 1359.769390][T19680] ? security_file_permission+0x248/0x560 [ 1359.775134][T19680] ? evdev_read+0xe40/0xe40 [ 1359.780036][T19680] vfs_write+0x28e/0x9e0 [ 1359.784289][T19680] ksys_write+0x1ee/0x250 [ 1359.788646][T19680] ? __ia32_sys_read+0xb0/0xb0 [ 1359.793438][T19680] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1359.799439][T19680] ? syscall_enter_from_user_mode+0x27/0x70 [ 1359.805497][T19680] do_syscall_64+0x3a/0xb0 [ 1359.810032][T19680] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1359.815977][T19680] RIP: 0033:0x4665d9 [ 1359.819885][T19680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1359.837633][ T2105] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1359.839598][T19680] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1359.839633][T19680] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1359.839652][T19680] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1359.848800][ T2105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.857105][T19680] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.865249][ T2105] usb 4-1: Product: syz [ 1359.873083][T19680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 10:25:31 executing program 4 (fault-call:2 fault-nth:84): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1359.873117][T19680] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1359.909793][ T2105] usb 4-1: Manufacturer: syz [ 1359.914463][ T2105] usb 4-1: SerialNumber: syz [ 1359.958345][ T2105] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1359.969392][T19687] FAULT_INJECTION: forcing a failure. [ 1359.969392][T19687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.982989][T19687] CPU: 1 PID: 19687 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1359.983026][T19687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.983043][T19687] Call Trace: [ 1359.983054][T19687] dump_stack+0x143/0x1db [ 1359.983084][T19687] should_fail.cold+0x5/0xa [ 1360.014086][T19687] _copy_from_user+0x2c/0x180 [ 1360.014128][T19687] input_event_from_user+0x131/0x3a0 [ 1360.014155][T19687] ? input_event_to_user+0x3a0/0x3a0 [ 1360.023169][ T2608] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1360.024133][T19687] evdev_write+0x356/0x760 [ 1360.045739][T19687] ? evdev_read+0xe40/0xe40 [ 1360.045775][T19687] ? security_file_permission+0x248/0x560 [ 1360.045807][T19687] ? evdev_read+0xe40/0xe40 [ 1360.061120][T19687] vfs_write+0x28e/0x9e0 [ 1360.061162][T19687] ksys_write+0x1ee/0x250 [ 1360.061190][T19687] ? __ia32_sys_read+0xb0/0xb0 [ 1360.061217][T19687] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1360.061250][T19687] ? syscall_enter_from_user_mode+0x27/0x70 [ 1360.061283][T19687] do_syscall_64+0x3a/0xb0 [ 1360.061307][T19687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1360.061339][T19687] RIP: 0033:0x4665d9 [ 1360.061359][T19687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1360.061386][T19687] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1360.061413][T19687] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1360.061429][T19687] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1360.061445][T19687] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.153050][T19687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.153076][T19687] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1360.228263][ T2608] usb 6-1: USB disconnect, device number 62 [ 1360.242746][ T2608] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 1360.407699][T29987] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1360.477708][T29681] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1360.486797][T29681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.495020][T29681] usb 2-1: Product: syz [ 1360.499378][T29681] usb 2-1: Manufacturer: syz [ 1360.504141][T29681] usb 2-1: SerialNumber: syz [ 1360.548590][T29681] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1360.597723][ T2105] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:25:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1360.678887][ T2608] usb 4-1: USB disconnect, device number 31 [ 1360.718505][ T7235] usb 2-1: USB disconnect, device number 87 10:25:31 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x101201) syz_open_dev$hidraw(&(0x7f0000000040), 0xb3a, 0x4200) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000000)) [ 1360.728134][T29987] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1360.737826][T29681] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1360.751688][ T7235] usb 2-1: ath9k_htc: USB layer deinitialized 10:25:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2078, 0x10040) syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x100) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x4a, 0x6, 0x80, 0xffff, "4eee11a4696af0332f8ff83a05e625e84c560d2f7c0ca7c79658a37b50fde460"}) r2 = syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902410001010000000904000012020600000b24060000da467439a76905240000000d240f0103f8a000000000000009058202000200000009050302", @ANYRESHEX], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x6d, 0x5a, 0x1, 0x2, 0x7fffffff, 0x4}) [ 1360.778137][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1360.787311][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.795578][ T32] usb 1-1: Product: syz [ 1360.799974][ T32] usb 1-1: Manufacturer: syz [ 1360.804600][ T32] usb 1-1: SerialNumber: syz [ 1360.918769][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:25:32 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000280)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5ebfb638105e100002a00004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff200000100404ecc0000000100004ef90000000100004eca0000000100004e00000000010000ea454ef10000000100004e2f0000000100004e92000000"]) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xba, &(0x7f0000000340)=@generic={0x2, 0x0, 0xb2, "6e63b499", "d0f4975bb1a2b951b199b1f3472c32c72f3d5adbb26379c3681d7ed21e10716adda4a36517d004abc2c6cd9088d6d3b7c70c0d3c688bdc1c0184746893a01d3f0295b3e601b1fa39f47515f24eea3e8de897a1de9b4ef8b84261da1782c4b274e55c905e35d0d3b91377f25ed01b26843ce2381b5a91b055007e4a9a0cfdf22fcad7c1924fc232f28a676a601e768480cf99f21e31cc9c4964b08648af9d18bbb933da472e03301b88c67b286864372978c6"}) syz_usb_connect_ath9k(0x3, 0x10d7cfcb, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "394bcb71", {0x1, 0x4, 0x3a73, 0x1, 0x5}}) 10:25:32 executing program 4 (fault-call:2 fault-nth:85): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:32 executing program 1: ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000200)=""/66) r0 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0xc43e2) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0xfff7ffffffffeffe, 0x521742) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) read$hidraw(r1, &(0x7f00000003c0)=""/129, 0x81) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x7, 0x5a5742) r3 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffff9, 0x420000) write$hidraw(r3, &(0x7f0000000340)="29b184e829f04c4fbbeee1776743e4791f06287be1da89f3632683d1b65eb4e892a5172a1864998ca241a8f260eccaf2f099de69e04f489c486d68c2f92c5d7443262b87dc9654590aa2f4a98e1821e76f3c6354e02ba17b09ee0750f526ac3dd5d9d71bf04c925fb3162b6869cb6301", 0x70) ioctl$HIDIOCGRAWNAME(r2, 0x40086602, &(0x7f0000000080)) write$hidraw(r1, &(0x7f0000000000)="03", 0xfd50) syz_open_dev$hidraw(&(0x7f0000000480), 0x60000000000002, 0x509401) r4 = syz_open_dev$hidraw(&(0x7f0000000040), 0xc418825, 0x200) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x5, 0x440) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f0000000500)) write$hidraw(r3, &(0x7f0000000540)="b6bbe0a5a5bed8eab26c7bb7d2627366c3486b80ea5ca10767759e3a29999e07ba68313f4ba361ea0d2acad99bec36bee069e12d579042879ba18ed63092b640a9f4fc7a89c48045f1ebbba483197fc851e01b26fc9792ce6d649b", 0x5b) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f00000000c0)) read$hidraw(r4, &(0x7f0000000280)=""/117, 0x75) write$hidraw(r0, &(0x7f0000000000)="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", 0x300000) [ 1361.036847][ T17] usb 1-1: USB disconnect, device number 61 [ 1361.057115][ T32] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1361.069912][ T17] usb 1-1: ath9k_htc: USB layer deinitialized [ 1361.108183][T19758] FAULT_INJECTION: forcing a failure. [ 1361.108183][T19758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.121429][T19758] CPU: 0 PID: 19758 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1361.130396][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.140491][T19758] Call Trace: [ 1361.143810][T19758] dump_stack+0x143/0x1db [ 1361.148171][T19758] should_fail.cold+0x5/0xa [ 1361.152705][T19758] _copy_from_user+0x2c/0x180 [ 1361.157413][T19758] input_event_from_user+0x131/0x3a0 [ 1361.162733][T19758] ? input_event_to_user+0x3a0/0x3a0 [ 1361.168092][T19758] evdev_write+0x356/0x760 [ 1361.172599][T19758] ? evdev_read+0xe40/0xe40 [ 1361.177127][T19758] ? security_file_permission+0x248/0x560 [ 1361.182883][T19758] ? evdev_read+0xe40/0xe40 [ 1361.187413][T19758] vfs_write+0x28e/0x9e0 [ 1361.191721][T19758] ksys_write+0x1ee/0x250 [ 1361.196090][T19758] ? __ia32_sys_read+0xb0/0xb0 [ 1361.200879][T19758] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1361.206906][T19758] ? syscall_enter_from_user_mode+0x27/0x70 [ 1361.212869][T19758] do_syscall_64+0x3a/0xb0 [ 1361.217400][T19758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1361.223334][T19758] RIP: 0033:0x4665d9 [ 1361.227248][T19758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.247155][T19758] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1361.255607][T19758] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1361.263866][T19758] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1361.268194][ T33] audit: type=1800 audit(1624530332.242:3139): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=48C7C060 dev="sda1" ino=14222 res=0 errno=0 [ 1361.272032][T19758] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 10:25:32 executing program 4 (fault-call:2 fault-nth:86): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1361.272055][T19758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.272072][T19758] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1361.347539][ T5] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1361.348246][T19763] FAULT_INJECTION: forcing a failure. [ 1361.348246][T19763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.368729][T19763] CPU: 1 PID: 19763 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1361.368766][T19763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.368780][T19763] Call Trace: [ 1361.368786][T19763] dump_stack+0x143/0x1db [ 1361.368808][T19763] should_fail.cold+0x5/0xa [ 1361.368828][T19763] _copy_from_user+0x2c/0x180 [ 1361.368855][T19763] input_event_from_user+0x131/0x3a0 [ 1361.368881][T19763] ? input_event_to_user+0x3a0/0x3a0 [ 1361.368906][T19763] evdev_write+0x356/0x760 [ 1361.368932][T19763] ? evdev_read+0xe40/0xe40 [ 1361.368958][T19763] ? security_file_permission+0x248/0x560 [ 1361.369010][T19763] ? evdev_read+0xe40/0xe40 [ 1361.369035][T19763] vfs_write+0x28e/0x9e0 [ 1361.369063][T19763] ksys_write+0x1ee/0x250 [ 1361.369082][T19763] ? __ia32_sys_read+0xb0/0xb0 [ 1361.369097][T19763] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1361.369119][T19763] ? syscall_enter_from_user_mode+0x27/0x70 [ 1361.369140][T19763] do_syscall_64+0x3a/0xb0 [ 1361.369155][T19763] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1361.369173][T19763] RIP: 0033:0x4665d9 [ 1361.369186][T19763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.369201][T19763] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:32 executing program 4 (fault-call:2 fault-nth:87): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1361.369219][T19763] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1361.369230][T19763] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1361.369239][T19763] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.369249][T19763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.369259][T19763] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1361.581037][T19765] FAULT_INJECTION: forcing a failure. [ 1361.581037][T19765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.594153][T19765] CPU: 0 PID: 19765 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1361.602977][T19765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.613138][T19765] Call Trace: [ 1361.616441][T19765] dump_stack+0x143/0x1db [ 1361.620869][T19765] should_fail.cold+0x5/0xa [ 1361.625419][T19765] _copy_from_user+0x2c/0x180 [ 1361.630112][T19765] input_event_from_user+0x131/0x3a0 [ 1361.635426][T19765] ? input_event_to_user+0x3a0/0x3a0 [ 1361.640903][T19765] evdev_write+0x356/0x760 [ 1361.645354][T19765] ? evdev_read+0xe40/0xe40 [ 1361.649960][T19765] ? security_file_permission+0x248/0x560 [ 1361.655730][T19765] ? evdev_read+0xe40/0xe40 [ 1361.660237][T19765] vfs_write+0x28e/0x9e0 [ 1361.664600][T19765] ksys_write+0x1ee/0x250 [ 1361.669060][T19765] ? __ia32_sys_read+0xb0/0xb0 [ 1361.673833][T19765] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1361.679829][T19765] ? syscall_enter_from_user_mode+0x27/0x70 [ 1361.685748][T19765] do_syscall_64+0x3a/0xb0 [ 1361.690171][T19765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1361.696072][T19765] RIP: 0033:0x4665d9 [ 1361.700469][T19765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.720185][T19765] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1361.728601][T19765] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1361.736762][T19765] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1361.744836][T19765] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.752916][T19765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.760885][T19765] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:25:32 executing program 4 (fault-call:2 fault-nth:88): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1361.777428][ T2105] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1361.784430][ T2105] ath9k_htc: Failed to initialize the device [ 1361.791768][ T2608] usb 4-1: ath9k_htc: USB layer deinitialized [ 1361.853201][T19773] FAULT_INJECTION: forcing a failure. [ 1361.853201][T19773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.866681][T19773] CPU: 1 PID: 19773 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1361.875548][T19773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.885622][T19773] Call Trace: [ 1361.887592][ T5] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 48 [ 1361.888924][T19773] dump_stack+0x143/0x1db [ 1361.888970][T19773] should_fail.cold+0x5/0xa [ 1361.899030][ T5] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1361.903359][T19773] _copy_from_user+0x2c/0x180 [ 1361.903404][T19773] input_event_from_user+0x131/0x3a0 [ 1361.932753][T19773] ? input_event_to_user+0x3a0/0x3a0 [ 1361.938126][T19773] evdev_write+0x356/0x760 [ 1361.942554][T19773] ? evdev_read+0xe40/0xe40 [ 1361.947077][T19773] ? security_file_permission+0x248/0x560 [ 1361.952818][T19773] ? evdev_read+0xe40/0xe40 [ 1361.957322][T19773] vfs_write+0x28e/0x9e0 [ 1361.961584][T19773] ksys_write+0x1ee/0x250 [ 1361.966065][T19773] ? __ia32_sys_read+0xb0/0xb0 [ 1361.971065][T19773] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1361.977060][T19773] ? syscall_enter_from_user_mode+0x27/0x70 [ 1361.983051][T19773] do_syscall_64+0x3a/0xb0 [ 1361.987468][T19773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1361.987810][ T5] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1361.993479][T19773] RIP: 0033:0x4665d9 [ 1361.993503][T19773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.993530][T19773] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1361.993560][T19773] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1362.002757][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1362.006663][T19773] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1362.026547][ T5] usb 6-1: SerialNumber: syz [ 1362.034826][T19773] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.034855][T19773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.034869][T19773] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1362.035100][ T17] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1362.059612][T19738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1362.187501][ T2608] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1362.297605][T29987] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1362.306695][T29987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.314766][T29987] usb 3-1: Product: syz [ 1362.319173][T29987] usb 3-1: Manufacturer: syz [ 1362.323956][T29987] usb 3-1: SerialNumber: syz [ 1362.337197][T19738] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1362.407669][ T17] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1362.416251][T29987] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1362.477704][ T2608] usb 4-1: too many configurations: 221, using maximum allowed: 8 10:25:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x7, 0x3}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f0000001240)={0x0, 0x0, 0x15, &(0x7f0000000640)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, [0xf]}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x33d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0x5}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000780)=@generic={0x1, 0x2, 0x0, "06bc4904"}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x55, &(0x7f0000001040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x6, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0xc1, 0x0, 0x2, 0x6, 0x0, 0xfe, {{0x6, 0x24, 0x6, 0x0, 0x0, '\b'}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0xfffc, 0x66}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x0, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x9, 0x16}}, {{0x9, 0x5, 0x3, 0x2, 0x428, 0x9, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x0, 0x1f, 0x0, 0x1}, 0x24, &(0x7f0000000fc0)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x5e47, 0xf00f, 0x0, [0x0, 0xc0, 0xffff3f, 0xff3f00]}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000010c0)=@lang_id={0x4}}, {0x6, &(0x7f0000001100)=@string={0x6, 0x3, "949d857c"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 10:25:33 executing program 4 (fault-call:2 fault-nth:89): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:33 executing program 1: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x244, &(0x7f00000006c0)={[{0x95, 0x4e00, "35d4fdcbf22e8ca654c3e85c9f8d02dc1aea8787b593d015b24fd855867b37c70e3f90bc326f5f821132d54bcd70f78540e357edf13b9eadf2a3882069e71b233177150865aa403a12226b504941e6bf2cb57e4e3d711a464990ea6f8c3cd2f2169c961e412648aa1950e4e1ba9d932e0f0488dba60ea7975e181ca8806c831c701045f0e8a054d40a6d4fd053b19c9a2a1cfea2f1"}, {0xa9, 0x4e00, "42433f48d974a588755117409e15e68729124d15fa654fa4ae3a2156d6f2d6632fc9633671249bf4f717ecb0a78a51061e3c64829c23328b177d44a374b4579ccdabfca843dc2f7570ffc3c772db0477d50b09e0bdd7199bfc5242c749a5d53e10064157f7502749e298f10781859f19d27c46382f657e7ca046952322f7399a02ac4bc4e009339897b4fde0a0084127e723916df7f876a7c06ad5038f3166e47e97618e392fdc430a"}, {0xa9, 0x4e00, "c1a216d3c7afc3602a37d9cd7d1905519115091364b7a77b82398a18f17d0d77aa6d9d942e4de693e7de9b4e70060865478bdc80fffc922233c7982b65050cca3fce284c20e3e2911ccd8fe0a2b347663d1b0000000000f9dcf40db2e6c93b9c11c0ad071ef2c27126cde6eb4d64a9bb01424ce8ba9c4c998864c5c18228447c9aac558022db8e84c2a01698af8f3ddcff3cc4f720501cd43293e21454ba756ea4acbc7b031821a241"}, {0x41, 0x4e00, "657f27ef41df8a66a7a23e91b7bcbe5d0f89abbca978e17f25c4463f3b71c913a7a09a1cceb01cd31d4172e85a07134af7956503a8f7462c46b7fbeb6689cab095"}]}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000480)=@ready={0x0, 0x0, 0x8, "992d7e8a"}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8b, &(0x7f0000001040)=ANY=[@ANYBLOB="06020083cc060c0a07818e4502ec8baa1f432cf27ce38bf7f6b9a3161748510068487ce0be1e631805526ca68a718a46d346c2ae36dd8f5d2b6f7e213f439c0f095a2420310f23c97879c903923d48112313cc51e36c02bdb28b171c258375ebcd454837470ae33f2b820595ace722b144da1c4f2fca5a123f00c9179e5e6fceb936a6dd318bec1a600d527b556aaa60968b7a42d48b41087d0f216da5a07b3803533a5c9df433be953213e5f4ed3db0a4a72bcb29f0f665b742e584f9f75cf481d382588d68cabb13388f26aacb20541b4670fe35448f5ed57b11b1da0bf5bfb5406951750642e709d9470b89645fdc476dc40f366d21a879db02d734cbc85df10e316a87d69b333599b26cb2ef34b93707296631c3c560988924e115db712809973dbac1d97d6ab0a09f2261474b4c6fbde6394c2a905c63e650dfe3dc8e1b7625647edb43bda9baa9fc14e55ce03bd28fc5e974b4add0d1d70f70e6b0c71c66c9f035ffa68c37ad55e6e35462cfc0b47a384cec"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000280)=@conn_svc_rsp={0x0, 0x0, 0xa, "2dba30a9", {0x3, 0x107, 0x0, 0x81, 0x1, 0xff, 0x20}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x584, &(0x7f0000000a00)={[{0xc5, 0x4e00, "aa3738153b1b909d5fd5d141abc82a6b09e16effbb41cf62f2eb24090876b6c9595be3b2ac830b4b9a50683959551cc5c24372c5a1ff13f5c663ca46e4ea1a8b4adbbd99e40157d1bbb8a6030702a24ff1e5ac85c540850f82840f144e3485cd5ad4fbfa29e4f01d2c5f22aa2f02fe3da30810fd50ac26ff99097d3e3ced45b5c6eb1ff2ca82c58f3a4e5f986c711cd0ff068139ab0a223a6d3fe098b6ef976bbea762fcac994797ff8b9060bec5b7f6db8f451c40eef08f33e8e59de8bc8e6600ea6f9275"}, {0x1d, 0x4e00, "b643a4d34af2a8e84f73f294a3ffad3ff059196905d513785ddadfbb8c"}, {0x48d, 0x4e00, "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"}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200004e"]) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000300)=@conn_svc_rsp={0x0, 0x0, 0xa, "9e32dfb2", {0x3, 0x0, 0x0, 0x1e}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x50, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000340)=@conn_svc_rsp={0x0, 0x0, 0xa, "6059dcfa", {0x3, 0x100}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x88, &(0x7f00000004c0)=ANY=[@ANYBLOB="3a00004e01fbae839e93faeb8ebd9c33fc63992f36386b90feb44d131100179a36c38fd5c25cd43c9347842de8fde26f22d078ba53e054dcfc8e16ea937a00000000004e3b00004edb9f93ad645290643bbb8e9c6dbc427eb98463746fb1e53036ff928dcc3e3478728caf1d81258ec47fe6e3bc322d16228796c49a09cc8fa43dba090b7632b644ed6d9a3c0ad97c14f48e000000004e"]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000200)=@conn_svc_rsp={0x0, 0x0, 0xa, "15cdfbb8", {0x3, 0x105, 0x0, 0x2, 0x8000, 0x8, 0x7}}) syz_usb_connect_ath9k(0x3, 0x9d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x81, &(0x7f00000003c0)=ANY=[@ANYBLOB="080200793512561d2ecb43fcad7f55aed11f995c3f6ddfd6ef9bd725c2d7329560637ef72dea03b9a255dea27d1a6a5916a3b6b0a0ada3a9fc2c515a722cc6eb09cf4d4a4d01afe3d0e7baec12"]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1362.699847][ T8086] usb 3-1: USB disconnect, device number 14 [ 1362.710669][T29987] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1362.721395][ T8086] usb 3-1: ath9k_htc: USB layer deinitialized [ 1362.771819][T19793] FAULT_INJECTION: forcing a failure. [ 1362.771819][T19793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1362.785036][T19793] CPU: 1 PID: 19793 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1362.794187][T19793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.804448][T19793] Call Trace: [ 1362.807760][T19793] dump_stack+0x143/0x1db [ 1362.812132][T19793] should_fail.cold+0x5/0xa [ 1362.816682][T19793] _copy_from_user+0x2c/0x180 [ 1362.821423][T19793] input_event_from_user+0x131/0x3a0 [ 1362.826750][T19793] ? input_event_to_user+0x3a0/0x3a0 [ 1362.832080][T19793] evdev_write+0x356/0x760 [ 1362.836541][T19793] ? evdev_read+0xe40/0xe40 [ 1362.841275][T19793] ? security_file_permission+0x248/0x560 [ 1362.847143][T19793] ? evdev_read+0xe40/0xe40 [ 1362.852038][T19793] vfs_write+0x28e/0x9e0 [ 1362.856306][T19793] ksys_write+0x1ee/0x250 [ 1362.860838][T19793] ? __ia32_sys_read+0xb0/0xb0 [ 1362.865818][T19793] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1362.871974][T19793] ? syscall_enter_from_user_mode+0x27/0x70 [ 1362.877899][T19793] do_syscall_64+0x3a/0xb0 [ 1362.882337][T19793] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1362.888269][T19793] RIP: 0033:0x4665d9 [ 1362.892269][T19793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.911943][T19793] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1362.920646][T19793] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1362.928765][T19793] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1362.936932][T19793] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.945097][T19793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.953081][T19793] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1362.970742][ T5] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1363.147709][ T5] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1363.169445][ T7235] usb 6-1: USB disconnect, device number 63 [ 1363.176766][ T7235] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 1363.317524][ T8086] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1363.377554][ T17] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1363.386769][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.394842][ T17] usb 1-1: Product: syz [ 1363.399078][ T17] usb 1-1: Manufacturer: syz [ 1363.403701][ T17] usb 1-1: SerialNumber: syz [ 1363.448604][ T17] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1363.477899][ T5] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1363.597685][ T8086] usb 3-1: too many configurations: 221, using maximum allowed: 8 10:25:34 executing program 4 (fault-call:2 fault-nth:90): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) 10:25:34 executing program 5: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1c4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x10db42) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x6c4, 0x0) syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x2a300) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000003c0)=[0x8, 0x6]) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x5, 0x103003) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xffffffffffffffac, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x139c, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000380)=@ready={0x0, 0x0, 0x8, "d944e3ab", {0x1, 0xb593, 0x3, 0x2, 0x6}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="ad2d", 0x2) syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "071c706e", {0x3, 0x100, 0x0, 0x9}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0xfffffffffffffdda, 0x0, 0x0) [ 1363.707803][ T2608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1363.716981][ T2608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.725180][ T2608] usb 4-1: Product: syz [ 1363.729523][ T2608] usb 4-1: Manufacturer: syz [ 1363.734236][ T2608] usb 4-1: SerialNumber: syz [ 1363.768309][ T2608] usb 4-1: can't set config #1, error -71 [ 1363.783908][ T2608] usb 4-1: USB disconnect, device number 32 [ 1363.803906][T19839] FAULT_INJECTION: forcing a failure. [ 1363.803906][T19839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.817285][T19839] CPU: 1 PID: 19839 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1363.822390][ T33] audit: type=1800 audit(1624530334.912:3140): pid=19838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name=48C7C060 dev="sda1" ino=14066 res=0 errno=0 [ 1363.826110][T19839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.858832][T19839] Call Trace: [ 1363.862134][T19839] dump_stack+0x143/0x1db [ 1363.866514][T19839] should_fail.cold+0x5/0xa [ 1363.871042][T19839] _copy_from_user+0x2c/0x180 [ 1363.875746][T19839] input_event_from_user+0x131/0x3a0 [ 1363.881160][T19839] ? input_event_to_user+0x3a0/0x3a0 [ 1363.886548][T19839] evdev_write+0x356/0x760 [ 1363.890984][T19839] ? evdev_read+0xe40/0xe40 [ 1363.895503][T19839] ? security_file_permission+0x248/0x560 [ 1363.901249][T19839] ? evdev_read+0xe40/0xe40 [ 1363.905857][T19839] vfs_write+0x28e/0x9e0 [ 1363.910114][T19839] ksys_write+0x1ee/0x250 [ 1363.914455][T19839] ? __ia32_sys_read+0xb0/0xb0 [ 1363.919237][T19839] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1363.925238][T19839] ? syscall_enter_from_user_mode+0x27/0x70 [ 1363.931942][T19839] do_syscall_64+0x3a/0xb0 [ 1363.936382][T19839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1363.942332][T19839] RIP: 0033:0x4665d9 [ 1363.946239][T19839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1363.965870][T19839] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1363.974321][T19839] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1363.982495][T19839] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1363.990524][T19839] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.998511][T19839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1364.007166][T19839] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:25:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x16, 0x3e, &(0x7f0000000100)="24ac9f4969b731b8075eb87fbb04e71a392341fafbbd07fa4b7592cdcd2ce5d153ad0ed98df97a534f7010fb39921b8026d905c48faa267c66a43c7b01fd"}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000380)={0x11, 0x1000, &(0x7f0000001140)="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"}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x880) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x1f, 0x15, 0xcf38, 0x6, "5d69f5bceb3bc3ff0d37af96e76951e6691870c07f13402ad975c85d965581e6"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x80, 0x20400) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) 10:25:35 executing program 4 (fault-call:2 fault-nth:91): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1364.094498][ T32] usb 1-1: USB disconnect, device number 62 [ 1364.100659][ T17] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1364.123952][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1364.148174][T19851] FAULT_INJECTION: forcing a failure. [ 1364.148174][T19851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.162128][T19851] CPU: 1 PID: 19851 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1364.171114][T19851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.181200][T19851] Call Trace: [ 1364.184524][T19851] dump_stack+0x143/0x1db [ 1364.188910][T19851] should_fail.cold+0x5/0xa [ 1364.193466][T19851] _copy_from_user+0x2c/0x180 [ 1364.198297][T19851] input_event_from_user+0x131/0x3a0 [ 1364.203813][T19851] ? input_event_to_user+0x3a0/0x3a0 [ 1364.209141][T19851] evdev_write+0x356/0x760 [ 1364.213703][T19851] ? evdev_read+0xe40/0xe40 [ 1364.218252][T19851] ? security_file_permission+0x248/0x560 [ 1364.224036][T19851] ? evdev_read+0xe40/0xe40 [ 1364.228637][T19851] vfs_write+0x28e/0x9e0 [ 1364.232934][T19851] ksys_write+0x1ee/0x250 [ 1364.237312][T19851] ? __ia32_sys_read+0xb0/0xb0 [ 1364.242218][T19851] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1364.248346][T19851] ? syscall_enter_from_user_mode+0x27/0x70 [ 1364.254374][T19851] do_syscall_64+0x3a/0xb0 [ 1364.258838][T19851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1364.264891][T19851] RIP: 0033:0x4665d9 [ 1364.268822][T19851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.288557][T19851] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1364.297309][T19851] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1364.305703][T19851] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1364.313694][T19851] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.321778][T19851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1364.329795][T19851] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 10:25:35 executing program 4 (fault-call:2 fault-nth:92): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1364.349599][ T2105] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1364.382658][T19864] FAULT_INJECTION: forcing a failure. [ 1364.382658][T19864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.382697][T19864] CPU: 0 PID: 19864 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1364.382724][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.382739][T19864] Call Trace: [ 1364.382749][T19864] dump_stack+0x143/0x1db [ 1364.422850][T19864] should_fail.cold+0x5/0xa [ 1364.427382][T19864] _copy_from_user+0x2c/0x180 [ 1364.432118][T19864] input_event_from_user+0x131/0x3a0 [ 1364.437407][T19864] ? input_event_to_user+0x3a0/0x3a0 [ 1364.442714][T19864] evdev_write+0x356/0x760 [ 1364.447220][T19864] ? evdev_read+0xe40/0xe40 [ 1364.451750][T19864] ? security_file_permission+0x248/0x560 [ 1364.457526][T19864] ? evdev_read+0xe40/0xe40 [ 1364.462110][T19864] vfs_write+0x28e/0x9e0 [ 1364.466409][T19864] ksys_write+0x1ee/0x250 [ 1364.470743][T19864] ? __ia32_sys_read+0xb0/0xb0 [ 1364.475530][T19864] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1364.481670][T19864] ? syscall_enter_from_user_mode+0x27/0x70 [ 1364.488322][T19864] do_syscall_64+0x3a/0xb0 [ 1364.493588][T19864] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1364.499612][T19864] RIP: 0033:0x4665d9 [ 1364.503533][T19864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.524268][T19864] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1364.532783][T19864] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1364.540765][T19864] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 10:25:35 executing program 4 (fault-call:2 fault-nth:93): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1364.549024][T19864] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.557240][T19864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1364.565247][T19864] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1364.610280][T19866] FAULT_INJECTION: forcing a failure. [ 1364.610280][T19866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.623823][T19866] CPU: 1 PID: 19866 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1364.632622][T19866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.642809][T19866] Call Trace: [ 1364.646147][T19866] dump_stack+0x143/0x1db [ 1364.650627][T19866] should_fail.cold+0x5/0xa [ 1364.655180][T19866] _copy_from_user+0x2c/0x180 [ 1364.659907][T19866] input_event_from_user+0x131/0x3a0 [ 1364.665238][T19866] ? input_event_to_user+0x3a0/0x3a0 [ 1364.670569][T19866] evdev_write+0x356/0x760 [ 1364.675022][T19866] ? evdev_read+0xe40/0xe40 [ 1364.679556][T19866] ? security_file_permission+0x248/0x560 [ 1364.685314][T19866] ? evdev_read+0xe40/0xe40 [ 1364.689863][T19866] vfs_write+0x28e/0x9e0 [ 1364.694239][T19866] ksys_write+0x1ee/0x250 [ 1364.698782][T19866] ? __ia32_sys_read+0xb0/0xb0 [ 1364.703562][T19866] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1364.709574][T19866] ? syscall_enter_from_user_mode+0x27/0x70 [ 1364.715981][T19866] do_syscall_64+0x3a/0xb0 [ 1364.720429][T19866] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1364.726355][T19866] RIP: 0033:0x4665d9 [ 1364.730267][T19866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.750221][T19866] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:25:35 executing program 4 (fault-call:2 fault-nth:94): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1364.758852][T19866] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1364.766926][T19866] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1364.775276][T19866] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.783541][T19866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1364.791895][T19866] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1364.838378][T19868] FAULT_INJECTION: forcing a failure. [ 1364.838378][T19868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.852450][T19868] CPU: 1 PID: 19868 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1364.861626][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.871844][T19868] Call Trace: [ 1364.875166][T19868] dump_stack+0x143/0x1db [ 1364.879662][T19868] should_fail.cold+0x5/0xa [ 1364.884275][T19868] _copy_from_user+0x2c/0x180 [ 1364.888983][T19868] input_event_from_user+0x131/0x3a0 [ 1364.894723][T19868] ? input_event_to_user+0x3a0/0x3a0 [ 1364.900025][T19868] evdev_write+0x356/0x760 [ 1364.904973][T19868] ? evdev_read+0xe40/0xe40 [ 1364.909531][T19868] ? security_file_permission+0x248/0x560 [ 1364.915279][T19868] ? evdev_read+0xe40/0xe40 [ 1364.919827][T19868] vfs_write+0x28e/0x9e0 [ 1364.924334][T19868] ksys_write+0x1ee/0x250 [ 1364.928944][T19868] ? __ia32_sys_read+0xb0/0xb0 [ 1364.934001][T19868] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1364.941239][T19868] ? syscall_enter_from_user_mode+0x27/0x70 [ 1364.947205][T19868] do_syscall_64+0x3a/0xb0 [ 1364.951833][T19868] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1364.957739][T19868] RIP: 0033:0x4665d9 [ 1364.961770][T19868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.981400][T19868] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1364.990017][T19868] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1364.998105][T19868] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1365.006313][T19868] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.014722][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.022954][T19868] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1365.031253][ T32] usb 1-1: new high-speed USB device number 63 using dummy_hcd 10:25:36 executing program 4 (fault-call:2 fault-nth:95): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1365.038459][ T2608] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1365.078008][T19870] FAULT_INJECTION: forcing a failure. [ 1365.078008][T19870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.091374][T19870] CPU: 0 PID: 19870 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1365.100167][T19870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.110318][T19870] Call Trace: [ 1365.113734][T19870] dump_stack+0x143/0x1db [ 1365.118118][T19870] should_fail.cold+0x5/0xa [ 1365.122779][T19870] _copy_from_user+0x2c/0x180 [ 1365.127496][T19870] input_event_from_user+0x131/0x3a0 [ 1365.127565][ T8086] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1365.132852][T19870] ? input_event_to_user+0x3a0/0x3a0 [ 1365.132897][T19870] evdev_write+0x356/0x760 [ 1365.132927][T19870] ? evdev_read+0xe40/0xe40 [ 1365.132955][T19870] ? security_file_permission+0x248/0x560 [ 1365.142101][ T8086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.147385][T19870] ? evdev_read+0xe40/0xe40 [ 1365.147428][T19870] vfs_write+0x28e/0x9e0 [ 1365.147455][T19870] ksys_write+0x1ee/0x250 [ 1365.147480][T19870] ? __ia32_sys_read+0xb0/0xb0 [ 1365.152004][ T8086] usb 3-1: Product: syz [ 1365.156934][T19870] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1365.162919][ T8086] usb 3-1: Manufacturer: syz [ 1365.170792][T19870] ? syscall_enter_from_user_mode+0x27/0x70 [ 1365.170838][T19870] do_syscall_64+0x3a/0xb0 [ 1365.170864][T19870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1365.175366][ T8086] usb 3-1: SerialNumber: syz [ 1365.179601][T19870] RIP: 0033:0x4665d9 [ 1365.179633][T19870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1365.179655][T19870] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1365.179681][T19870] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1365.238869][ T8086] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1365.249523][T19870] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1365.249554][T19870] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.249570][T19870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.249584][T19870] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1365.297897][ T2105] usb 6-1: too many configurations: 186, using maximum allowed: 8 [ 1365.387601][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1365.447709][ T2608] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1365.477680][ T5] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1365.486808][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.495088][ T5] usb 2-1: Product: syz [ 1365.499505][ T5] usb 2-1: Manufacturer: syz [ 1365.504128][ T5] usb 2-1: SerialNumber: syz [ 1365.558922][ T5] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1365.763411][ T7235] usb 2-1: USB disconnect, device number 88 [ 1365.781863][ T5] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1365.793685][ T7235] usb 2-1: ath9k_htc: USB layer deinitialized 10:25:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x200000) ioctl$EVIOCGVERSION(r3, 0x400445a0, &(0x7f0000000200)=""/160) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x4, 0x1, 0x2, 0x7, 0x3, 0x6}) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x6) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0xfe, 0x0, 0x101, "ed105400000000003ec13e2000"}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x7c, &(0x7f0000000880)={[{0x15, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1ce864d"}, {0x23, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:25:36 executing program 4 (fault-call:2 fault-nth:96): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 10:25:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12da0288ae43ec40f109333300020000080109022400200000000009"], 0x0) [ 1365.821890][T29987] usb 3-1: USB disconnect, device number 15 [ 1365.843205][ T8086] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1365.871500][T29987] usb 3-1: ath9k_htc: USB layer deinitialized [ 1365.872422][T19892] FAULT_INJECTION: forcing a failure. [ 1365.872422][T19892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.891102][T19892] CPU: 0 PID: 19892 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1365.891134][T19892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.891148][T19892] Call Trace: [ 1365.891157][T19892] dump_stack+0x143/0x1db [ 1365.891186][T19892] should_fail.cold+0x5/0xa [ 1365.891215][T19892] _copy_from_user+0x2c/0x180 [ 1365.891243][T19892] input_event_from_user+0x131/0x3a0 [ 1365.891266][T19892] ? input_event_to_user+0x3a0/0x3a0 [ 1365.891290][T19892] evdev_write+0x356/0x760 [ 1365.891316][T19892] ? evdev_read+0xe40/0xe40 [ 1365.891343][T19892] ? security_file_permission+0x248/0x560 [ 1365.891375][T19892] ? evdev_read+0xe40/0xe40 [ 1365.891397][T19892] vfs_write+0x28e/0x9e0 [ 1365.891423][T19892] ksys_write+0x1ee/0x250 [ 1365.891449][T19892] ? __ia32_sys_read+0xb0/0xb0 [ 1365.891475][T19892] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1365.891507][T19892] ? syscall_enter_from_user_mode+0x27/0x70 [ 1365.891537][T19892] do_syscall_64+0x3a/0xb0 [ 1365.891562][T19892] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1365.891592][T19892] RIP: 0033:0x4665d9 [ 1365.891612][T19892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1365.891637][T19892] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1365.891665][T19892] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 10:25:37 executing program 4 (fault-call:2 fault-nth:97): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1365.891684][T19892] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1365.891703][T19892] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.891721][T19892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.891738][T19892] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1366.137859][T19907] FAULT_INJECTION: forcing a failure. [ 1366.137859][T19907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.151279][T19907] CPU: 0 PID: 19907 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1366.160626][T19907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.170813][T19907] Call Trace: [ 1366.174116][T19907] dump_stack+0x143/0x1db [ 1366.178461][T19907] should_fail.cold+0x5/0xa [ 1366.183125][T19907] _copy_from_user+0x2c/0x180 [ 1366.187604][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1366.187813][T19907] input_event_from_user+0x131/0x3a0 [ 1366.196950][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.202224][T19907] ? input_event_to_user+0x3a0/0x3a0 [ 1366.202271][T19907] evdev_write+0x356/0x760 [ 1366.202296][T19907] ? evdev_read+0xe40/0xe40 [ 1366.202319][T19907] ? security_file_permission+0x248/0x560 [ 1366.202351][T19907] ? evdev_read+0xe40/0xe40 [ 1366.210409][ T32] usb 1-1: Product: syz [ 1366.215663][T19907] vfs_write+0x28e/0x9e0 [ 1366.220277][ T32] usb 1-1: Manufacturer: syz [ 1366.224867][T19907] ksys_write+0x1ee/0x250 [ 1366.230709][ T32] usb 1-1: SerialNumber: syz [ 1366.235122][T19907] ? __ia32_sys_read+0xb0/0xb0 [ 1366.262990][T19907] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1366.269009][T19907] ? syscall_enter_from_user_mode+0x27/0x70 [ 1366.274944][T19907] do_syscall_64+0x3a/0xb0 [ 1366.279744][T19907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1366.285861][T19907] RIP: 0033:0x4665d9 [ 1366.289899][T19907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.298517][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1366.309660][T19907] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1366.309698][T19907] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1366.309714][T19907] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1366.309729][T19907] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1366.309745][T19907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.309760][T19907] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1366.318485][T29987] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1366.477956][ T7235] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1366.537763][ T2105] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1366.547108][ T2105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.555401][ T2105] usb 6-1: Product: syz [ 1366.559714][ T2105] usb 6-1: Manufacturer: syz [ 1366.564436][ T2105] usb 6-1: SerialNumber: syz [ 1366.608957][ T2105] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1366.637793][ T2608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1366.646997][ T2608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.655529][ T2608] usb 4-1: Product: syz [ 1366.658919][T29987] usb 3-1: too many configurations: 186, using maximum allowed: 8 [ 1366.659867][ T2608] usb 4-1: Manufacturer: syz [ 1366.672425][ T2608] usb 4-1: SerialNumber: syz [ 1366.728422][ T2608] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1366.768255][ T7257] usb 6-1: USB disconnect, device number 64 10:25:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) 10:25:37 executing program 4 (fault-call:2 fault-nth:98): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1366.790256][ T2105] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1366.812080][ T7257] usb 6-1: ath9k_htc: USB layer deinitialized [ 1366.822018][T29681] usb 4-1: USB disconnect, device number 33 [ 1366.853590][ T2608] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1366.862627][ T7235] usb 2-1: device descriptor read/64, error 18 [ 1366.867742][T19934] FAULT_INJECTION: forcing a failure. [ 1366.867742][T19934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.882355][T19934] CPU: 1 PID: 19934 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1366.882392][T19934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.882411][T19934] Call Trace: [ 1366.882421][T19934] dump_stack+0x143/0x1db [ 1366.882454][T19934] should_fail.cold+0x5/0xa [ 1366.882485][T19934] _copy_from_user+0x2c/0x180 [ 1366.882516][T19934] input_event_from_user+0x131/0x3a0 [ 1366.882543][T19934] ? input_event_to_user+0x3a0/0x3a0 [ 1366.882569][T19934] evdev_write+0x356/0x760 [ 1366.882598][T19934] ? evdev_read+0xe40/0xe40 [ 1366.882625][T19934] ? security_file_permission+0x248/0x560 [ 1366.882668][T19934] ? evdev_read+0xe40/0xe40 [ 1366.882695][T19934] vfs_write+0x28e/0x9e0 [ 1366.882722][T19934] ksys_write+0x1ee/0x250 [ 1366.882748][T19934] ? __ia32_sys_read+0xb0/0xb0 [ 1366.882776][T19934] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1366.882811][T19934] ? syscall_enter_from_user_mode+0x27/0x70 [ 1366.882844][T19934] do_syscall_64+0x3a/0xb0 [ 1366.882870][T19934] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1366.882899][T19934] RIP: 0033:0x4665d9 [ 1366.882920][T19934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.882950][T19934] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1366.882982][T19934] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1366.883002][T19934] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1366.883020][T19934] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1366.883038][T19934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.883054][T19934] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1366.885824][T29681] usb 4-1: ath9k_htc: USB layer deinitialized [ 1366.937795][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1367.287508][ T7235] usb 2-1: device descriptor read/64, error 18 [ 1367.349433][ T17] usb 1-1: USB disconnect, device number 63 [ 1367.397480][T29681] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1367.567524][ T7235] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1367.607577][T29987] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1367.616706][T29987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.624848][T29987] usb 3-1: Product: syz [ 1367.629127][T29987] usb 3-1: Manufacturer: syz [ 1367.633745][T29987] usb 3-1: SerialNumber: syz [ 1367.678796][T29987] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1367.727795][T29681] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1367.847494][ T7235] usb 2-1: device descriptor read/64, error 18 [ 1368.127528][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1368.134544][ T32] ath9k_htc: Failed to initialize the device [ 1368.141380][ T17] usb 1-1: ath9k_htc: USB layer deinitialized [ 1368.257588][T29987] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1368.278381][ T7235] usb 2-1: device descriptor read/64, error 18 [ 1368.397702][ T7235] usb usb2-port1: attempt power cycle 10:25:39 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000004026093333000000000001090224000100000000090400000903000000092100000001222900090581f3ac6a3ef03d33fb29cc5e6975a4e29d12de8001a0f0ce157c2bbb5308dbf8728bafc5eac412437ea3a1bbd74f64cf162db599bcbb4c2ad6cf84832eeb6e1fd16d9f43e16c671a6999473ad1fc387be368ca85f0bf3c00e93f485bce5ff13ccb1caf3ea677a49bd60fb0d847b696cf2951f3c923721ba0da8fa853942febb96633ee3a454d19842b0dabc793bcc070a780bbd8dc82c8abeec9da6d97240823cc91349c0088279a1ef0a470f1a1dca06327417ba511c13b"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x1, 0x3, "42f647"}, 0x0}) 10:25:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x561101) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:25:39 executing program 4 (fault-call:2 fault-nth:99): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1368.497690][ T17] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1368.526459][T19967] FAULT_INJECTION: forcing a failure. [ 1368.526459][T19967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.539788][T19967] CPU: 0 PID: 19967 Comm: syz-executor.4 Not tainted 5.13.0-rc7-syzkaller #0 [ 1368.548597][T19967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.558684][T19967] Call Trace: [ 1368.561987][T19967] dump_stack+0x143/0x1db [ 1368.566350][T19967] should_fail.cold+0x5/0xa [ 1368.570899][T19967] _copy_from_user+0x2c/0x180 [ 1368.575616][T19967] input_event_from_user+0x131/0x3a0 [ 1368.580941][T19967] ? input_event_to_user+0x3a0/0x3a0 [ 1368.586281][T19967] evdev_write+0x356/0x760 [ 1368.590778][T19967] ? evdev_read+0xe40/0xe40 [ 1368.595323][T19967] ? security_file_permission+0x248/0x560 [ 1368.601092][T19967] ? evdev_read+0xe40/0xe40 [ 1368.605639][T19967] vfs_write+0x28e/0x9e0 [ 1368.609929][T19967] ksys_write+0x1ee/0x250 [ 1368.614300][T19967] ? __ia32_sys_read+0xb0/0xb0 [ 1368.619134][T19967] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1368.625173][T19967] ? syscall_enter_from_user_mode+0x27/0x70 [ 1368.631124][T19967] do_syscall_64+0x3a/0xb0 [ 1368.635679][T19967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1368.641618][T19967] RIP: 0033:0x4665d9 [ 1368.645544][T19967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1368.665222][T19967] RSP: 002b:00007f3d52306188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1368.673666][T19967] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 1368.681668][T19967] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1368.689671][T19967] RBP: 00007f3d523061d0 R08: 0000000000000000 R09: 0000000000000000 10:25:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1368.697668][T19967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1368.705765][T19967] R13: 00007ffe1936cf4f R14: 00007f3d52306300 R15: 0000000000022000 [ 1368.719172][ T7476] usb 3-1: USB disconnect, device number 16 10:25:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18) 10:25:39 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x30) [ 1368.777473][ T8086] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1368.807449][ T7235] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1368.907645][T29681] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1368.916867][T29681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.925254][T29681] usb 4-1: Product: syz [ 1368.929492][T29681] usb 4-1: Manufacturer: syz [ 1368.934158][T29681] usb 4-1: SerialNumber: syz [ 1368.968482][ T7235] usb 2-1: device descriptor read/8, error -71 [ 1368.988274][T29681] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1369.017568][ T17] usb 1-1: device descriptor read/64, error -71 [ 1369.137525][ T8086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.148583][ T8086] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.158397][ T8086] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1369.171316][ T8086] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1369.180457][ T8086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.192861][ T8086] usb 6-1: config 0 descriptor?? [ 1369.197509][ T7235] usb 2-1: device descriptor read/8, error -71 10:25:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000300)=""/216) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, "02000000000000003ebf3e2000"}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x3, 0xf2, &(0x7f0000000200)="02144da3cd84c54afbc2022e193a7dd8fedd248d96d4cbd9adb17b9681be91d2a5d14dcf31adbf3d597fb2e05a6f27c678aea4c529f8b601c2dfb865af0dfcb11d3a5a9f492c3b01e88fe5f80077cccdd4a93dc73d2bdc55f982c797c7838bd7c535df43b5ca5bf6fbe77c23fa4abdc027377d69dc50b175a7fbf0cbbd164df00e603853def9741e1ab8e11ad1e01d48bb7c5ed9e60f338646c177f67fd36362a0fb3ea08231561e5925f48dd48511cdc1258c1a6fb632ed578df5da68470dc44759cd24035d82930fef4c78775adb41740aaa6004cd3a30767fb68155e0b8462abf8abee76b13bd9274dba18504f6e76d3b"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x7c, &(0x7f0000000880)=ANY=[@ANYBLOB="1500004e7af5fa6915e5369fcfe961c5ebfb638105e1ce864d0000002300004e0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c088000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004ef10000000100004e2f0000000100004e92000000"]) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000001c0)={0x4, 0x4, 0x6d0, 0x7, 0xa5, 0x2}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x8, 0x12, 0x0, 0x3, "dcbc50bbaadf1a5e1ae85289f90fc92bc9d11a6db6fa093f62daa2b2c84c1bc8"}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x7, 0x666be020aec4c3d2) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000400)=""/217) 10:25:40 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x48) 10:25:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x43, &(0x7f0000000180)=@generic={0x2, 0x2, 0x3b, "6825edcf", "6e415c00dc6ba1f117edc25ae3e2a257e8aff52d962e85a716008070615a93ad8c13c949ba8b358d9562564acfc4bed23b44ea406a2a629bcf3c21"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x54, &(0x7f0000000ac0)={[{0x4, 0x4e00, "b7ed5205"}, {}, {0x34, 0x4e00, "84b1db982dbd96f1d17bcae1dec5c5231a1a4b204519132a59683edd7757cbb095db63b6136377a5966dd8db7b6681ed84afdc9a"}, {0x1, 0x4e00, '&'}, {0x1, 0x4e00, 'L'}]}) 10:25:40 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x60) [ 1369.327571][T29987] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1369.336253][T29987] ath9k_htc: Failed to initialize the device [ 1369.345142][ T7476] usb 3-1: ath9k_htc: USB layer deinitialized [ 1369.467580][ T17] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1369.637541][T29681] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1369.678944][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.685790][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.692872][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.699864][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.706722][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.707443][ T7235] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1369.713685][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.728187][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.735003][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.741925][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.748844][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.755694][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.762585][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.769515][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.776419][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.783430][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.790406][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.797230][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.804121][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.811050][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.818295][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.825112][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.832034][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.838952][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.845772][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.852677][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.859567][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.866390][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.873297][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.880229][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.887134][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.894079][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.900950][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.907818][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.909469][T19968] udc-core: couldn't find an available UDC or it's busy [ 1369.914669][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.921648][T19968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1369.936065][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.942944][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.949831][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.956655][ T8086] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1369.957880][ T7235] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1369.963835][ T7476] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1369.983947][ T8086] isku 0003:1E7D:319C.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 1370.004038][ T7235] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1370.007545][ T8086] isku 0003:1E7D:319C.002E: couldn't init struct isku_device [ 1370.024523][ T8086] isku 0003:1E7D:319C.002E: couldn't install keyboard [ 1370.059071][ T8086] isku: probe of 0003:1E7D:319C.002E failed with error -71 [ 1370.083658][T19938] udc-core: couldn't find an available UDC or it's busy [ 1370.087704][ T8086] usb 6-1: USB disconnect, device number 65 [ 1370.090742][T19938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1370.122051][T19938] udc-core: couldn't find an available UDC or it's busy [ 1370.129181][T19938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1370.138311][T19938] udc-core: couldn't find an available UDC or it's busy [ 1370.145398][T19938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1370.155102][T19938] udc-core: couldn't find an available UDC or it's busy [ 1370.162466][T19938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1370.173840][T19938] udc-core: couldn't find an available UDC or it's busy [ 1370.180892][T19938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1370.207935][ T7235] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1370.217029][ T7235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.225318][ T7235] usb 2-1: Product: syz [ 1370.229570][ T7235] usb 2-1: Manufacturer: syz [ 1370.234293][ T7235] usb 2-1: SerialNumber: syz [ 1370.288576][ T7235] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1370.391426][ T5] usb 4-1: USB disconnect, device number 34 [ 1370.507825][ T7476] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1370.517123][ T7476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.525267][ T7476] usb 3-1: Product: syz [ 1370.529516][ T7476] usb 3-1: Manufacturer: syz [ 1370.534150][ T7476] usb 3-1: SerialNumber: syz [ 1370.577628][ T17] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1370.586813][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.594935][ T17] usb 1-1: Product: syz [ 1370.599198][ T17] usb 1-1: Manufacturer: syz [ 1370.603806][ T17] usb 1-1: SerialNumber: syz [ 1370.609236][ T7476] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1370.678554][ T17] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1370.757606][ T2608] usb 6-1: new high-speed USB device number 66 using dummy_hcd 10:25:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787915692f03b12fda222071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x0, 0x0) 10:25:42 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x78) [ 1370.937563][T29681] usb 4-1: Service connection timeout for: 256 [ 1370.943954][T29681] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1370.957108][T29681] ath9k_htc: Failed to initialize the device [ 1370.963937][ T5] usb 4-1: ath9k_htc: USB layer deinitialized [ 1370.987601][ T7235] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1371.005555][ T7235] usb 2-1: ath9k_htc: Unable to allocate URBs [ 1371.030028][ T7235] usb 2-1: ath9k_htc: USB layer deinitialized [ 1371.187699][ T2608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.198706][ T2608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.207670][ T7476] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1371.208522][ T2608] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1371.230287][ T2608] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1371.239443][ T2608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.249985][ T2608] usb 6-1: config 0 descriptor?? [ 1371.260457][ T17] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1371.417578][ T5] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1371.436814][ T7257] usb 3-1: USB disconnect, device number 17 10:25:42 executing program 5: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x12, 0x28, &(0x7f0000000000)="7832539d4baac04d0af03244812e6448733dc7a6febac9c399f60da81458c1e493c1440cb29c14e6"}) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000080)={0x5, 0x73, 0x8, 0x1, 0x10001, 0x5}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0xeb, 0x1e, 0x800, 0x1, "c49f84d5ac208861730b04f07fb7345b1d77cbc33a094e9007fbe45171f22a6d"}) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x8c0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/118) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0xfe, 0x4001) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000240)={0xa4, 0x17, 0x5, 0x401, "81828b1f78cd718d1267328de9dff39fb5e0be5713c8780e0eb72088b9b3e3a7"}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000280)=0xffffffff) syz_open_dev$evdev(&(0x7f00000002c0), 0x20, 0x440000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000300)={0x9, 0x0, 0x78, 0xd48c, "2cd2aa23d69fbcee2712f49e249a3ec4ad011014db9bd581b2d9168ce6bcd99b"}) syz_open_dev$evdev(&(0x7f0000000340), 0x40, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000000380), 0x1f, 0x101000) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000003c0)=""/4096) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000001480)={0x2, 0xab, &(0x7f00000013c0)="a6ba627c51416440ac07f35696dbc1d22863a23cf007076dde6f264351c8c2e52d0d034507b04bacc56919b45496fdc2d4b331b3a224c957f32ea0b91163c5ea4e208927b8ff38f642d64c7515a48728b82f5543adca67788c9d31cac6ef720d6421170ad49f76c3c906d4877a85e418e99e60731de99e9c0e9d39ebeec9a9ec5b81c40d6a76b297ef993957fd53b8a19a2dded88dfe33b590601b1e0486045639e5b5eee432833d34d041"}) r3 = syz_open_dev$evdev(&(0x7f00000014c0), 0x3f, 0x80402) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000001500)=0x7) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001540)={0x20, 0x19, 0x101, 0xfffffffa, "f88790ea3fdf7ec8e9432057b8abe40780bde2d2bdb264a5dd0380d7aeb645c8"}) r4 = syz_open_dev$evdev(&(0x7f0000001580), 0x3ff, 0x8000) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000001680)={0x2, 0x8e, &(0x7f00000015c0)="55d1166847bbda2e8ba77bbc4f9c44204d10720dc9860ebd7f43a920aea86421cb27890e577f6b0955e6150d2e0b196b874618b76f9f39cc546e21364bef0a04367a689fdd6fee5279f1b24eb227e49eaf381282c8c5191299ce540a5f9e84cc314abead302f4768c70ee6d62019dfbd1ea22522a8ad820c494ec9bfb5381c8093ec761317bd6b729fcdd8d1381e"}) 10:25:42 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x90) 10:25:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000000c0)=""/85) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x10, 0x0, 0x401, "ed105400000000003ec13e2000"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000240)={0x0, 0x101, &(0x7f0000000840)="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"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e676, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3e8, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xff95, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "7a3f00bd"}) 10:25:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "22ea7f0c", {0x3, 0x102, 0x0, 0xbc, 0x800, 0x5, 0x1d}}) [ 1371.474577][ T32] usb 1-1: USB disconnect, device number 64 [ 1371.552135][T20085] udc-core: couldn't find an available UDC or it's busy [ 1371.559301][T20085] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:25:42 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xa8) 10:25:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x60, 0x500) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000340)={0x40, 0x2, 0x4, 0x8000, "0c5182490acd6473cb16ea9a9571602707394177f5477ef5bef278713c10c749"}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000180)=[0x26cb, 0xc5e]) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000380)=""/191) ioctl$EVIOCGVERSION(r0, 0x400445a0, &(0x7f0000001080)=""/171) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="5618419f433344a6710aef492b308d65532c36fef4244fba0540fd9efe4b5113a85c3e46aafebbaf9061e14a503e09e6443d2c2ca2fa0585b9db936e453795eb3e1b27c5ebc327c661639b35f879833abe5dc11d3aff2a1498227155a383d30531c2bf6b8fcf6d4b60ada8c97bc1a7f33c02509e391845a0cad7db1c98447817faa5fb762d1f448cf307d5bd"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000082505a8a440000102030109021b00010141a00609040080000701060809050102100005007f"], &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x40, 0x8, 0x1, 0x10, 0x1d}, 0x4c, &(0x7f00000002c0)={0x5, 0xf, 0x4c, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7fff2fe, 0xf, 0x0, [0xff3f00, 0x3f60, 0xffc030, 0xff00ff]}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x0, 0xff00, 0x80, [0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "85de6c5adc4cdb6acd1a4a04fef32545"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x1}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1404}}]}) [ 1371.658195][ T2608] usbhid 6-1:0.0: can't add hid device: -71 [ 1371.671298][ T2608] usbhid: probe of 6-1:0.0 failed with error -71 10:25:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0xac, 0x5, 0xf5, 0x700, "4f18a005a5c811060aa9afe172e379f6fa8b78010a2f6e77a3cd343402b03195"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect(0x0, 0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000d0f11a40ac053692a219bf0203010902220001000000000904000001031900000905000000000000000705884f66"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x40}}) [ 1371.698775][ T2608] usb 6-1: USB disconnect, device number 66 10:25:42 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xc0) [ 1371.757975][ T5] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1372.217756][ T2608] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1372.287549][ T17] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1372.295035][ T17] ath9k_htc: Failed to initialize the device [ 1372.301433][ T7476] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1372.308948][ T7476] ath9k_htc: Failed to initialize the device [ 1372.315306][ T7257] usb 3-1: ath9k_htc: USB layer deinitialized [ 1372.315672][ T32] usb 1-1: ath9k_htc: USB layer deinitialized 10:25:43 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000200)="15"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000002c0)=[0x800, 0x904]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:25:43 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xd8) [ 1372.608200][ T2608] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1372.618863][ T2608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1372.629895][ T2608] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1372.644199][ T2105] usb 2-1: USB disconnect, device number 92 [ 1372.677828][ T32] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1372.707552][ T7257] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1372.727896][ T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1372.737081][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.745359][ T5] usb 4-1: Product: syz [ 1372.749616][ T5] usb 4-1: Manufacturer: syz [ 1372.754257][ T5] usb 4-1: SerialNumber: syz [ 1372.808509][ T5] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1372.857637][ T2608] usb 6-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=19.a2 [ 1372.866917][ T2608] usb 6-1: New USB device strings: Mfr=191, Product=2, SerialNumber=3 [ 1372.875418][ T2608] usb 6-1: Product: syz [ 1372.879683][ T2608] usb 6-1: Manufacturer: syz [ 1372.884353][ T2608] usb 6-1: SerialNumber: syz [ 1372.891434][ T2608] usb 6-1: config 0 descriptor?? [ 1372.957762][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1373.027673][ T7257] usb 3-1: too many configurations: 118, using maximum allowed: 8 [ 1373.057718][ T2105] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1373.157798][ T2608] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 1373.178930][ T2608] appledisplay: probe of 6-1:0.0 failed with error -71 [ 1373.220686][ T2608] usb 6-1: USB disconnect, device number 67 [ 1373.377873][ T2105] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1373.517619][ T5] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1373.757725][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1373.767165][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.775260][ T32] usb 1-1: Product: syz [ 1373.779559][ T32] usb 1-1: Manufacturer: syz [ 1373.784233][ T32] usb 1-1: SerialNumber: syz [ 1373.828198][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1373.922017][T20060] udc-core: couldn't find an available UDC or it's busy [ 1373.929507][T20060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1373.938642][T20060] udc-core: couldn't find an available UDC or it's busy [ 1373.945669][T20060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1373.955171][T20060] udc-core: couldn't find an available UDC or it's busy [ 1373.962487][T20060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1373.971437][T20060] udc-core: couldn't find an available UDC or it's busy [ 1373.978544][T20060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1373.986594][T20060] udc-core: couldn't find an available UDC or it's busy [ 1373.994066][T20060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1374.007759][ T7257] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1374.016851][ T7257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.025107][ T7257] usb 3-1: Product: syz [ 1374.029422][ T7257] usb 3-1: Manufacturer: syz [ 1374.034044][ T7257] usb 3-1: SerialNumber: syz [ 1374.088365][ T7257] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1374.204606][ T2608] usb 4-1: USB disconnect, device number 35 [ 1374.327621][ T2105] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1374.336727][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.344807][ T2105] usb 2-1: Product: syz [ 1374.349154][ T2105] usb 2-1: Manufacturer: syz [ 1374.353793][ T2105] usb 2-1: SerialNumber: syz [ 1374.398475][ T2105] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1374.417855][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1374.552904][T29681] usb 3-1: USB disconnect, device number 18 [ 1374.559167][ T7257] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1374.585583][T29681] usb 3-1: ath9k_htc: USB layer deinitialized [ 1374.586454][ T7476] usb 1-1: USB disconnect, device number 65 10:25:45 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:25:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0xac, 0x5, 0xf5, 0x700, "4f18a005a5c811060aa9afe172e379f6fa8b78010a2f6e77a3cd343402b03195"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) r2 = syz_usb_connect(0x0, 0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000d0f11a40ac053692a219bf0203010902220001000000000904000001031900000905000000000000000705884f66"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x40}}) 10:25:45 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xf0) 10:25:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x91c, 0x800) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x17, 0x2, &(0x7f00000000c0)="cd87"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec15f2000"}) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x7, 0x4000) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000300)={0x16, 0x21, &(0x7f00000002c0)="efa1c5318b07e59a00a851079befc671ea23baf18e9d9b3348aeeb7e05c3f4ef1a"}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000440)={0x4, 0x2a, &(0x7f0000000400)="eeb9261fc4a999a0601fbeec571e4d0647ee0f3f2c82cbadbedfefa2707175aca99808cce6b27e12e1f4"}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000380)={0xe5, 0x14, 0x6, 0x2, "39c00aaec2e99c717635bc7a96cc4163bc4544ba46a86dbaaa8834b8dcb1b0d1"}) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x101000) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000240)={0x12, 0x15, &(0x7f0000000200)="f46ec2a37641761352befbceb0b9cc4ab599c26fb1"}) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000003c0)={0x4, 0xd, 0xbe, 0x1, "eda783711f64872642ddde94c4fcafd2e08e7a34f84ecd8a008f55c18083f402"}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x74, &(0x7f0000000340)=ANY=[@ANYBLOB="1100004e"]) 10:25:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r1, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x20, 0x18, 0x5d, 0x8, "c153f8a7d3950bcb4afa3b1fd0dba468c18b4d38757b5239dde9586dc479440f"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x9f2) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:25:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:25:45 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x108) [ 1374.767575][ T5] usb 4-1: Service connection timeout for: 256 [ 1374.773846][ T5] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1374.794920][ T5] ath9k_htc: Failed to initialize the device [ 1374.801323][ T2608] usb 4-1: ath9k_htc: USB layer deinitialized 10:25:46 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x120) 10:25:46 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x138) 10:25:46 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x150) [ 1374.997627][ T2105] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1375.087596][ T7257] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1375.117533][T29681] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1375.217620][ T2608] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1375.419719][ T2105] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1375.425512][ T2105] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1375.447668][ T7257] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1375.458502][ T7257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1375.469534][ T7257] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1375.487539][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1375.494886][ T32] ath9k_htc: Failed to initialize the device [ 1375.501726][ T7476] usb 1-1: ath9k_htc: USB layer deinitialized [ 1375.527980][ T2608] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1375.620252][T20130] udc-core: couldn't find an available UDC or it's busy [ 1375.627343][T20130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1375.640469][ T17] usb 2-1: USB disconnect, device number 93 [ 1375.651480][ T2105] ath9k_htc: Failed to initialize the device [ 1375.658032][ T17] usb 2-1: ath9k_htc: USB layer deinitialized [ 1375.668015][ T7257] usb 6-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=19.a2 [ 1375.677422][ T7257] usb 6-1: New USB device strings: Mfr=191, Product=2, SerialNumber=3 [ 1375.685709][ T7257] usb 6-1: Product: syz [ 1375.690061][ T7257] usb 6-1: Manufacturer: syz [ 1375.694686][ T7257] usb 6-1: SerialNumber: syz [ 1375.699490][T29681] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1375.708759][T29681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.716972][T29681] usb 3-1: Product: syz [ 1375.721377][T29681] usb 3-1: Manufacturer: syz [ 1375.726025][T29681] usb 3-1: SerialNumber: syz [ 1375.734566][ T7257] usb 6-1: config 0 descriptor?? [ 1375.788614][T29681] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1375.857525][ T7476] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1376.007670][ T7257] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 1376.041170][ T7257] appledisplay: probe of 6-1:0.0 failed with error -71 [ 1376.100207][ T7257] usb 6-1: USB disconnect, device number 68 [ 1376.137695][ T7476] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1376.437927][ T2105] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1376.457876][T29681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1376.557633][ T2608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1376.566823][ T2608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.576446][ T2608] usb 4-1: Product: syz [ 1376.581113][ T2608] usb 4-1: Manufacturer: syz [ 1376.585731][ T2608] usb 4-1: SerialNumber: syz [ 1376.638405][ T2608] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1376.661784][T20207] udc-core: couldn't find an available UDC or it's busy [ 1376.668866][T20207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1376.681752][ T5] usb 3-1: USB disconnect, device number 19 [ 1376.767702][ T2105] usb 2-1: too many configurations: 186, using maximum allowed: 8 10:25:48 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000200)="15"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGVERSION(r2, 0x400445a0, &(0x7f0000001080)=""/171) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000002c0)=[0x800, 0x904]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:25:48 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x168) [ 1376.937619][ T7476] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1376.946711][ T7476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.954894][ T7476] usb 1-1: Product: syz [ 1376.959850][ T7476] usb 1-1: Manufacturer: syz [ 1376.964502][ T7476] usb 1-1: SerialNumber: syz [ 1377.027665][ T2105] usb 2-1: unable to read config index 1 descriptor/all [ 1377.034760][ T2105] usb 2-1: can't read configurations, error -71 [ 1377.038807][ T7476] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1377.307553][ T2608] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1377.427587][ T2105] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1377.487538][T29681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1377.494533][T29681] ath9k_htc: Failed to initialize the device [ 1377.501901][ T5] usb 3-1: ath9k_htc: USB layer deinitialized [ 1377.707815][ T2105] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1377.714025][T20200] udc-core: couldn't find an available UDC or it's busy [ 1377.723493][T20200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1377.733288][T20200] udc-core: couldn't find an available UDC or it's busy [ 1377.740643][T20200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1377.748466][ T7476] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1377.762614][ T7257] usb 1-1: USB disconnect, device number 66 [ 1377.764005][ T7476] usb 1-1: ath9k_htc: Unable to allocate URBs [ 1377.775035][ T7257] usb 1-1: ath9k_htc: USB layer deinitialized [ 1377.782301][T20200] udc-core: couldn't find an available UDC or it's busy [ 1377.789355][T20200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1377.809552][T20200] udc-core: couldn't find an available UDC or it's busy [ 1377.816851][T20200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1377.834540][T20200] udc-core: couldn't find an available UDC or it's busy [ 1377.841686][T20200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1377.871073][ T2608] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1377.876847][ T2608] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1377.885687][ T5] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1378.086729][ T7257] usb 4-1: USB disconnect, device number 36 [ 1378.096140][ T2608] ath9k_htc: Failed to initialize the device [ 1378.111513][ T7257] usb 4-1: ath9k_htc: USB layer deinitialized 10:25:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:25:49 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x180) [ 1378.527531][ T2105] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1378.536597][ T2105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.544751][ T2105] usb 2-1: Product: syz [ 1378.549026][ T2105] usb 2-1: Manufacturer: syz [ 1378.553719][ T2105] usb 2-1: SerialNumber: syz 10:25:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000008106b1d01014002030109025f00c56254ba00090400000001030000"], 0x0) 10:25:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5ebfb638105e100002a00004e0f3a19f96e1b82139955719b2fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff200000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004e0100004e2f00000001002fcb359b000000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x101, 0x400001) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x7f, 0x3, 0x3, 0x80000000, "6c7c2255f06c6af215b78f6ba3fa851f0b888775fc8226cff4b9646e6b32fa22"}) 10:25:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1378.603608][ T2105] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:25:49 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x198) 10:25:49 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1b0) 10:25:49 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1c8) 10:25:50 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1e0) 10:25:50 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1f8) [ 1378.937466][ T7257] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1378.937487][ T7476] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1378.953208][ T2608] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1379.067543][ T5] usb 3-1: device descriptor read/64, error -71 [ 1379.197558][ T7257] usb 6-1: Using ep0 maxpacket: 16 [ 1379.208614][ T2105] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1379.237984][ T2608] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1379.257789][ T7476] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1379.357627][ T7257] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1379.365300][ T7257] usb 6-1: can't read configurations, error -61 [ 1379.517564][ T7257] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1379.639576][ T2105] usb 2-1: ath9k_htc: Invalid TX pipe: 0 [ 1379.645395][ T2105] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1379.707964][ T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1379.717171][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.725351][ T5] usb 3-1: Product: syz [ 1379.729706][ T5] usb 3-1: Manufacturer: syz [ 1379.734348][ T5] usb 3-1: SerialNumber: syz [ 1379.778726][ T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1379.790925][ T7257] usb 6-1: Using ep0 maxpacket: 16 [ 1379.841544][T20279] udc-core: couldn't find an available UDC or it's busy [ 1379.848826][T20279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1379.859889][T29681] usb 2-1: USB disconnect, device number 95 [ 1379.879974][ T2105] ath9k_htc: Failed to initialize the device [ 1379.886098][T29681] usb 2-1: ath9k_htc: USB layer deinitialized [ 1379.947628][ T7257] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1379.955288][ T7257] usb 6-1: can't read configurations, error -61 [ 1379.963146][ T7257] usb usb6-port1: attempt power cycle [ 1380.057721][ T2608] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1380.066834][ T2608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.075013][ T2608] usb 4-1: Product: syz [ 1380.079292][ T2608] usb 4-1: Manufacturer: syz [ 1380.083926][ T2608] usb 4-1: SerialNumber: syz [ 1380.128613][ T2608] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1380.257578][ T7476] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1380.266991][ T7476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.275106][ T7476] usb 1-1: Product: syz [ 1380.279394][ T7476] usb 1-1: Manufacturer: syz [ 1380.284044][ T7476] usb 1-1: SerialNumber: syz 10:25:51 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x10000, 0x82000) write$hidraw(r0, &(0x7f0000000280)="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", 0xfffffdd1) syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x88562) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000000)=ANY=[@ANYBLOB='}']) r1 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x40286608, &(0x7f0000000000)) write$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 10:25:51 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x210) [ 1380.348437][ T7476] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1380.368108][ T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1380.379881][ T7257] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1380.427251][ T33] audit: type=1804 audit(1624530351.532:3141): pid=20381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723432353533343331312F73797A6B616C6C65722E665079696A622F3832392F48C7C060 dev="sda1" ino=14271 res=1 errno=0 [ 1380.429149][T20381] EXT4-fs warning (device sda1): verify_group_input:131: Cannot add at group 125 (only 16 groups) [ 1380.478581][ T33] audit: type=1804 audit(1624530351.592:3142): pid=20382 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723432353533343331312F73797A6B616C6C65722E665079696A622F3832392F48C7C060 dev="sda1" ino=14271 res=1 errno=0 [ 1380.509823][ T7257] usb 6-1: Using ep0 maxpacket: 16 [ 1380.583760][T20321] udc-core: couldn't find an available UDC or it's busy [ 1380.590870][T20321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1380.603840][ T2105] usb 3-1: USB disconnect, device number 20 [ 1380.677629][ T7257] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1380.685263][ T7257] usb 6-1: can't read configurations, error -61 [ 1380.767557][ T2608] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1380.847536][ T7257] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1380.947772][ T7257] usb 6-1: Using ep0 maxpacket: 16 [ 1380.997583][ T7476] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1381.127742][ T7257] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1381.135354][ T7257] usb 6-1: can't read configurations, error -61 [ 1381.143155][ T7257] usb usb6-port1: unable to enumerate USB device [ 1381.171896][T20327] udc-core: couldn't find an available UDC or it's busy [ 1381.179097][T20327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1381.187702][T20327] udc-core: couldn't find an available UDC or it's busy [ 1381.194656][T20327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1381.203984][T20327] udc-core: couldn't find an available UDC or it's busy [ 1381.211008][T20327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1381.219630][T20327] udc-core: couldn't find an available UDC or it's busy [ 1381.226572][T20327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1381.235043][T20327] udc-core: couldn't find an available UDC or it's busy [ 1381.242097][T20327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1381.269266][ T2608] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1381.274942][ T2608] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1381.417615][ T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1381.424770][ T5] ath9k_htc: Failed to initialize the device [ 1381.429478][ T32] usb 1-1: USB disconnect, device number 67 [ 1381.434935][ T2105] usb 3-1: ath9k_htc: USB layer deinitialized [ 1381.475789][ T17] usb 4-1: USB disconnect, device number 37 [ 1381.490032][ T2608] ath9k_htc: Failed to initialize the device [ 1381.496213][ T17] usb 4-1: ath9k_htc: USB layer deinitialized 10:25:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787915692f03b12fda222071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:25:53 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x228) 10:25:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000003c0)={0x0, 0x7ac, &(0x7f00000007c0)="fc36a114196eeae5eb7d2184b2e234742378ebd735e3a159d450543cfc28433e01af338964e2490000129d2bcbbdbc85060eac6ae4cb9cf5ca8f711a6923e726f05962c7775f6bfb9ea66f7c64a85d878a7eee6db335615663571412697b9176555e79c996b473a8b70a19343dc13b62bdbc6e82f12ca753a6e3c9440b1154c406ad6355906ef2e345dcdb956bec3d871375058fc3c764940b758572614147db2b4777561113a72836cccfcbc9d710c7bb43288b4b11de7fa8b6eca2262e9284396f06fa8da9640c705081dee3c386693b94600541ad68cc22dac3e78a3fe0e75536299d07c5e9924b462869e70ed6e97011f624b133f032f00a05fa3dfeb38efa9e304b888dbacd7f2ea1c49d54f8ce0c58a68f76d48e59c5947014de72dc917e571cd53d39fa7617df8f3f8d95a5ade798345420b7dd73a8ec04e2185ca5531bf3d1adcb9401c968c3d0200c3fd4e7486ad111c6a328a89f78527e12972bb021c77dd291e7591d7cec4b56564630b086adeab560bf884c1a1d38adf1396f6536308dbf136d11cd4e7f355f831f7c55a0b952bd0c6f7dee5d815a92133f26fa170143a927581e9458f913cac4fde9eaeaae5363aa68e309a63d127597c8ad13a2d2e50ea05d1d067dfb9371bb4d53fa757f6948e9d86c6e2f4de17cfb9a7e8c8645e63075ea2470edfdf0440603b84bfd3685de8be39ad0ecf256631439e3688a762df11539ea08c301fcbac150be78e88ba165308f683d35970d12245d7c1a7ba90fdb8f0584131f4ceb4e675fb2cf64a6e52afa7c158d6af6dca388fb0c59d1d2d4094493fad5824d7ddd8a9ecaf85de06ddb386e419669520816a454c1d01dea7eeb7fb0881426c1fd0461460b4e280c9eb2b632402d6dd029477f9a843160ba374f98a9bf885fb748046aaebf7574e39a718aaf63db5cc0999f826b456caf0381c91c776a1c94ccfdbe3a70c6b079056ff6de89ae81ec6d0c7c4655743f496377e9171e119b14c0724f36d32b6acf1154d63a48b0c4e947409f8310115aa8d9d4fab6dbbcb24b0be24c68382192028bd5aaf7d97e30e6727052854ddee492748c97f2320cd09dbbbe203b24019eabb2017902f4b893bfb0a422e853d4f7e7ee862e0e949bd98db676f0d6abc7b7afdbae5189f8d2a7ede334758d484607058e43ecf0e40e60d4925fc4b15fe57c6ac8f6863d34c5ebe08747badc3d2dc4978e2cf669f33bc1c40a16a66a9c22ce28c379f5bf0e0a4da997d5db763ed78aa645e2dcecb1a9580cfd10b7dc25476cc9950e5706751d6874639a61600f01db68469065068b78cb9f2de1a6de57528ed78114486c45200a94e64b10566520e777f6d800dd38a62a6e37c463c37605fbec3318d8a8a06a2bb84d6d6489a539619b5dd167444c15ff441fa6c4beff66b214fa96e06934c91934a59df58c8f3339934535fd02156ed729fa3d34506f38c892e6d73600d63cb20eaf3156e9e937a37191c1a2d720fa368f5222606f3b4e497751376f077b03cb266f32718b54384efd960c233bad69c0a4de273a794593443d8b6cced08ab5fa532af673fd94c76ff398b90cc0283d89eddc42090a9bb5155038f35c85d2307158d11d3b04e7b79e77389f08fb44222a9a94e53d3b280d3c318b6fdd59023e134ee9a099b2e87e193e9e9e53ea014aa0b5f24024ff2b085fbbd622c8d44722e21ea84385fa9f277078566c94f9f45a46cb92ebad5662b449f416a88f331e6514fb977e43fd48a866b62382b1816829cae30051d712491bad4435ce5c16a72772bfddbe292f046c15b695c3b358d4505ee63263d866533fac3e033b1486b0975b4436778489c4ae822c0acfef541171507281ff6729145407b5c567fceb87e4e47ecff1a5718196f7224b4bee4bc32e4ed609bb9baaade63adad34003fdbadd4f331430ad87572a26b9c9235e01dd5b53b6114b3298fe327322f512bc0079bbfc3a92fe2a5ddf939d04d66702f121acbe27cfc2f3e6cb9f667926892801ceec100dce0a7385823012ca747860c1676312a6aead52f89765e9e13425dc88afed2b27fcac1d612df09fede8cd8cbc1008e6ed354ead221d6d5034f14b2ca3044203dda16d62eb2eec5a8ed6f39540dc7672110c4f5b6945b471fbc47a89269fd19e2d7d62b2e7132484f4d59bd5e88f72c79fa0849c8182924496cade30f978dee5453242b93e863bb7a21703194c2cdb069208993afb8fc09bb545e2788fbf3d299ddfe6890d6275ef65872dac48008628042594afa5d734aaf1b92cb52215dd62f474ff482adde67a7f0fd042196c92074a7049801cc020bd0c900023343d8f6a02e767341cd0a2a304e398e9dcfbb04b4f5cf36e66ab280aee3b466e7ef4ecd22d5a414d471e1a9cfc864ac5d66a8e90ee340883b919c66d9e364349ea7762b63d9d22abe6c00659819b41e505c539da076906b7b8174240d8e044525eed8161b70a705295dabbe589d3fa4771c52edc98c3dea98af86a1ee6feb44c977ff0c55cb2a50143e85ef2109a18658a713f86906ea161ddef73e05b169d6f1d0a72916fe2267e3ca8f30a9a035fd72553bfaa7731e0991cf2d02fcd4ba73737b241d79e114c9682a3f576be38f664e1b889202aeeb6f8d22810ba2433e3445370734606c24fc3b412ecea3fb56c85897374c494574c659b6a8a257dba2457f3b0c7d73dc1f5d245cb424dc7dc805435a68e02ec024f914870d758696cdf8370c0e02e1a400164f0fca34b553a2a9132ac43c2dce9f5eb"}) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc4, &(0x7f0000000480)=ANY=[@ANYBLOB="3b00004ec04ffdbe4d9f3024770ae24b1080a013f23ce8487c56538d3df7a90b544d5ad56c6749c0c4d4a7e9d24f237a35084684a63f07f15787d81e74d5d7007d00004e71b698da5c7e1070582c448130e62e592ec4a34a2e5de7cae4eee8b91aaa7736b73272a7673510948d6e4d0a3a7f8eeca1762242bd9610c902ab822c12"]) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000300)=@ready={0x0, 0x0, 0x8, "d971b202", {0x1, 0x83, 0x3ff}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000240)=@generic={0x7, 0x0, 0x0, "745c2ab1"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xc1, &(0x7f0000000580)=@generic={0x2, 0x2, 0xb9, "2bbf8b3d", "0f3a0f4d10ffa3e66ce1c7d5d7d0bbbbfc9bb797a5abbefd0ef767469210497afc952e4402f99a460f197a2373cc4fb5339287a0493adb1ac4f8cda948976fbc457104594be5cb17a87ceb4d8919e77aa4bb342709955bc42697ea765ee258f9eeb8021bda337e926a036b7631ea63f2f20a79a7f5d2d48a611dabc7b4fb778ef0e5d6b299f083cab9db988725fe6035644eaadfcda8ed6e74930eb932435ad2259c6c75c1e337df08e3114cf09db1d23e4a03368d0868678a"}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e398b, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000200)=@ready={0x0, 0x0, 0x8, "00ac2cd6", {0x1, 0xff, 0xe74d, 0x92}}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x31, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000c1632480fa6f3563a713e8ee3c9281f37d1839e0fa70226a9dcb44d2e58fed0f7544ed1741f03d8b36f839fc5ad8940b26876434d120f68a847f3b658d85cf092c83c4f832d93afa34b39dce54d4fe6b783e797d3f99419d5972d98bf6667f8e9cbf8278e6bca419"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f0000001240)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) [ 1382.047672][ T7476] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1382.054828][ T7476] ath9k_htc: Failed to initialize the device [ 1382.063081][ T32] usb 1-1: ath9k_htc: USB layer deinitialized [ 1382.287457][ T2608] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1382.297487][ T2105] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1382.457479][ T32] usb 1-1: new high-speed USB device number 68 using dummy_hcd 10:25:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3ff, 0x460000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0xf1a, 0x9]) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000280)=""/204) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec1010000003bab137ccff52ba2001f417adb7ec6399700"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="526f5f57395d3e01000000000040ac0529024000010203010902240501010000000904000301030100000921000017010200000905810311020000009cdd5d15c49e7fa36ecd1f2d15e17746a46014439dc217fc9a9c2cb4a3d230462e419bc01a65307986f833f7a9f243e4af723a05ef02e38f83e74b386d57c31e5d33f469366f3a5bdd8c105eed8ca45c72c98075fbcd6d0cee094b6926573d01195f4ca8bb49f19afbf81709ff08f76d30de16c04e7a5687b843d2bc6aa8d2fbcb0b25503e6fb500f00bd4e8a4e73023fefeaac9fd25767144be0bf32216"], &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x80, 0x0, 0x4, 0xff, 0xd3}, 0x26, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "e3eefc55392c20124292c63f13ac411a"}, @generic={0xd, 0x10, 0xa, "22a18308335345b475f3"}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1836}}]}) syz_usb_connect(0x7, 0x0, 0x0, 0x0) 10:25:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x0, 0x4, 0xff}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000740)=@lang_id={0x4}}, {0xc1, &(0x7f0000000e80)=ANY=[@ANYBLOB="c1031df23af6fc444dc31da52f2eb2ec62da9b958aac0069ab93b4a45e4df69443e05418bcea4a173e0843dd4d7a381dd13a033371bbe74deff8bc3796dcabf3b355d7ff383ed50087fd4d720bfa03959281a39d9580e58d90c4c48866ca0a4f140ab5070253d1f5e408b8939ea7228c326fcf8b4cbdc2f0a4264c895255e1ef955aa0faef4430471676266954035dfd7f936f1b69c1854a71c250d87f1a31218d3ca1065d62062e3ee1d3596c51e482922882c9ab11a65887669cd34f055e"]}, {0x2, &(0x7f0000000900)=@string={0x2}}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x2, &(0x7f0000000f80)=@string={0x2}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000d40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000700)=[0x9]) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000500)={0xe3, 0x0, 0x0, 0x0, "8bd2f1ede9c412b9640dc40728a990878c7c9a78e4f77066de27779390a094f8"}) syz_usb_connect_ath9k(0x3, 0x3b5852df0e964bde, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1ee, [{{0x9, 0x2, 0xfffffffffffffd91}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1260d7ef3e353600ba346c8d8528d11f0ddd4ee9a143bcae3a27e481ce699b8a98af9cabc168ae"], &(0x7f0000001240)={0xa, &(0x7f0000000180)={0xa}, 0x11, &(0x7f00000002c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b80000000799d5ceeab479a3ffa6a6f2239a3e458c024a41bf0630000000100"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x1843, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x2, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x579}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x40}}}}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x2, 0x0, 0x6}, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="01d661"], 0x6, [{0xc1, &(0x7f0000000b40)=@string={0xc1, 0x3, "c86223e001df9a42a8e3f4cff5dfbf2afed9e8c8e658f2448f6dedfdaa05cc40a77ee048dc25f442186476b29ef3ef2f7369c85bda2060b29af44e9cfd0612256b2fd09cfea2aa7dab8bd91d7f8de4f4394c9c9b6fc148d59755b8f3cb87bc2fca4e63dda83e8f310c58baf822eca23bd4c169ad5a582031b98e6d1e9608f3539c3b922b4bde6885700eadf47f1ee6327f4b5a2f756b891d4338ea9160af8b95782c05e4c9274dd8ff2a194277a3692cd4148ca211eed0e2581e09be46745b"}}, {0x42, &(0x7f0000000c40)=@string={0x42, 0x3, "8d75f440d5c759f9ffa7aab5f3de8b955b705e833b3987b925134b1a761514a11623d9c4f784f2c2a8a5e00c1ebb11e67c00e632ae1b3cbee3cf1eadf710e056"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}]}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x24, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000006a0561004000010203010902240001010400ff09040000000301000000210000030122f10f0905810300000040ff0cfd147c4a18a03808f81d"], &(0x7f00000005c0)={0xa, &(0x7f0000000340)={0xa}, 0x0, 0x0, 0x2, [{0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="16032b86b1c1ea1e703aecd2db226656e4b376"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:25:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x483) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)={[{0x12, 0x4e00, "7ad9fa6915e5369fcfe961c5ebfb638105e1"}, {0x2a, 0x4e00, "0f3a19f96e1b82139955719b3fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff2"}, {0x1, 0x4e00, "cc"}, {0x1, 0x4e00, "f9"}, {0x1, 0x4e00, "ca"}, {0x1, 0x4e00, '\x00'}, {0x1, 0x4e00, "f1"}, {0x1, 0x4e00, '/'}, {0x1, 0x4e00, "92"}]}) 10:25:53 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x240) 10:25:53 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x258) [ 1382.568208][ T2608] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1382.588364][ T2105] usb 4-1: too many configurations: 221, using maximum allowed: 8 10:25:53 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x270) 10:25:53 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x288) 10:25:53 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2a0) 10:25:53 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2b8) [ 1382.847960][ T5] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1382.897575][T29987] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1383.107578][ T32] usb 1-1: too many configurations: 186, using maximum allowed: 8 [ 1383.138015][ T5] usb 6-1: no configurations [ 1383.142696][ T5] usb 6-1: can't read configurations, error -22 [ 1383.217782][T29987] usb 3-1: device descriptor read/64, error 18 [ 1383.297711][ T5] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1383.367546][ T2608] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1383.376665][ T2608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.384846][ T2608] usb 2-1: Product: syz [ 1383.389126][ T2608] usb 2-1: Manufacturer: syz [ 1383.393756][ T2608] usb 2-1: SerialNumber: syz [ 1383.398565][ T2105] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1383.407801][ T2105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.415822][ T2105] usb 4-1: Product: syz [ 1383.420167][ T2105] usb 4-1: Manufacturer: syz [ 1383.424790][ T2105] usb 4-1: SerialNumber: syz [ 1383.468550][ T2608] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1383.478146][ T2105] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1383.587670][ T5] usb 6-1: no configurations [ 1383.592337][ T5] usb 6-1: can't read configurations, error -22 [ 1383.599356][ T5] usb usb6-port1: attempt power cycle [ 1383.647561][T29987] usb 3-1: device descriptor read/64, error 18 [ 1383.917491][T29987] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1384.007547][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1384.016671][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.024815][ T32] usb 1-1: Product: syz [ 1384.028791][ T5] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1384.029095][ T32] usb 1-1: Manufacturer: syz [ 1384.041314][ T32] usb 1-1: SerialNumber: syz [ 1384.088735][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1384.137669][ T2608] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1384.150601][ T2105] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1384.159974][ T5] usb 6-1: no configurations [ 1384.165433][ T5] usb 6-1: can't read configurations, error -22 [ 1384.187635][T29987] usb 3-1: device descriptor read/64, error 18 [ 1384.327482][ T5] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1384.458053][ T5] usb 6-1: no configurations [ 1384.462999][ T5] usb 6-1: can't read configurations, error -22 [ 1384.470911][ T5] usb usb6-port1: unable to enumerate USB device [ 1384.542039][T20408] udc-core: couldn't find an available UDC or it's busy [ 1384.549387][T20408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.557710][T20411] udc-core: couldn't find an available UDC or it's busy [ 1384.557973][T20408] udc-core: couldn't find an available UDC or it's busy [ 1384.564948][T20411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.572167][T20408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.589877][T20408] udc-core: couldn't find an available UDC or it's busy [ 1384.593490][T20411] udc-core: couldn't find an available UDC or it's busy [ 1384.597035][T20408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.600973][T20408] udc-core: couldn't find an available UDC or it's busy [ 1384.604246][T20411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.612054][T20408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.624904][T29987] usb 3-1: device descriptor read/64, error 18 [ 1384.639340][T20411] udc-core: couldn't find an available UDC or it's busy [ 1384.651359][T20411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.661994][T20411] udc-core: couldn't find an available UDC or it's busy [ 1384.669730][T20411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.678955][T20411] udc-core: couldn't find an available UDC or it's busy [ 1384.686019][T20411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.709324][ T2105] usb 4-1: ath9k_htc: Invalid TX pipe: 0 [ 1384.715172][ T2105] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1384.767580][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1384.776872][T29987] usb usb3-port1: attempt power cycle [ 1384.853695][ T7476] usb 2-1: USB disconnect, device number 96 [ 1384.910920][ T17] usb 4-1: USB disconnect, device number 38 [ 1384.930656][ T2105] ath9k_htc: Failed to initialize the device [ 1384.938223][ T17] usb 4-1: ath9k_htc: USB layer deinitialized [ 1384.978767][ T5] usb 1-1: USB disconnect, device number 68 [ 1385.217492][T29987] usb 3-1: new high-speed USB device number 23 using dummy_hcd 10:25:56 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e1ba, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000880)=ANY=[@ANYBLOB="1200004e7ad9fa6915e5369fcfe961c5ebfb638105e100002a00004e0f3a19f96e1b82139955719b2fb96a6f59916a5394e89b86cc76e80b595618d771c08801c96ff1bbbff200000100004ecc0000000100004ef90000000100004eca0000000100004e000000000100004e0100004e2f00000001002fcb359b000000000000"]) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x101, 0x400001) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x7f, 0x3, 0x3, 0x80000000, "6c7c2255f06c6af215b78f6ba3fa851f0b888775fc8226cff4b9646e6b32fa22"}) 10:25:56 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2d0) 10:25:56 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2b8) [ 1385.417743][T29987] usb 3-1: device descriptor read/8, error -61 10:25:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x0, 0xff}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x430}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e", {0x3, 0x100}}) 10:25:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x401, "ed105400000000003ec13e2000"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xf2, 0x97, 0x27, 0x20, 0x1164, 0x602, 0x3599, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x0, 0xe5, 0x3b, 0x69, 0xa}}]}}]}}, 0x0) 10:25:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="50825ded281ab4123b1e73003f2aaae6e06b98a678686a7d17ec541df6b96e25487c1386ccf76b758e70739c3d20970bd4809a6d7611ddbb811c7f33612594aa3e7e45f0022a1bf8400c3e52ebd746cc111445b7cdb821d5ea87d14e8caafcbbd0082ed00498c57561869b6143e76a119fef7a87b4ccf5a9073ea6545a06262a7a3507cd50f7292511cf18efc6a2775ef2d4bbc164095d972ccf868aa4364a174a8f8e50c69cdf5804891a035b5f2e59127bb05acc53950e691e90191dbb95390ea79e27c8ad8f5696e9011cacecf5c2a1a7ae80df2cd824a9f41c8dd4cc8f617e8ffcf8acdfc4a214503b47d4485afe0f317ddc232f1963cbe9387dc1160b44330ae69ce6d6d04f58c045de814fb530350550085f2d08ed0c893ca8529ecf06b6d51cbf376900a216e8ab2b0ce812dae5667da4b4a89c2c07ab28963b22af2a1fe64ac83a9815a2e1b6fbe266580a65951e46eac5c1edf93f5cb26fa102e6ab2f05bca31d5594799848644120225c9e806238c8ad5a31e52df2c2c2cddfb93bf9ded1ac1ff39f19e47857c10735667a20445fe52b61e1d074dee8daa5954be98d55ad693c9f181990c6272e9e8a745401690915699584ffec25b1fb10be054c47f66e3b26f2b117c6d199ed0b7a9ad4c2e0036b6674ce8129e293592db09d5c55cd4fd341b72f5b70746c6437f9d7ff14f7a5cff4fd991dabca8ed948ca77a571446895de95bad62620a86b3032470d0fecdbc1f51b77ccc57948d796d6721960ea6d75fdc8a0d88a3a38492bda4016a83b307c09119982a9e9b4ecc47241b908e0612348e28403f0ad19908b1bbf1dbf4c0829dc93ae0616b013a7a0423f5ae7f20c6f047ad32918b35cf29a4ce8c616c7ab340b88d2ab66ec665bfa8e47a51b94e905c019d0bf56a08f00e364ea8ebc934b48befdae203563abb8e69cdfa5f966356210465921dcb231d4b2eb615cfed20c7a215e7503a16214b4d99a45455c2f390dad2e0ae5858787915692f03b12fda222071c9cb9566d26f4f331a5140ac9ad5462909ae05142d259fba50e8f30108eb3dc9e4f5b2bf6fe109a8210228ea3486b6cd3569ea7c5ceea3877238a20229e34e873a423f4b73ac527c66b56b4ae13a36f84710eb6c796f5c48c9914c10f6b4ca1d6ec49cca7c70d15ba3bbea5a533dd5bceb3aed2e53189341f7050ea85bc8553624650ec282bdba69660f228a6e9eefface206c65b8f94f65673756038fb6b9c0d68dfb2545bae9069539e9c3386e29e0c2be994121872430d692d0b99389dad5c45d86b7e37ca22928e0a75065c86e1d39f90d731461211f10175c33f50fa23fe40997d8f22d3d699979062ba762ad0b6d80d4b06a335d73639c6a795f7e768df1437d8484a54d49cb6c9830d6e9e16a7358031ae2e2e2a59acc5586aafd9b543600ebe391d77ee478f9be4de79ca53f5b8e02153259c9b0fd7118b97b8b100f1d242c459c1dea83dc36b818f5dc527998b6bf58ea44640c19b2e36b8197a183d059bf14920c4a561e8eee110e2ac04d0325dbe390cff06edb950b64b7427daf5ec5e7861be7954abc4e295531a9a1b0d386c7195945c0deea370de0367de0a7779a8800f33256b686fd45fcdadf9343ce6f21aeb9d8789d17ffcdacdaf90f4378fd4d248fedde484c7720d6dbd817f32603585840fc2e5e2af4e567d3038198fd9b641ebd8e754504ce968d0af5575f727584cda82bc1fbe5fad580eef81b3a3623efab1629ec41fdb545a909ab700389f6bd767482db8bf2b735dce552c9bc4c86ae3dd6615ca0afea52c8dccc0200e653dc1ef0dcf6350a48d6ef1599b29c8f859423608fe37e1543341c5a566e00ad658c94b4ea45979e2fe2dffb165e1c452e2d91b829777e6d5a5f8e40c7c0ab31e56ddc3a31c6ab3f019ff70c4bf4b532c5d54bd4aa682170f48f3feb6e1fb30939324474cf6f07736e4043488030ebf312d24ac5bbb227944581ef2a7d7637c852f6f1704f7b2047c30e3ca1a4fcf2186b39ae1f8b341c49025a10eab0b5ea7e662b904d232fc55d5b1f8c9f210e3c6834d5eb160b65946d4d7f4406c2fe4fc96a011d080ce3dc8c5ac21633c4b63ddd7daada8891226735cfce1def18e8ede8cf6501324a5ac2d4ce7ee932e481446100ae90f316bbf47c9a07ab95437003a55a09c2aef7706cb7fc2e57c88f0be61a8e3cde3c2e368fae10648e41b2a5101d64460e66bdf3470a7fcc839ac0d45f442afa013a023411042660c"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:25:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101, "ed105400000000003ec13e2000"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, "0e7def8474c0d5aeaf5da0116f29040000000000000000b2bc62e2d3c3029f13"}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xdd, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x3, 0x641, &(0x7f0000000940)="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"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x14, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect_ath9k(0x3, 0xfffffffffffffe72, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed9}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001240)={0x0, 0x0, 0x5, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001000)={0xa, &(0x7f00000006c0)={0xa}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, "7b8000000079945ceeab479a3ffa6a6f2239a3e458c024a41bf06300"}) syz_usb_connect_ath9k(0x3, 0xff14, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x33, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x78, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3a88, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000500), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001040)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500"], 0x2, [{0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x88, 0xe0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x5}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000008c0)=@lang_id={0x4}}]}) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:25:56 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2e8) 10:25:56 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x300) [ 1385.627888][T29987] usb 3-1: device descriptor read/8, error -71 10:25:56 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x318) [ 1385.738116][ T2608] usb 2-1: Service connection timeout for: 257 [ 1385.744851][ T2608] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1385.764839][ T2608] ath9k_htc: Failed to initialize the device [ 1385.771319][ T7476] usb 2-1: ath9k_htc: USB layer deinitialized 10:25:56 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x330) [ 1385.807609][ T32] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1385.820104][ T32] ath9k_htc: Failed to initialize the device [ 1385.826765][ T5] usb 1-1: ath9k_htc: USB layer deinitialized 10:25:57 executing program 4: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x47, 0x2}, @cond}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x348) [ 1385.907601][ T17] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1386.107463][ T2105] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1386.118021][T29987] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1386.147568][ T7476] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1386.197482][ T5] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1386.208376][ T17] usb 4-1: too many configurations: 221, using maximum allowed: 8 [ 1386.287850][T29987] usb 3-1: too many configurations: 221, using maximum allowed: 8 [ 1386.347492][ T2105] usb 6-1: Using ep0 maxpacket: 32 [ 1386.467625][ T7476] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 1386.467931][ T2105] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 1386.483860][ T2105] usb 6-1: config 0 has no interface number 0 [ 1386.490108][ T5] usb 1-1: too many configurations: 221, using maximum allowed: 8 [ 1386.658204][ T2105] usb 6-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=35.99 [ 1386.667481][ T2105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.675602][ T2105] usb 6-1: Product: syz [ 1386.679885][ T2105] usb 6-1: Manufacturer: syz [ 1386.684494][ T2105] usb 6-1: SerialNumber: syz [ 1386.694605][ T2105] usb 6-1: config 0 descriptor?? [ 1386.979977][ T2105] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 1387.008002][ T2376] pvrusb2: Invalid write control endpoint [ 1387.009797][ T2105] usb 6-1: USB disconnect, device number 77 [ 1387.039705][ T2376] pvrusb2: Invalid write control endpoint [ 1387.045740][ T2376] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1387.055526][ T2376] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1387.063145][ T2376] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1387.073605][ T2376] pvrusb2: Device being rendered inoperable [ 1387.080627][ T2376] cx25840 0-0044: Unable to detect h/w, assuming cx23887 [ 1387.088519][ T2376] cx25840 0-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1387.100145][ T2376] pvrusb2: Attached sub-driver cx25840 [ 1387.113144][ T2376] pvrusb2: Attempted to execute control transfer when device not ok [ 1387.122371][ T2376] pvrusb2: Attempted to execute control transfer when device not ok [ 1387.132099][ T2376] pvrusb2: Attempted to execute control transfer when device not ok [ 1387.140675][ T2376] pvrusb2: Attempted to execute control transfer when device not ok [ 1387.148980][ T2376] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1387.168276][ T17] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1387.177600][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.185720][ T17] usb 4-1: Product: syz [ 1387.190049][ T17] usb 4-1: Manufacturer: syz [ 1387.194862][ T17] usb 4-1: SerialNumber: syz [ 1387.211498][ T2376] TUNER: Unable to find symbol tda829x_probe() [ 1387.231801][ T2376] DVB: Unable to find symbol tda9887_attach() [ 1387.238373][ T2376] tuner: 0-0043: Tuner 4 found with type(s) Radio TV. [ 1387.247122][ T2376] pvrusb2: Attached sub-driver tuner [ 1387.252597][ T2376] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1387.257890][T29987] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1387.265602][ T2376] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1387.274633][T29987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.299504][T29987] usb 3-1: Product: syz [ 1387.303692][T29987] usb 3-1: Manufacturer: syz [ 1387.308415][T29987] usb 3-1: SerialNumber: syz [ 1387.315202][ T17] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1387.317524][ T2376] ------------[ cut here ]------------ [ 1387.329000][ T2376] sysfs group 'power' not found for kobject '0-0044' [ 1387.335834][ T2376] WARNING: CPU: 0 PID: 2376 at fs/sysfs/group.c:279 sysfs_remove_group+0x126/0x170 [ 1387.345435][ T2376] Modules linked in: [ 1387.349445][ T2376] CPU: 0 PID: 2376 Comm: pvrusb2-context Not tainted 5.13.0-rc7-syzkaller #0 [ 1387.358345][ T2376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.368670][ T2376] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 1387.374509][ T2376] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 e0 04 13 86 e8 89 47 f0 03 <0f> 0b eb 98 e8 e1 02 d5 ff e9 01 ff ff ff 48 89 df e8 d4 02 d5 ff [ 1387.394473][ T2376] RSP: 0018:ffffc90006f2fb80 EFLAGS: 00010286 [ 1387.400628][ T2376] RAX: 0000000000000000 RBX: ffffffff863e38a0 RCX: 0000000000000000 [ 1387.408736][ T2376] RDX: ffff88810f861b40 RSI: ffffffff812a6723 RDI: fffff52000de5f62 [ 1387.416741][ T2376] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1387.419620][T29987] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1387.424919][ T2376] R10: ffffffff814b9dbf R11: 0000000000000000 R12: ffff8881171e9020 [ 1387.440999][ T2376] R13: ffffffff863e3e40 R14: 1ffff92000de5f98 R15: dffffc0000000000 [ 1387.449075][ T2376] FS: 0000000000000000(0000) GS:ffff8881f6800000(0000) knlGS:0000000000000000 [ 1387.458179][ T2376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1387.464821][ T2376] CR2: 00007ffc670bf358 CR3: 000000013e8b1000 CR4: 00000000001506f0 [ 1387.473077][ T2376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1387.481212][ T2376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1387.489449][ T2376] Call Trace: [ 1387.492899][ T2376] ? i2c_adapter_lock_bus+0x130/0x130 [ 1387.498374][ T2376] dpm_sysfs_remove+0x97/0xb0 [ 1387.503077][ T2376] device_del+0x20c/0xd40 [ 1387.507528][ T2376] ? __device_links_queue_sync_state+0x400/0x400 [ 1387.513916][ T2376] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1387.517873][ T7476] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1387.520019][ T2376] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 1387.529053][ T7476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.534846][ T2376] ? trace_hardirqs_on+0x5b/0x1a0 [ 1387.542942][ T7476] usb 2-1: Product: syz [ 1387.548092][ T2376] ? dev_fwnode+0x79/0x90 [ 1387.552258][ T7476] usb 2-1: Manufacturer: syz [ 1387.556661][ T2376] ? i2c_adapter_lock_bus+0x130/0x130 [ 1387.561375][ T7476] usb 2-1: SerialNumber: syz [ 1387.566700][ T2376] device_unregister+0x22/0xc0 [ 1387.576129][ T2376] ? i2c_adapter_lock_bus+0x130/0x130 [ 1387.581614][ T2376] __unregister_client+0x95/0xa0 [ 1387.586803][ T2376] device_for_each_child+0xf9/0x170 [ 1387.592115][ T2376] ? device_remove_class_symlinks+0x210/0x210 [ 1387.598281][ T2376] ? __radix_tree_lookup+0x211/0x2a0 [ 1387.603609][ T2376] i2c_del_adapter+0x37b/0x680 [ 1387.608477][ T2376] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1387.614499][ T2376] pvr2_i2c_core_done+0x69/0xc0 [ 1387.619605][ T2376] pvr2_hdw_destroy+0x179/0x3b0 [ 1387.624485][ T2376] pvr2_context_destroy+0x84/0x230 [ 1387.629704][ T2376] pvr2_context_thread_func+0x64b/0x850 [ 1387.635275][ T2376] ? pvr2_context_destroy+0x230/0x230 [ 1387.640740][ T2376] ? finish_wait+0x260/0x260 [ 1387.645353][ T2376] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1387.651676][ T2376] ? __kthread_parkme+0x118/0x1d0 [ 1387.656725][ T2376] ? pvr2_context_destroy+0x230/0x230 [ 1387.658792][ T7476] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1387.662181][ T2376] kthread+0x38c/0x460 [ 1387.674333][ T2376] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1387.679625][ T2376] ? __kthread_bind_mask+0xc0/0xc0 [ 1387.684757][ T2376] ret_from_fork+0x1f/0x30 [ 1387.689261][ T2376] Kernel panic - not syncing: panic_on_warn set ... [ 1387.695862][ T2376] CPU: 0 PID: 2376 Comm: pvrusb2-context Not tainted 5.13.0-rc7-syzkaller #0 [ 1387.704635][ T2376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.714694][ T2376] Call Trace: [ 1387.717974][ T2376] dump_stack+0x143/0x1db [ 1387.722316][ T2376] panic+0x306/0x73d [ 1387.726204][ T2376] ? __warn_printk+0xf3/0xf3 [ 1387.730801][ T2376] ? __warn.cold+0x1a/0x44 [ 1387.735206][ T2376] ? sysfs_remove_group+0x126/0x170 [ 1387.740395][ T2376] __warn.cold+0x35/0x44 [ 1387.744710][ T2376] ? irq_work_queue+0x44/0x50 [ 1387.749379][ T2376] ? sysfs_remove_group+0x126/0x170 [ 1387.754572][ T2376] report_bug+0x1bd/0x210 [ 1387.758933][ T2376] handle_bug+0x3c/0x60 [ 1387.763080][ T2376] exc_invalid_op+0x14/0x40 [ 1387.767569][ T2376] asm_exc_invalid_op+0x12/0x20 [ 1387.772528][ T2376] RIP: 0010:sysfs_remove_group+0x126/0x170 [ 1387.778349][ T2376] Code: 48 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 37 48 8b 33 48 c7 c7 e0 04 13 86 e8 89 47 f0 03 <0f> 0b eb 98 e8 e1 02 d5 ff e9 01 ff ff ff 48 89 df e8 d4 02 d5 ff [ 1387.798038][ T2376] RSP: 0018:ffffc90006f2fb80 EFLAGS: 00010286 [ 1387.804104][ T2376] RAX: 0000000000000000 RBX: ffffffff863e38a0 RCX: 0000000000000000 [ 1387.812088][ T2376] RDX: ffff88810f861b40 RSI: ffffffff812a6723 RDI: fffff52000de5f62 [ 1387.820058][ T2376] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1387.828115][ T2376] R10: ffffffff814b9dbf R11: 0000000000000000 R12: ffff8881171e9020 [ 1387.836073][ T2376] R13: ffffffff863e3e40 R14: 1ffff92000de5f98 R15: dffffc0000000000 [ 1387.844035][ T2376] ? irq_work_queue+0x1f/0x50 [ 1387.848710][ T2376] ? vprintk+0x93/0x1c0 [ 1387.852866][ T2376] ? i2c_adapter_lock_bus+0x130/0x130 [ 1387.858235][ T2376] dpm_sysfs_remove+0x97/0xb0 [ 1387.862941][ T2376] device_del+0x20c/0xd40 [ 1387.867317][ T2376] ? __device_links_queue_sync_state+0x400/0x400 [ 1387.873660][ T2376] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1387.879995][ T2376] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 1387.885825][ T2376] ? trace_hardirqs_on+0x5b/0x1a0 [ 1387.890912][ T2376] ? dev_fwnode+0x79/0x90 [ 1387.895356][ T2376] ? i2c_adapter_lock_bus+0x130/0x130 [ 1387.900724][ T2376] device_unregister+0x22/0xc0 [ 1387.905479][ T2376] ? i2c_adapter_lock_bus+0x130/0x130 [ 1387.910839][ T2376] __unregister_client+0x95/0xa0 [ 1387.915771][ T2376] device_for_each_child+0xf9/0x170 [ 1387.920964][ T2376] ? device_remove_class_symlinks+0x210/0x210 [ 1387.927021][ T2376] ? __radix_tree_lookup+0x211/0x2a0 [ 1387.932302][ T2376] i2c_del_adapter+0x37b/0x680 [ 1387.937063][ T2376] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1387.943040][ T2376] pvr2_i2c_core_done+0x69/0xc0 [ 1387.947932][ T2376] pvr2_hdw_destroy+0x179/0x3b0 [ 1387.952777][ T2376] pvr2_context_destroy+0x84/0x230 [ 1387.958393][ T2376] pvr2_context_thread_func+0x64b/0x850 [ 1387.963962][ T2376] ? pvr2_context_destroy+0x230/0x230 [ 1387.969372][ T2376] ? finish_wait+0x260/0x260 [ 1387.973968][ T2376] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1387.980300][ T2376] ? __kthread_parkme+0x118/0x1d0 [ 1387.985329][ T2376] ? pvr2_context_destroy+0x230/0x230 [ 1387.990718][ T2376] kthread+0x38c/0x460 [ 1387.994794][ T2376] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1387.999996][ T2376] ? __kthread_bind_mask+0xc0/0xc0 [ 1388.005518][ T2376] ret_from_fork+0x1f/0x30 [ 1388.011105][ T2376] Kernel Offset: disabled [ 1388.015543][ T2376] Rebooting in 86400 seconds..