[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 15.687676][ C1] random: crng init done [ 15.692310][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.46' (ECDSA) to the list of known hosts. 2020/06/11 21:54:27 fuzzer started 2020/06/11 21:54:27 dialing manager at 10.128.0.105:38129 2020/06/11 21:54:27 syscalls: 90 2020/06/11 21:54:27 code coverage: enabled 2020/06/11 21:54:27 comparison tracing: enabled 2020/06/11 21:54:27 extra coverage: enabled 2020/06/11 21:54:27 setuid sandbox: enabled 2020/06/11 21:54:27 namespace sandbox: enabled 2020/06/11 21:54:27 Android sandbox: /sys/fs/selinux/policy does not exist 2020/06/11 21:54:27 fault injection: enabled 2020/06/11 21:54:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/11 21:54:27 net packet injection: /dev/net/tun does not exist 2020/06/11 21:54:27 net device setup: enabled 2020/06/11 21:54:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/11 21:54:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/11 21:54:27 USB emulation: enabled 21:54:44 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x8001, 0x4000) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x10000, 0x20300) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/81) r2 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x3, 0x40000) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000180)) r3 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x100000001, 0x20c00) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x1ff) r4 = syz_open_dev$hidraw(&(0x7f0000000240)='/dev/hidraw#\x00', 0x0, 0x185000) syz_open_dev$hiddev(&(0x7f0000000280)='/dev/usb/hiddev#\x00', 0xfffffffffffffff8, 0x2080) write$hidraw(r4, &(0x7f00000002c0), 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000340)=""/221) r6 = syz_open_dev$hidraw(&(0x7f0000000440)='/dev/hidraw#\x00', 0x9, 0x90180) read$hidraw(r6, &(0x7f0000000480)=""/46, 0x2e) r7 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x4, 0x102fc1) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000500)=""/39) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000540)) r8 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x8000, 0x40440) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f00000005c0)=""/78) 21:54:44 executing program 0: r0 = syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x101, 0x240) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x100000001) r1 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x0, 0x80200) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x2}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x400840) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000140)=""/73) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f00000001c0)=0x2) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000200)=0x3f) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000240)=0xff) r3 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x4, 0xa80) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000002c0)=0x7) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000300)={{0x1, 0xffffffff, 0xe6d, 0x3, 0x8777, 0x200}, 0x34f, [0x81, 0x3, 0x1, 0x1, 0x5, 0xfffff804, 0x40, 0x163, 0x2, 0x0, 0xffff, 0x4, 0x0, 0xfffeffff, 0x6, 0xffffffb3, 0x8, 0x8, 0x7, 0x5, 0x3ff, 0x1f610000, 0x9, 0x80000001, 0x401, 0x0, 0x6, 0x5d9, 0xfabc, 0x5, 0x1, 0x0, 0xd43, 0x3ff, 0x4, 0x6183, 0x7fff, 0x10000, 0x3f, 0xcc2, 0x200, 0x2, 0x6, 0x5, 0x100, 0x100, 0x777, 0x8001, 0xfffffff9, 0x17, 0x2, 0x3, 0xffffffff, 0x7, 0x5, 0x8, 0x7, 0x4, 0x8, 0xa0c7, 0x9, 0x5, 0x5, 0x2, 0x6, 0x80000001, 0xfffff691, 0x101, 0x4, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x5, 0x6, 0x7fffffff, 0x1, 0x8, 0xfffff746, 0x3ff, 0x5, 0x0, 0x5, 0x2, 0x0, 0x9, 0x8, 0x1, 0x9, 0x7, 0x81, 0x7, 0x4, 0x3, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x1, 0x80000001, 0x400, 0xd73, 0xfff, 0x5, 0x4, 0x0, 0x3, 0x1fbe, 0x9410, 0x0, 0xfffffff9, 0x8, 0x20, 0xc8e, 0x80, 0x40, 0x60d, 0x20, 0x3, 0x1e, 0x19, 0x15ca, 0x1f, 0x1, 0x8, 0x80000000, 0x10000, 0x4, 0x8, 0x6, 0x4, 0x9, 0x4, 0x490f, 0x8001, 0xfffffffc, 0x1ff, 0x5, 0x2, 0x8, 0x1000, 0xbb9fad3, 0x3e38, 0x5c, 0x3, 0xfffffffb, 0x81, 0x235, 0xfffffc01, 0x0, 0x3, 0x2, 0x2, 0xfffffffc, 0x5, 0xd69, 0x1, 0x100, 0x3, 0xae, 0x0, 0x5, 0x1ff, 0x1f, 0xfc9, 0xcb1a, 0x6, 0x788, 0x7, 0x1ff, 0x5, 0x3, 0x9, 0x5, 0x3, 0xfffffffb, 0x7fff, 0x3f, 0x6, 0x9, 0x8, 0x6, 0x7, 0x8, 0x3, 0x4, 0x0, 0x9, 0x100, 0x9, 0x3, 0x765, 0x64de, 0x5, 0x4, 0xfff, 0x321, 0x1f, 0x4, 0x1000, 0x1, 0x9, 0x401, 0x9, 0x8, 0x1, 0x9, 0x7, 0x1, 0x29, 0x3, 0x7, 0x9, 0x4, 0x3ff, 0xfff, 0x1, 0x1ff, 0x10000, 0x8a, 0x400, 0x0, 0x76d, 0x8000, 0xaaf9, 0x3, 0x1, 0x800, 0x3, 0x3, 0xfe000000, 0x4, 0x1, 0x6, 0x401, 0x1, 0x3f, 0x0, 0x200, 0x2, 0x9, 0x3, 0x5d9, 0x81, 0x401, 0x7, 0x4, 0x15, 0xffff0001, 0x6ad, 0x0, 0x0, 0x9, 0x0, 0x9, 0x7, 0x4, 0x8, 0x80, 0x1, 0x6, 0x9, 0x3, 0x39, 0x1, 0x3, 0x7, 0x1, 0x6, 0x10001, 0x1, 0x0, 0x1ff, 0x8008, 0xc2, 0x3509, 0xbe, 0x5, 0x41d1a0d3, 0x1ff, 0x69d967cb, 0x466, 0x100, 0x2, 0x8001, 0x3, 0x2, 0x81, 0xff, 0x4c0, 0x3f, 0x2, 0xfff, 0xff, 0xff, 0x20, 0x5, 0x0, 0x0, 0x80000001, 0x9, 0x5, 0x5, 0x7, 0x7, 0xff, 0x124, 0x200, 0x2, 0x1f, 0x7, 0x6, 0x73, 0x7ff, 0x852, 0x10000, 0x1, 0x3, 0x7fff, 0xbe8a, 0x3d96, 0x6, 0x6, 0x1, 0xfffffff7, 0x3, 0xfdc, 0x5, 0x2, 0x2, 0x5, 0x1ff, 0x4, 0x3, 0x1ff, 0x800, 0x586d, 0x8, 0x800, 0x80, 0x942c, 0x5, 0x8, 0x38, 0x3660, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0x40, 0x7fffffff, 0x400, 0x2, 0x3ff, 0x8000, 0x3, 0x20, 0x3, 0x6, 0x9570, 0xf7ee, 0x0, 0x3, 0x5, 0x4, 0x1, 0x2, 0x39d1, 0xffff, 0x7, 0x6, 0x8001, 0x5, 0x6, 0x401, 0x6, 0x2, 0xfffff44a, 0xe5, 0x10000, 0x3, 0xfffffffb, 0x8, 0x8c70, 0x4, 0xc82, 0x1000, 0x5, 0x8, 0x9, 0xffffffff, 0x9, 0x7, 0xfffffffc, 0x101, 0x407, 0x0, 0x95, 0x7f, 0xffffffff, 0x400, 0x4, 0xcdf, 0x3, 0x40, 0x7fff, 0x3, 0x20, 0x81, 0x8499, 0xfdf, 0x9, 0x691, 0x9, 0x7fffffff, 0x7, 0x10000, 0x400, 0xad, 0x8, 0xb1, 0x0, 0x2, 0xffff, 0x7, 0x8, 0x1, 0x6, 0x9, 0x3ff, 0x10000, 0x8, 0xfffffbff, 0x5, 0x1000, 0x0, 0xfffffff7, 0x8f, 0x9, 0xffffffff, 0x9, 0x3, 0x1, 0x40, 0xfffffd66, 0x10001, 0x3f, 0xfff, 0x8, 0x9, 0x5, 0x9, 0x9, 0xfffffff8, 0x3f, 0x7, 0x100, 0xfffffc00, 0x80000001, 0x1000, 0x7, 0x81, 0x200, 0x1000, 0x6, 0x0, 0x0, 0x1b, 0x3, 0x5, 0x4, 0x0, 0x5, 0x5, 0xfff, 0x3, 0x2, 0x9a42, 0x1, 0x1, 0x6, 0x2, 0x7, 0x70f4, 0x80, 0x2, 0x1, 0x701c, 0x9, 0x4f, 0x6, 0x7, 0x6, 0x9, 0x0, 0x81, 0x400, 0x966, 0x1, 0xb6d, 0x1, 0x6, 0x2, 0x0, 0x6, 0x9, 0x8, 0x100, 0x4, 0x3f, 0x1ff, 0x7, 0x9, 0x9, 0x7ff, 0x7f8, 0x3f, 0x8, 0xbdb, 0x9, 0xfff, 0x0, 0x5, 0x101, 0x8001, 0x3, 0x401, 0x1, 0x6, 0x6, 0x8, 0x1, 0xfffffffc, 0x1, 0x86a9, 0x3, 0x8, 0xfffffffb, 0x1, 0xb26, 0x5, 0x607f, 0x4, 0x0, 0xfff, 0x2, 0xffffffff, 0x7, 0x3ff, 0x5, 0x1, 0x3, 0x80, 0x2, 0x2c9c, 0x3, 0x9, 0xfffffff8, 0x3, 0x8, 0x9, 0xfffffff8, 0x8, 0x3, 0x7, 0x1, 0x50f, 0x80000000, 0x9, 0x80000000, 0x1, 0x1f, 0x7ff, 0x3, 0x800, 0x3, 0x0, 0x1, 0x8001, 0x7fffffff, 0x1000, 0x63, 0x2, 0x3, 0x20, 0xfffffff0, 0x95d, 0x7ed, 0xa6, 0x5, 0x2, 0x1, 0x5, 0x8, 0x3, 0x3, 0x8000, 0x8, 0xca9d, 0x401, 0x5, 0x1, 0x5, 0x6, 0x800, 0xc9e5, 0x7, 0x3f, 0xfff, 0x9, 0x3, 0x8, 0x678, 0x7fffffff, 0x3, 0x7fffffff, 0x29c, 0x2, 0xfffffff8, 0x1, 0x40, 0xfff, 0x6, 0x9, 0x9, 0x0, 0x6, 0x4, 0x7, 0x3, 0x7, 0x4, 0x9, 0x200, 0xffff, 0x2, 0xfffffffe, 0x6, 0x3, 0x100, 0x3, 0x8, 0x1ff, 0x2, 0x20, 0xbd2, 0x5, 0x44c, 0xffff, 0x3, 0x8000, 0xffffffff, 0x1ff, 0x7, 0x0, 0xdf, 0x80, 0x2, 0x10000, 0x0, 0x718a, 0x3, 0x1, 0x81, 0xfffffffd, 0x4, 0xa2e1, 0x10000, 0x4, 0xaf800, 0x3, 0x2, 0x5, 0x2, 0x5, 0x6, 0x6, 0x200, 0x6, 0x8327, 0x0, 0x1ff, 0x2, 0x4, 0xfffffffe, 0x100, 0x7a6, 0x5, 0x9, 0x3, 0x0, 0x8, 0x7, 0x4, 0x7fff, 0x6, 0x0, 0x80000001, 0xc18, 0xfffffffc, 0x8001, 0x7376, 0x5, 0x9, 0x689, 0x1, 0x8, 0x2, 0x4, 0xd7bd, 0xffff741d, 0x8, 0x16, 0x9, 0x6, 0x8, 0x3b2a, 0xfffffff7, 0x8, 0x0, 0x80000001, 0x6, 0x1, 0x0, 0xffffffff, 0x8, 0x3, 0x0, 0x9, 0x7, 0x8001, 0x3, 0x101, 0x2718, 0x7, 0x81, 0xfffffbff, 0x6, 0x74, 0xc9, 0x8, 0x7, 0x2, 0x7, 0x400, 0x7, 0x5, 0xffff, 0x7, 0xff, 0x4, 0x5, 0x5, 0x40, 0x1, 0xbb1, 0x5, 0x80000001, 0x80000000, 0x9, 0x8, 0xff, 0x101, 0x7f, 0x3, 0x5, 0x8, 0x10000, 0xb1, 0x1, 0x4, 0x1, 0x40f, 0x0, 0x2, 0x2, 0x200, 0x1, 0x0, 0x521e, 0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x7fff, 0x9, 0x75a, 0x8, 0x2, 0x9, 0x7, 0x8, 0x7, 0x9, 0xfff, 0x1f, 0x1, 0x3, 0x3, 0x0, 0x8, 0x4, 0x6, 0x6, 0xfffffffe, 0x5, 0x69e7, 0x200, 0x6, 0x4, 0x0, 0x800, 0x0, 0x1f, 0x3, 0x6, 0x8, 0x9, 0x3, 0x8, 0x8, 0x93, 0x5, 0x8001, 0xffff, 0x2, 0x7, 0x3, 0x80, 0x100, 0x4cd0, 0x6, 0x2, 0x800, 0x0, 0x5, 0x4, 0xa209, 0x8, 0x605cbbc9, 0x6, 0x4, 0x9, 0x46d, 0x80000000, 0x8, 0x1ae6b11c, 0x800, 0x1f, 0x800, 0xc9, 0x5, 0x7, 0x0, 0x0, 0x50, 0x2, 0x4000, 0x3f, 0x3, 0xffff, 0x3, 0x0, 0x1, 0x6d5, 0x8001, 0x7fff, 0x8a9c, 0x5, 0x2, 0x5, 0x3, 0xa72, 0x8, 0x2, 0x39d, 0x401, 0xcdc, 0x8001, 0x9, 0x7, 0x3, 0x3, 0x7d1, 0x1, 0x8, 0xfff, 0x1ff, 0x0, 0x2, 0x5, 0x37bfcd51, 0x8d8, 0xffffffff, 0x8ca, 0x6, 0xfff, 0x0, 0x5, 0x7, 0x7, 0x7f, 0x8, 0xccb, 0x8000, 0x2, 0x4a, 0xffff, 0x0, 0x1ff, 0x5, 0x1, 0x1, 0xe1, 0x8, 0x2, 0x10001, 0x4f2, 0xfff, 0x40, 0xff, 0x7, 0xffffffc0, 0x1, 0xff, 0x8, 0x3, 0xc475, 0x2, 0x3, 0x6, 0x0, 0x401, 0x400, 0x0, 0x6, 0x4, 0x7ff, 0x7f, 0xfffffffa, 0x80000000, 0xffffffff, 0x5, 0x100, 0x5, 0x6000000, 0xe9aa, 0x2, 0x9, 0x400, 0x4, 0xffffff71, 0x8, 0x10001, 0x3, 0x20, 0x5, 0x1, 0x7f, 0xdf, 0x6, 0x6, 0x2, 0x8000, 0x2, 0x401, 0x0, 0x7ff, 0x1, 0x2, 0x2, 0x8000, 0x9, 0x0, 0x7, 0x6, 0xf3fb, 0x5, 0x800, 0x3f, 0x9, 0x1, 0x8000, 0x3, 0xbb22, 0x9, 0x4, 0x1f, 0x88, 0x3d, 0xfc79, 0x1000, 0x6, 0x4, 0x8, 0x18f5, 0x100, 0x6, 0x10001, 0x8001, 0xffff, 0x1, 0x8, 0x10001, 0xff, 0x8001, 0x7, 0x9, 0x750ee4cf, 0xa, 0xda0, 0xff, 0x2, 0xe5d, 0xf5, 0xffff, 0x8001]}) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000001340)={0x2, 0x2, 0x10001}) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000013c0)={0x5, 0x12, &(0x7f0000001380)="7778a22648ae9bd4a31c6b81c4a8e8dbd27c"}) r4 = syz_usb_connect(0x3, 0x795, &(0x7f0000001400)={{0x12, 0x1, 0x310, 0xfe, 0x64, 0x17, 0x0, 0x19d2, 0x1059, 0xdc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x783, 0x2, 0x3, 0x6, 0xe0, 0x1f, [{{0x9, 0x4, 0x91, 0x6, 0x3, 0xff, 0xff, 0xff, 0x4, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "b1479676"}, {0x5, 0x24, 0x0, 0xf37}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8000, 0x5, 0x72}, {0x6, 0x24, 0x1a, 0x1, 0x11}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm_detail={0x24, 0x24, 0x13, 0x5, "2ca31d08a057689e552f63429857462f0c48d1b31fcfc9247e17261fd2b2d8fa"}]}, @hid_hid={0x9, 0x21, 0x8, 0xb6, 0x1, {0x22, 0xee2}}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x80, 0xcb, 0x8}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x6, 0x8, 0x8, [@generic={0xcf, 0x22, "eefa856bbfde6c777ccb2bbcf98e70a2be9015e52164d4856f8b330513ce33dc1b6eda95cee78284302ac81414e3e75310b63cb4fc06e631d632d5cfe48c596a48b16b45c4a221daebc046d1796c3d3cf8c571b4b8b8906a7c7fd135bb446b9f43914dfcac9d344455c569b0879c90bad7fbb4554d37a2bf9afc470cb4a7702b84f8ad906aa10f461592ae2176e70352f6fa689c0c1a8725001d99562f50a011023d25cd8d7b493d3353087039b940b90c38812eabd83fea3f1c0c4ead989e73c48a31d6390e80df3b29fb9ca5"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x5, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x3}]}}]}}, {{0x9, 0x4, 0x26, 0x80, 0x10, 0xff, 0x1d, 0x67, 0xbf, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x4aa}}], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0x6, 0x2, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x20, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4}, @generic={0xb6, 0x8, "0319e43b7524ae0e125bbf188684d2bd7d79a5449592894f1abf7fc9f4f1947f30ed7c353882242c6cd30e287bc38eef45b02664a673c61e11d5945aab18d14a7728861f98b79e05aa89b1566b2103b9546b84562ca16bf5c03794bed090a1db9bd613afc097c220aac753f90456cfba3ba2cefa5543fed366a3d53ef6000e72b9f83e3be84ab707634c2019f7f3ed6c73c58a29f6eb145ff772043877bf13b78716fbc0a5b126679f4920696c1bb745f2dd08fe"}]}}, {{0x9, 0x5, 0xa, 0xc100d5a6d3d31cf8, 0x400, 0x1, 0x6, 0x3f, [@generic={0xd5, 0x6, "f19917f1693c04bdf5e9ac8a5c49125aa9481f446833d3705d8f4c93a256cf8834ba34e67aa1a136167fa7536bd2d7ca17fa87991c6e1cbd2f3e8b4ccb508039c6cfe8fe1c06ea00f010fa763f16f94d4b19b9963e50feaf36001f747fc932e5205871c19977d803601fa91dabdab9f4aa69deabd2db6760bf4175fc2133b00258ae4cbf1b6078e208060b4a66ecf238bbf31bc0552e1500e042ec9d13387d4d130c5dde1a5c693d100f7448db4f29011c3dbea5bfe18da498ace57e827011215838e79e761cb59c4628088a09f458c0082eea"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x3ff, 0x2, 0x3, 0x1e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe6, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0x0, 0x81, [@generic={0xe5, 0x2, "4abeb42e9dc992f97bc6217aec7bf520db97a65601eefe02ec8ed995595b9698f386765fb362164263add93b6df945e06d6309bcdb2ea3785a6de720f6b9639be05b20ae349bae3a166a95d6a8494fbaab7057a2d43f407aeacd4a6c5277f8ab7e4c80c35b5a3796575e106b090cd8a1e44aa08680b08ffb7f7b87d5b29a8a491fa980112f69d34cbba17980e06b06961ff82c56bf9aac81c2ef1f2d1352006af95eef10d56b9e1a27af2603c199f5e23db9559a948ce03595c4b5c8657fd4bcbcddd9c55c9b4f3fe315d8bee35b728204e3627bd5c215d5b70099a397fe7b4b300751"}, @generic={0xa7, 0xb, "ea37b5c5fdf32ec169286cb1e2606e70d2eaf64b21c74f4438de331ec740de33174be0d5a7cb0103a60ba5c7ee93d74b062041a1955cc697421c8e0f2894fdb8030c3b0318de8d435e7d23be4d785546f02cd736499d624db5463878b5d204b507655eec370c3dea6c41d7f27ec24a25cabc22ebf1f1c1effef64011174501c8d2056fe51468ae8a0c0f27aab8d01e2ef9692512c3a1d55b9afdbfc78849cb95416bf1ea89"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xff, 0x4a, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xd5c}, @generic={0x9f, 0x21, "b7d189bbade9bc9c1fc56370d4cc8df721369dfeb7dcbf14f3d7c3b0123ed6d33e574957df08f0c9b437de737c4b171362d089add17a9a3957c9f3316109a2699c5be8d522871ef2d5ccd75d7f718053fa3b90ca8ee9500a33f8c18b19c9b4d0cc744376719b7403be64422bff820a1ce84daf123c456cd3f125e76998185e52cd3803d5df73d64e29851469c630814a067572a00e36f5c06c8835d4d0"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x81, 0x6, 0x8a}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x2fe0}, @generic={0xae, 0xb, "d290adb34b7cfcbf438cf7ad2deb67809c7fddb865cc411274f7f84ef6256a6b1304cd933dae4f2e36bc906e077702a2a494d7d4ec6ab3717032d42ef60151aa49c2d967dfd989a37d8ea3fb3e1724697e900f34efd4ec55d367f6cd583202dbbd92de65f7b73267269d63875912de97034c92cdb38509bad661d0ca4d736473bfc1a2a3c663af707c21baacf3061f03751030732e3c1992984cf986cf24b72e4ef6a7c31a8708b93230060f"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf7, 0x1f, 0xff}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x1, 0x81, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1945}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x26, 0x5}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x6, 0xc5, 0x1}}, {{0x9, 0x5, 0x5ab9e9f258cece0b, 0x2, 0x40, 0xb, 0x20, 0x9, [@generic={0x75, 0x24, "62ec5455f451bae7cea6d547852abbbd88a74f7b84bd1ba23cf32a5ba88fb0dc4fe00ca7c08a49b9cc1538a308a5bdbc52c8b16b57fe4222edc839ce0fc390cdd5f0aa6acbf7304af3a2ee62222b0d8d50d6159998e65f6538a4b15a0af0f21ce43198e46bf0280347c6773311062f5bc482bb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0x24}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x3f, 0x7c}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x80, 0x10, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0x6}, @generic={0x5b, 0x21, "18271b1768e8aaadb5200b274ab013d32079d8d89205460b691b3368adc78764d80e0404290c3979d90fc132768140a4b92235632fdec6f5cc6cef95cfc2563a8c29d4ec515fcc6131d2ab31547026b5f91274fbbaeba1432e"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x20, 0x0, 0x7f}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x40, 0x9, 0x7}}]}}]}}]}}, &(0x7f0000001d40)={0xa, &(0x7f0000001bc0)={0xa, 0x6, 0x110, 0x5, 0x4, 0x67, 0x8, 0x3f}, 0x16, &(0x7f0000001c00)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xde, 0x96, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x8, 0x1}]}, 0x4, [{0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x820}}, {0x24, &(0x7f0000001cc0)=@string={0x24, 0x3, "1bba09c043229dab00591b66832a509e6dd1451c943e434690d047cdd66311109105"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io$printer(r4, &(0x7f0000001ec0)={0x14, &(0x7f0000001dc0)={0x20, 0x1, 0x8a, {0x8a, 0x21, "c4d6a2f3b8b9ec363d2c1f89d904fd4bec6cc07977695dd34e8e4d39ca248c26b7d89f7da1bbf093e19194e3cb22809129b80bbe37d52b60e48b5cb41c2ac0368ffbb13a19ebf99f1baa8831f57150e28f726eaac0cb6c6d8a792cf7d49a1dc4d6d6751ec0d6b32e78149dbb996a6432ccb7ced37d80491de161bc073cdf8ad085387133b54627bc"}}, &(0x7f0000001e80)={0x0, 0x3, 0x19, @string={0x19, 0x3, "cd667664c36894f8d0d979eb4c23988b7baa9a5a25d2b7"}}}, &(0x7f00000021c0)={0x34, &(0x7f0000001f00)={0x0, 0x1a, 0x6b, "fe2d5a5339057d415414694ec3f3643ae8da37f8a310f33d5240e0cd2a01f4a35cf07b97994ebe57f2523961de9fa75a8858e0152595ea1db1d92dd894cc41ee9f7426d17da125bd7472f716994d20f44db5e8866fbfcd1a6ae2d75d6f370381576f381e923948385d340e"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001fc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002000)={0x20, 0x0, 0xfd, {0xfb, "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"}}, &(0x7f0000002140)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000002180)={0x20, 0x0, 0x1, 0x2}}) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000002200)={0x0, 0x4, 0x0, 0x2, 0x1, 0x2}) syz_open_dev$hiddev(&(0x7f0000002240)='/dev/usb/hiddev#\x00', 0x1, 0x800) syz_usb_connect(0x1, 0x3cb, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0xdc, 0xf2, 0x2c, 0x8, 0xaf0, 0x7301, 0x4580, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b9, 0x2, 0xfe, 0x20, 0x60, 0x8c, [{{0x9, 0x4, 0xcf, 0x0, 0x9, 0x33, 0x96, 0x74, 0x48, [@generic={0x9c, 0x11, "0dafd5f7a6c6e83df562a3043ebf415131a9d9a9804cc92338d97879efe6f4d56308fdf1a0ab832a9bd75084fae5269cd985ae3d6fc24fbdd9b3c28c1109e3e12286585727f167636f6bec0ecf38877e909399f1c6889efb678f71ffdd4f3a8b7cfb95b960b2314c6aa51d3fce62b1e0691d231ef34e202e94b419f03e85dbe92bd91e6cc9d7874c08f93d3545ce4d41afae06ae4caa7a952cf5"}, @generic={0xf2, 0x29, "9b7fc07c42fafdbf27f3bab44872c9b76cbf45d7b2e3e007b5193000452c264f950ff86bcafa5ca6a0f5c4732fa5c292fa65027b3e00b7e5f724ff891ce97ace2d7e4ef59471a8bfa461dc9aabfb21790fdd96409f835b0e982c239760ec1ebae55e6c364b00c545948b91754c45abef5e9a4850001254f80ffe00b4084acb96956dd604e81f1ac6427d2155bd01a03e964ccf37e4134347a4a8f8d2725c325b57071d20978477760c91fb28ce14053a9505ffeb84b4fca6de0c1b1120ccfca19c6b60971dff85ca74d0e0a7d2261b3ce520cd85e5211e552dea84a98e26574eb8af916d8df8ebd6e253a92106c6d08e"}], [{{0x9, 0x5, 0x84, 0x4, 0x10, 0x8, 0x0, 0x0, [@generic={0x3b, 0x22, "035735b268670e3ad74e6125dfee283ef79554e2e0adfd29c5c3684d1a31b7a8202f6ddf64e5be1d3ab9b50f1cabd975370965d32060d12c7c"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0xff, 0xff, 0x4}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0xff, 0x1, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8c, 0x6}]}}, {{0x9, 0x5, 0xf, 0x14, 0x10, 0x6, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x101}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x6, 0x3f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x20}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7a, 0x0, 0x9b}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x40, 0x3, 0xff}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x8, 0x9, 0x8d, [@generic={0x7d, 0x8, "3ae2fee6347ad459cef068d6d7c2dad2e44456dbd61a9925f203b9fba709b228ef3070cf330b328bf038632331c25bd3850fb757d5e79aa5b095e6880a4f00be152c516dbee7298085a25219cd6f98d91766f4c78083f393e803e36e88dbae5362a0d2ae9a509e383c381f9bd428eee7e69f576279e418a8be46f8"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x22068756105a22d7, 0xad, 0x7, 0x69}}]}}, {{0x9, 0x4, 0x91, 0xff, 0x2, 0xc9, 0x90, 0x6f, 0x0, [@hid_hid={0x9, 0x21, 0x0, 0x3f, 0x1, {0x22, 0x408}}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0xc3, 0x0, "84"}]}], [{{0x9, 0x5, 0x4, 0xc, 0x20, 0x6, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x64, 0x7f, 0x8, [@generic={0xb9, 0x31, "b2a10da6a46e38b6467bc876889d958dfd6f92bdbc7145e1c748889b9a66e5a34be1af7b535891133f2c6618b7a20b69c5a232b1a19a72f2c26b5b7830291ee1326219720dc828f9512f361346f75036fa07bee26c00374096795ebb8d4b30ee6789cdda52a8747077ddd8ea1a80cf8b4fe7afda5f58e084c27cadd9c898325265fd4c565c6850324308f7dfa57a57132094c1ec8e5fea48c4a82b219837be6efa16ab58c2ea583acf3467afbc6e1a6f47fc2ca8a95a24"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8000}]}}]}}]}}]}}, &(0x7f0000002a80)={0xa, &(0x7f0000002680)={0xa, 0x6, 0x300, 0x40, 0x7f, 0x6, 0xff, 0x6}, 0x1f, &(0x7f00000026c0)={0x5, 0xf, 0x1f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x3f, 0xfa, 0x5, 0x80}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xa3, 0x0, 0x200, 0x1ef00, 0x1}]}, 0x5, [{0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x41d}}, {0xd4, &(0x7f0000002740)=@string={0xd4, 0x3, "a6fef5f74cb0944d50a48d359e82c51ffde0ebd5e7a82c7f5b85fac5d30fbd6ef527bffae45ee064fe5d0062e540476ff4f46a71c0edfeef5867fd3a127a32077bd460b5e911e733067a53e432f5b4cbca165bb1b6269eca98ccd4b0096d32977ab74bba616c37213567eb96e20ab20de0c1033bb1da8053f5602a82a9603ab0c4340bd02b0d3c32fa558c21842bdce4f9eded705422e2e8fc4ba43aceef74ba406fc18fadf6e51fe0fbaa74e801fdfe5047dd2973e0345db96936d710f1e9473891f39299dba1e163ae2a9db95e6287bb16"}}, {0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x801}}, {0xda, &(0x7f0000002880)=@string={0xda, 0x3, "99ceef5557de0dd240158e26c6ed73afe1f8f04713a9905bf6a8e8c5fa2228daff30ad4ee23ae2401c1656990b68e84a2314122b6f20725e31a22600f2b133d90dba7b6578a9615d843eba7dcb18b88244549f363eaf5b944b4384afdf0d7bb53dd25aaf205a832863f867b4fa99afdcaded24cae730d9e51330c8656993c6f1fb1eae1cf94d6ff7ad76d4c4a08ab61c0aa4722df4160748ad9c2689be35c5e98a7e2284be9aed5532aa0ca2dc1004e20140be7240e1e598c3408e98f7a1e37eec7b0e2702e5cd15cf79f609910d90c82ddabd7fe89be328"}}, {0xd3, &(0x7f0000002980)=@string={0xd3, 0x3, "a70337d25a37ce85af8de6e1faa4a5b595de816a1654a9429f0b1fdd4884258405b0176ebc81d58053e3a3c1544e029af9a87481a2ab708b206f7d63c027c1e7404b96f6c73c29ac79652436e33344fe5c00470fa516cf70b8a7193c88ba4b761dfe3352378fcf041eef4a9b7419e39faba81a13d74bd55d2c4e19cc8911f0a685e5583d9ccefbd1e006e6978700ead592a13b5f7139888973b39f9900abdb2bc5ba91ee179323bfde7d897961816cf39e3248b61a1b8e08ce3418242dd25abf665dc5d9789a9aedeefa6528119a838920"}}]}) 21:54:44 executing program 5: r0 = syz_usb_connect$uac1(0x1, 0x9e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x4, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x2, 0x6, 0x81}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, "92"}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x4, 0xfa, "1f1a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x7f, 0x81, 0x0, {0x7, 0x25, 0x1, 0x81, 0x1f, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x3, "ec07b12e"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x0, 0x0, "10"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x20, 0x7, {0x7, 0x25, 0x1, 0x0, 0x80, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xff, 0x6, 0x2, 0x40, 0xf8}, 0x73, &(0x7f0000000100)={0x5, 0xf, 0x73, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0xd, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x0, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "fd2888a4ba8fb9cd93a0d71bb07fcf08"}, @generic={0x49, 0x10, 0x3, "eee21c68aafdd000e1426204189444f5acc114b9d750efb30607ca9b15981d899ada9285efcd5f89156e2ac1f2883d1f0ef96d4d1771c2d8356f16aaa4847ae5260e53e87dcf"}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x200a}}, {0xd6, &(0x7f0000000200)=@string={0xd6, 0x3, "4365bcf410e1893e080ea1d12498726d9957cecf3ab673138c5384abbb9785a03f59ffbb9bf1a7770dcdb2e8277a01791670112193ac1cadf89a1381a4cefd159709b4d169a4644a0f1e80d9a299ac9d545d7f2328a2f9597e6c5c739946455a75e671b973ea51c65e1bfd10579bc4ae7685ff0ae56f3e2558b5248f3ce079cfee4b07533640b3b6f60b183544fc1b228f5128e9ea7d2bbb096af954a2de50a9b5bb7992295eb1864021e586f71289408c6b0a2519698fb6f8616b0e3457443ec9f9361c80afa8c099b310f4cbe72774453b64db"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf1c19b60caa686ca}}, {0xf2, &(0x7f0000000380)=@string={0xf2, 0x3, "70b40fcf933c8fcc55d80312980b3540e4302e29e19328f1299deace7fe8e828853e49e7c38d71a97f4ca59a64e088c44d3fad88f1841dbfe671ae975093325dabaca3b2b2b9825e96e9d547f3f142558ff59397d0641cf2e038cc443b9576fb6ae1765d7452d5ff8955fc9fb3b0a17130eb1b8482ee30d9ce4542ecd004c305eb718d584c5f7749ba98ec5580351b91d3d1be69d141fe5e51f4edb95d1495e8487864639000fa57e68c1811ae349bdd2a4863203fc7c097fb10385503655bd1630f493c55a76e463a540f70bf3a7378539784952286a1883a29f6bb02da8acd957a6f289b0f211a3c4ac1d09535c673"}}, {0xfa, &(0x7f0000000480)=@string={0xfa, 0x3, "aced6be419563d9b68b97a564e4ebf4602d68994a3252a1bc54cacca2a81a36f6b583f4c24e07e1a569500b5f5c61c0cfdfbd3effa9ecb11e1ed00bcc933f5a8d84648fa6f00aca22f7c9e5c6ac8486284090c8d45fbc3067b5425e6e8ccb1ab1f0799d059c20ab60a9be7da0adbb9a6244c99c27ba9d48bdec6ec58fdb284fc3f9568feff8040046fa5b153b92a239224c0547241b3db439ed4fdbb5e8519abd00b32e13f392caf80f1b7827b49cc36842925d8536d032a6e35289565255cfea4819e25e3a2b01a630505818e92733fc0a16331a8ad8db3838884745d69c7a9b11a078c80af845730f3e663a45ee3b12097f824fed86d41"}}]}) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000600)={0x20, 0xa, 0x75, {0x75, 0xd, "99e13167003be68ec452a3f7820957293f567967e44cdbe59558750b7cb0c2c555f25051d6656cea257bae6a45abbf7d770c302b343967c447fe6db0648acda9b9cc123022e345e8060a1bc14f0233e35f83056db938386bf8b6c5d9f6b85fee3aeb5d72d36b5b16eb4a80170834bd4ccf1576"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f00000006c0)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x3, 0xb3, 0xfffe}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x2, 0xb6, "a597a999", "0a0bc29a"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x2, 0x6a, 0x7, 0x2, 0xff, 0x6}}}, &(0x7f0000000c40)={0x84, &(0x7f00000007c0)={0x20, 0x16, 0x8e, "7ee8ec12b83581d7ea2de7a03830c8d71785eb12c7c8e4b779b244167b8dcde730dc42a0553f4bea95b5b241bf5eff978691cd77550c15580eab0d9012d24866dd2c7a4892684774f21129d96d47ce9e91487bec04ce9c8abaa504bf810b799725b02c875f7eaea1816169100e4836bae917a992e354feb8a581ef5b9a27cb467a3882525286b1abeb0075dd2440"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000008c0)={0x0, 0x8, 0x1}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x200, 0xab, [0xf08]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x9, 0x1}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "0cb1"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @dev={[], 0x3e}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "4201"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x42}}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000d00)='/dev/usb/hiddev#\x00', 0x3, 0x50000) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000d40)) r2 = syz_open_dev$hiddev(&(0x7f0000000d80)='/dev/usb/hiddev#\x00', 0x7, 0x200) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000dc0)={0x2, 0x1, 0x4, 0x5, 0x2, 0x50}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000e00)=0x3f) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x54c, 0x3d5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0xe3, {0x9, 0x21, 0x8000, 0x80, 0x1, {0x22, 0x79c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x6, 0x8}}}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x250, 0x8, 0x5, 0x40, 0xff, 0x1}, 0xb0, &(0x7f0000000ec0)={0x5, 0xf, 0xb0, 0x4, [@generic={0x6c, 0x10, 0x4, "2bd65a541b1f972c5832fcd302af830e58098b55a7ab0a78546a60ebe3249d0121ae9855eceb2ae6def4d6196dc07e4b48650bc9d1308a0bef408ce8acb61fffd0f8945e9b987371c94a14e38738aa545acbcf1ffa692120f2e89fc55d81d8e5d8cb857cdf9290d537"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x5, 0xf, 0xffff, [0xffc0, 0x3f0f, 0x0, 0xc0, 0x0, 0x18]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c58122fdeda823e6ed3b60bc0e79f708"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x0, 0x8}]}, 0x3, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001240)={0x24, &(0x7f0000001080)={0x20, 0x0, 0xc6, {0xc6, 0x5, "8eb64a116ae084ebfb4d93b3a109c956b5cf5054d93e7d5035b65f2a0d599c8466dd3b77f7890e10d1f5c61b1581ef461a5edfc472a82a0a2a11ca59fb250eeef2905126f18a27f18f1ae0262a5863dee7041a326e5c62494413f983a250e648c805a42bc62bf0aad4edd8cc55cfb3975e5b7662a78a6c96e11aa20f372c01db38bbfa5b0e6a8d48e1ca13c20de2816f21307ec5fd408d626a52a7b4d56547255c1563cb74ba3493cd254cd0fd71d83ed60e8a575fe5ff4ecaaf6faa5251ffa1f87bffdb"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f00000011c0)={0x0, 0x22, 0x1e, {[@main=@item_012={0x1, 0x0, 0x0, 'c'}, @local=@item_012={0x0, 0x2, 0x19}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "ac45a2d0"}, @main=@item_4={0x3, 0x0, 0xa, "fcd13bb9"}, @main=@item_4={0x3, 0x0, 0x2, "b741ee75"}, @global=@item_4={0x3, 0x1, 0x4, "ae8e18b9"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_4={0x3, 0x2, 0x3, "4402c251"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x2c0}}}}, &(0x7f0000001400)={0x2c, &(0x7f0000001280)={0x40, 0x8, 0x6e, "3a7c3e7bc5d9a6da493a48b45f43807760470802be465a86448c8d457a6f8efa6213dfd00ed4681c8db5d5adec94e5f298ee70afae192a7c1d3f5e5afeb0424c48d7107070f9eb031e0e8e5e9d44463a1f91cb2675d4e7d937cad7194f2b4e3de22736ac2581a7942c006218f70a"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000001380)={0x20, 0x1, 0x10, "991e48ed532af25412365862997b39d6"}, &(0x7f00000013c0)={0x20, 0x3, 0x1, 0x3}}) r4 = syz_open_dev$hiddev(&(0x7f0000001440)='/dev/usb/hiddev#\x00', 0x5, 0x20200) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000001480)=""/56) r5 = syz_open_dev$evdev(&(0x7f00000014c0)='/dev/input/event#\x00', 0x1, 0x410480) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001500)=""/122) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001700)={0x24, &(0x7f0000001580)={0x40, 0x30, 0x81, {0x81, 0x23, "8ec2308592692c9f5aa2e69f9cde10c308a0ce795f7436184480ca756f3ebee31bb63cd030e95a0b3e7a7a580167a76266e282b903b04fb69f0fd36ab30950066f2134c6f3437f45f08e12bf3d5676d574c9e18787df678471548253933391a015149bbf17f3c9e37b37699a15eeb6ef279dd87b7246ceacf2bb5e637b3ebd"}}, &(0x7f0000001640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, &(0x7f0000001680)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x0, "ff99cd86"}, @global=@item_012={0x0, 0x1, 0xc}, @local, @main=@item_012={0x0, 0x0, 0x3}, @local=@item_012={0x2, 0x2, 0x3, "1565"}, @global=@item_012={0x2, 0x1, 0x4, "d8a0"}, @local=@item_4={0x3, 0x2, 0x4, "84a2241b"}, @global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f00000016c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x8, 0x1, {0x22, 0x4ae}}}}, &(0x7f00000019c0)={0x2c, &(0x7f0000001740)={0x0, 0x1, 0xf0, "c80a3548f6902e8565f4d7ae9f8a6a0692c8a8788e74c70b9939e9e0a14c3d2bfa7a1f2c7806ba25110b1dcd6730c822eb5e48a32142b675389a45afdfc2691bcc40a4d3b80ae31196bcf7e1c8268ad31a0696508e77ef2127794b8fc64f14ead86d6a6d8723d969248d10710c66efbb7609513b7d42bfb7e1fa5df6b9ae6ef75ec0fed41326614959c58f1d8d6dc6109d1dc7f823cdc111acb038be130f18c44aa3d99ab7c5525c72e5caad2eeb573c21bdbb1705a1c2f5a5973c7a254bbb46e46838e8c943d0d4fd58851a66e165a5a992535ae5207ffc5f6fcea7bb0cf7e2d19a16d912614b2f7ab496b1c29d7b50"}, &(0x7f0000001840)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001880)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000018c0)={0x20, 0x1, 0xa9, "eaa7cde2a0e009e80189a1801f2ba896cf75f5444722e58caeebbc10e09752c141fc897600c3bc7b149144b19bbefa5fa1aa91619387d12fcabfcb24c109db9fca7cf8b21efd753ef1f2c12fd6bfbb4ec33807cd4c38d1feec731fc8708a571066833335aa305e8fbe068a0f97671e8d494da483b207ee4fd8624bf38cc2a2bfec5f635d7af8bd17b948a1bf5d9b3127fb0f0fb57322faccfd6216958dafa18d03e19c0ce9b1e0814e"}, &(0x7f0000001980)={0x20, 0x3, 0x1, 0x1f}}) syz_open_dev$hidraw(&(0x7f0000001a00)='/dev/hidraw#\x00', 0xfffffffffffffffc, 0x4000) r6 = syz_open_dev$evdev(&(0x7f0000001a40)='/dev/input/event#\x00', 0x9, 0x100000) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000001a80)=0x7fffffff) r7 = syz_open_dev$evdev(&(0x7f0000001ac0)='/dev/input/event#\x00', 0x3, 0x80) ioctl$EVIOCGABS3F(r7, 0x8018457f, &(0x7f0000001b00)=""/13) 21:54:44 executing program 3: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x52, 0x0, 0x0, {0x8000, 0x1f}, {0x3, 0x2}, @period={0x5b, 0x1, 0xcda, 0x3, 0x1ff, {0x6, 0x2, 0x2, 0x12}, 0x9, &(0x7f0000000000)=[0x2, 0x800, 0xc00, 0x9, 0xa33, 0x8, 0x2, 0x0, 0x0]}}) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfff, 0x2) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x2, 0x8, 0x9, 0x9, 0x8, 0x2}) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x8, 0x8100) r1 = syz_open_dev$hidraw(&(0x7f0000000140)='/dev/hidraw#\x00', 0x2a6, 0x4800c1) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000180)) r2 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x8001, 0x80081) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000200)=""/198) r3 = syz_usb_connect$uac1(0x1, 0xf5, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x1, 0xc0, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x7f}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x4, 0x2, 0x3, 0x3, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x6, 0x4, 0x7f}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x6, 0xff, "28b0aa6bfc98"}, @extension_unit={0xd, 0x24, 0x8, 0x2, 0x1f, 0x7, "223a35fd9708"}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x56, "25c6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x6, 0x6b, {0x7, 0x25, 0x1, 0x0, 0x2, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x20, 0x2000, 0x1f, "127525fa07523e"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x4, 0x0, "6fc7", "f98f8a"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x3a, 0x0, "9b9bf2156e18626b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x750, 0xfeff, 0x0, "2f9281270b0b51"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1001}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x81, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0xd3, 0x9e, {0x7, 0x25, 0x1, 0x2, 0x81, 0x20}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x1876dc8ce7dacb8e, 0x8, 0x5, 0x3f, 0x10, 0x9}, 0xc, &(0x7f0000000440)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x5, 0x4318}]}, 0x3, [{0x7f, &(0x7f0000000480)=@string={0x7f, 0x3, "a0e31ff924a36a545ef45a23f037075368f9a549ef7eba524c61f8e15016e35ac744267673e9936f89bab0612afa1950516c95e9c72a5cc37d0844be3e18d7c65fc3d4d7e15919d02a32a3da63d12a59fbe79b65c621b4944429234a103348c595d4a45f6c050e7d463afcd6b51e4af3ae1fb1b2a3100f38dbdba69ab4"}}, {0x87, &(0x7f0000000500)=@string={0x87, 0x3, "0de6642603ad3ed5369684d35e751463716c5bbbace2cabbe8d4e0ca69a49e40cac329100cced5876fb79b1a7b4439b5c62d946f516543d5443a2231a471c3a64163ad2a294ea4de5b3c771436fc437f673c47bcdc830649102dc8c3a126fafc0cb58c6c08c1627189b0d26a936c453da5d9c264287233db025699e8a25e69f85c92cb322b"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x20, 0x4, 0xc5, {0xc5, 0x24, "53e978582007af3e244ca7c00e0449e1d47aece2e6150dd62728b135e6c4cd69b4ecfda19c3be3d1bc25907d69b9456a151c58c126f35525ca7743eafc82d953af4a89070bddff2befa17270a94aca42b88dc5e09b58fc90e6e6c296daf446152877439515716bde176ea54d4136a79af8296b695ce702f4202567e36529e5bd20fb9d2990458193841f69d42b890f5deacba94b1c1cf09c2ad216d25ff9e3c97a8a447d576cdf759fa020bb4f866d1cd39780c1e37923bff3485e63bdfb5e6fb0abdd"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x20, 0x1, 0x18, "4f265010492101a12f65c55b84c6cd49a1ef84bdcc3baf1b"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000880)={0x20, 0x81, 0x1, "1f"}, &(0x7f00000008c0)={0x20, 0x82, 0x2, "ffe2"}, &(0x7f0000000900)={0x20, 0x83, 0x1, "82"}, &(0x7f0000000940)={0x20, 0x84, 0x3, "122bb6"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "2309f9"}}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000a40)=""/186) read$hidraw(0xffffffffffffffff, &(0x7f0000000b00)=""/11, 0xb) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, &(0x7f0000000b40)={0x20, 0x2, 0x12, {0x12, 0x7, "78509a54c1c02e2509fcb43c5384ec6b"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000bc0)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x90, 0x3, 0xfffb}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x3, 0x9ae}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x20, 0xf00, 0xab6, [0x3f00, 0xff3fe7, 0xc0c0]}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x9, 0x0, "59b36a39", "5ed8ecc8"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x5, 0x7f, 0x5, 0x6, 0x200}}}, &(0x7f0000001180)={0x84, &(0x7f0000000cc0)={0x0, 0xb, 0xea, "577a9419eaf619d65bf3dfbef0a6ca7997a5a1a1a7eb245cebab36d273b6cdd3dd16340110daa6c8bd9f2011a8590aa2039ff6df9a52605b1494ccd67ce88e3ec3826437a96740118a55ec9c1c1ed1c42389527d24359fdbcc49623dc6c5208a0389420ea2e0efdee9b84a1eedfeafa18a62b89f0b62b5b31154a4fba9e1cd936b4eba2e51678d479486f6c888f2176e08a78f39004f27fe9df766ace31ecc4e7ace223dad8f3f173f8b3b892faf7bce06190d1cb6d2658bc1efeeb7c89b579d8716491fa2b14686c77fcd16ddf9a339c72f94786efed28c4cfbc99d9dfea3cd8898a69ffc8680df1423"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000f40)={0x40, 0xb, 0x2, ':<'}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x17, 0x6}, &(0x7f0000001040)={0x40, 0x19, 0x2, "91c6"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x7630}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0xdc}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x25}}) read$hiddev(0xffffffffffffffff, &(0x7f0000001240)=""/25, 0x19) syz_open_dev$hidraw(&(0x7f0000001280)='/dev/hidraw#\x00', 0x3, 0x100) syz_usb_connect$cdc_ncm(0x1, 0xd3, &(0x7f00000012c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x2, 0x1, 0x7, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "54e2ff"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xc0c, 0x4, 0x1}, {0x6, 0x24, 0x1a, 0x1ff, 0x6}, [@mdlm_detail={0x4f, 0x24, 0x13, 0x8f, "d742c68887b209205e97d4fb9e787aa38b157abe842e5877529cb5f05d8041edb1c927da94684d7a1885570e26c740a9316ab4e0338f4f885ed911cafa15cab6601a7595069f5d676f742c"}, @dmm={0x7, 0x24, 0x14, 0xb3, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xfff, 0x2, 0x0, 0x80, 0x7, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x66, 0x54}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x1f, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x4, 0x6}}}}}}}]}}, &(0x7f0000001500)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x110, 0x0, 0x2, 0x4, 0x10, 0x81}, 0x5, &(0x7f0000001400)={0x5, 0xf, 0x5}, 0x1, [{0xa7, &(0x7f0000001440)=@string={0xa7, 0x3, "954a9008051c3e720d390bbced1e300bb27a6593788b8c0e27122268bd0cd94a7cd04ea3a8ce51c2e5ce0a4f7a9e2012c8edd1d54bc677189af2c25edd517dd24574d963809d978179ec53578a1037549325a20ee18c52019820217c7b8a2dd69fa8f8b37c419c91362d30538ea9d9259703ed9a1f1714c00b12085dbc9434f31bbd1395e0c874149b967874ae9fa2d126fb539a4ab19ddc0c26e7f292b51be439287826fd"}}]}) r4 = syz_open_dev$hiddev(&(0x7f0000001540)='/dev/usb/hiddev#\x00', 0xf41, 0x4000) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000001580)=""/246) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x60, 0xbd, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x8a3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x2, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xc1, 0x74, 0x7}}]}}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x0, 0xe, 0x6, 0x3, 0xff, 0x1f}, 0x156, &(0x7f0000001700)={0x5, 0xf, 0x156, 0x6, [@generic={0x7c, 0x10, 0x3, "beaaa074d3fdb6b80598ca37bc6bff8b1399ba9fd585d08d8c150b868fd0ae711621b525ddc2700dddfc19bb567d0a79618a5acf47c1061b82e13e7abe4af3733bc77f26c27ab8d16039bad06406d748dc51f05ec7d966f0911df25ae48a8209115077e84b286ffb49a165c2adb98685dd101c2b5ca3cf3140"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x3, 0x9, 0x6, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x0, 0x81}, @ptm_cap={0x3}, @generic={0xb6, 0x10, 0x4, "573284db06a5d79c9e85c674a385d89e32441837c7781fb8041337e20bca1dc5f3cee5b49e23027d01bf7a05c9e11617137280afb50373ed87d34bbfb96c9ca5361345959108106c8642de4d315626ab92258e404a518ab2549297e4adde09e851fb69332f0faea22f11311afa1d1451ace1f98ceb06b38cf2f0693e82a6b0b8dd22b6fd6fb5d859b554f3cd477a3a5e51d351a1f65ff111fb71cf372284c5110d17f81f62d18664127ec49d1e9aec728cbd01"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x20, 0x7fff}]}, 0x3, [{0x16, &(0x7f0000001880)=@string={0x16, 0x3, "226353a2de7c5e6670170cb0bded39a87b90ed32"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x42c}}]}) 21:54:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x100, 0x10000) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/155) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x523801) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0x2) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x1, 0x20000) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000001c0)=""/246) r3 = syz_open_dev$hiddev(&(0x7f00000002c0)='/dev/usb/hiddev#\x00', 0x3, 0x181040) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000300)={0x3, 0x201, 0x3800000, 0x7fffffff, 0xdf, 0x81}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000340)=""/205) r4 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x45, 0x40c000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000480)=0x1) r5 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x1, 0x4a4001) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000500)=""/177) r6 = syz_open_dev$evdev(&(0x7f00000005c0)='/dev/input/event#\x00', 0xfff, 0x4040c0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000600)={0x10001, 0x400, 0x9, 0xfffffff7, 0x1f, 0x5}) r7 = syz_usb_connect$cdc_ncm(0x3, 0x94, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0xf5, 0x80, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "f3138b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x81, 0xffff, 0xae}, {0x6, 0x24, 0x1a, 0x9, 0xa}, [@mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x8, 0x1}, @dmm={0x7, 0x24, 0x14, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x8, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3f, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x40, 0x9, 0x1f}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x42, 0x30, 0x1f, 0x20, 0x2}, 0x23, &(0x7f0000000740)={0x5, 0xf, 0x23, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7f, 0xb5, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0xf7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x1, 0x8}]}, 0x8, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x423}}, {0x2b, &(0x7f0000000800)=@string={0x2b, 0x3, "82f393f0dba5d6362a9cc235550ef5f792694314c6aa351bfaf0f72106566ee13f6180cd885722596d"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000a80)={0x14, &(0x7f0000000a00)={0x40, 0x30, 0xa, {0xa, 0x30, "0be9bd032e98cfe9"}}, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)={0x40, 0x9, 0x71, "f1b23bd97929d0a689621aae59ddc67cf774557edf99780804824982a3a170e9a16fd2e8bea19cf0c5fafa612bcf2e7781865c6e564fea9aa3a9e9eaa952ac12c6683c51d76ec4d550051168f41a91a7d1c461056e6204b2d25bd6f26c7092e282ab9ad48d8ff7faeb3f2a660e420388bc"}, &(0x7f0000000b40)={0x0, 0xa, 0x1}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000bc0)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x0, 0x0, 0x20, 0x1ff, 0x100, 0xfff, 0x4, 0x1, 0x8, 0x2}}, &(0x7f0000000c00)={0x20, 0x85, 0x4, 0x89}, &(0x7f0000000c40)={0x20, 0x83, 0x2}, &(0x7f0000000c80)={0x20, 0x87, 0x2, 0x759}, &(0x7f0000000cc0)={0x20, 0x89, 0x2, 0x1}}) r8 = syz_open_dev$evdev(&(0x7f0000000d80)='/dev/input/event#\x00', 0x81, 0x8c00) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000ec0)={0x11, 0xde, &(0x7f0000000dc0)="23356305cac06d9ac8c0a2fe7b84d18df10419b262b8c90236f40eea19d663b5046d91aad9f7aa04c80105f4cc03ae28a20828a3412cf72efeac89e42f74f02ae769e61597e4b9ae66fed788eb0b281cfc603e9242ce798d3a2bd8665404c0fbd6442b723480632dacaf3296e31173621a28ebeade4d73f580ccec4a12021c731c7ab859a465a2e1e5d10799b23b4e6458de83b438684f72cbe6881b04a215ab72f17df1cb77988400cc7f2e04ae72db7de93d0d310cc69ec981a0e74f763f5e82406e6537aa90890c1a899a42cf1cbdfc94a064627b56b45a38fba9570b"}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000f80)={0x12, 0x30, &(0x7f0000000f40)="49712d846ee36a16fa99047c3a4d40dc0cabac8d865f383e30b12ba19bdcb49687794d4cb2dbf13de26af722db037d17"}) 21:54:44 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8ca, 0x800) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/4096) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000001040)=0x9) r1 = syz_open_dev$evdev(&(0x7f0000001080)='/dev/input/event#\x00', 0x0, 0x81) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000010c0)=""/164) r2 = syz_open_dev$evdev(&(0x7f0000001180)='/dev/input/event#\x00', 0x3f, 0x82600) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000011c0)=""/199) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000012c0)=[0x3, 0x3]) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001300)={0x8, "93403bd803766f20fb64e3f545e03e612c2aa90cb18aeb56e230b382d63717d4c5277464ef309a9ddc22344fd1ebebafa677be4eb2c8ac0ebc783c8ee325448a"}) r3 = syz_open_dev$evdev(&(0x7f0000001380)='/dev/input/event#\x00', 0x3c, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000013c0)=""/64) r4 = syz_open_dev$evdev(&(0x7f0000001400)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000001440)=""/33) r5 = syz_open_dev$evdev(&(0x7f0000001480)='/dev/input/event#\x00', 0xdcf, 0x10000) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000014c0)={0x57, 0xa67f, 0x4, {0x6, 0x3}, {0x3108, 0x4}, @const={0x2, {0x8, 0x1, 0xffff, 0x800}}}) r6 = syz_open_dev$evdev(&(0x7f0000001500)='/dev/input/event#\x00', 0x660b5765, 0x2000) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000001540)=0x3) r7 = syz_open_dev$evdev(&(0x7f0000001580)='/dev/input/event#\x00', 0x7f, 0x402080) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f00000015c0)=""/32) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000001640)={0x5, 0x7f, 0x10001, 0x1, 0x21b, 0x80000000}) [ 40.349937][ T373] cgroup: Unknown subsys name 'perf_event' [ 40.383217][ T373] cgroup: Unknown subsys name 'net_cls' [ 40.395462][ T374] cgroup: Unknown subsys name 'perf_event' [ 40.400976][ T376] cgroup: Unknown subsys name 'perf_event' [ 40.401466][ T374] cgroup: Unknown subsys name 'net_cls' [ 40.415076][ T376] cgroup: Unknown subsys name 'net_cls' [ 40.424305][ T377] cgroup: Unknown subsys name 'perf_event' [ 40.424312][ T378] cgroup: Unknown subsys name 'perf_event' [ 40.424481][ T378] cgroup: Unknown subsys name 'net_cls' [ 40.430316][ T377] cgroup: Unknown subsys name 'net_cls' [ 40.438429][ T379] cgroup: Unknown subsys name 'perf_event' [ 40.453393][ T379] cgroup: Unknown subsys name 'net_cls' 21:54:54 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b884c110110f21108a800000000109021b0001000000000904000001da3d25000905850b0081"], 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xcd, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x1, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x60a5, 0xff}, [@feature_unit={0x13, 0x24, 0x6, 0x3, 0x2, 0x6, [0x7, 0x6, 0x6, 0x8, 0x5, 0xe]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x5, 0x1f, "ce385aec9efa7a0cc7"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x963d, 0xffff, 0xfd, "169752db7aa5d8"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0xf001, 0x3, 'v'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x59, 0x3, 0x4, 0x3f, "30b0", "d743"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x2, 0x1f, {0x7, 0x25, 0x1, 0x0, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4d5, 0x9, 0x8, "59b7a1472258d84932"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xc6, 0x20, 0x1f, {0x7, 0x25, 0x1, 0x2, 0x3, 0x81}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x4, 0x3, 0x1, 0x40, 0x1}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3f, "e3472ba39fc74fe8d9259ec598ddd759"}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1c0a}}]}) [ 49.580729][ T83] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 49.580739][ T95] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 49.670838][ T17] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 49.750603][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.840690][ T95] usb 3-1: Using ep0 maxpacket: 32 [ 49.860649][ T83] usb 4-1: device descriptor read/64, error 18 [ 49.890673][ T3061] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 49.930727][ T17] usb 6-1: Invalid ep0 maxpacket: 16 [ 49.960710][ T95] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 49.970892][ T95] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 49.981190][ T95] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 50.020578][ T12] usb 1-1: device descriptor read/64, error 18 [ 50.080769][ T17] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 50.130559][ T3061] usb 2-1: Using ep0 maxpacket: 16 [ 50.150790][ T95] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.160022][ T95] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.169233][ T95] usb 3-1: Product: ꗛ㛖鰪㗂๕榒ᑃ꫆ᬵ⇷嘆愿춀垈夢 [ 50.178575][ T95] usb 3-1: Manufacturer: У [ 50.183238][ T95] usb 3-1: SerialNumber: й 21:54:54 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f4211f40fb04f1af0a160000000904ff00000000000000000000abd93a688f8b931b4802d1d87ea0d067d8010c5c65ee46b29f7edeb173ec80451af439c29c5b0ec68a888cfc29a55a191c03866534050000000000000000000000000000000093b3dc9c93886383c00ba7ed63c7e3409ddc6116ae593ffe23a1a4150f9565c47b659207a787f9b398a67d7800"/157], 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/167) [ 50.191460][ T95] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 50.201482][ T95] usb 3-1: no configuration chosen from 1 choice [ 50.250662][ T3061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 50.263880][ T3061] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.8a [ 50.276712][ T3061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.288219][ T83] usb 4-1: device descriptor read/64, error 18 [ 50.301287][ T3061] usb 2-1: config 0 descriptor?? [ 50.331063][ T17] usb 6-1: Invalid ep0 maxpacket: 16 [ 50.336483][ T17] usb usb6-port1: attempt power cycle [ 50.352377][ T3061] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 50.373994][ T3061] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 50.430503][ T12] usb 1-1: device descriptor read/64, error 18 [ 50.500475][ T95] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.554385][ T3084] udc-core: couldn't find an available UDC or it's busy [ 50.560656][ T83] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 50.561434][ T3084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 50.578904][ T3061] usb 2-1: USB disconnect, device number 2 [ 50.595204][ T3061] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 50.720418][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.820522][ T95] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 50.830474][ T83] usb 4-1: device descriptor read/64, error 18 [ 50.940449][ T95] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 50.948099][ T95] usb 5-1: can't read configurations, error -61 [ 50.990474][ T12] usb 1-1: device descriptor read/64, error 18 [ 51.050443][ T17] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 51.100431][ T95] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.150486][ T17] usb 6-1: Invalid ep0 maxpacket: 16 [ 51.240462][ T83] usb 4-1: device descriptor read/64, error 18 [ 51.310688][ T17] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 51.370518][ T83] usb usb4-port1: attempt power cycle [ 51.380440][ T12] usb 1-1: device descriptor read/64, error 18 [ 51.380545][ T3061] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 51.388677][ T95] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 51.420441][ T17] usb 6-1: Invalid ep0 maxpacket: 16 [ 51.425983][ T17] usb usb6-port1: unable to enumerate USB device [ 51.500471][ T12] usb usb1-port1: attempt power cycle [ 51.520427][ T95] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 51.528104][ T95] usb 5-1: can't read configurations, error -61 [ 51.534655][ T95] usb usb5-port1: attempt power cycle [ 51.640260][ T3061] usb 2-1: Using ep0 maxpacket: 16 [ 51.760354][ T3061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 51.771342][ T3061] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.8a [ 51.780462][ T3061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.792905][ T3061] usb 2-1: config 0 descriptor?? [ 51.834356][ T3061] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 51.846606][ T3061] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 21:54:56 executing program 1: ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000c80)=ANY=[@ANYBLOB="4c0900005385930740f03af866a598a94ba13ac4fc2eb39b6c0ac171541acbe030d6c03a303ec8e3db58594c3b374413045d808c7be711e6f0d40fc9e2052f60ba3e0187ede304039e"]) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000082609333340000000000109022d00010000000009040000090301018009211f0000012206000905"], 0x0) syz_usb_ep_write(r0, 0x0, 0xfffffffffffffd1c, &(0x7f00000000c0)="4f7bcba8d5a41147e64997486625e78940e35de0e5e10664d3c77adb311e5a1ec1a18a4fa4165c0d1366131c85a0b1621bd95f379423cd89c0f0cff485b1ebc6acb4980ec639d3baa065eaa59e2a622f4527d21bcf2ef9600239466bb43f8fddba40bcd8361738559d095b96454205823547925c268b32a000ac4eae269575cdeeeb4dee86db2afb0dad74045d08ad9f9a") syz_open_dev$hidraw(0x0, 0x0, 0x8000045c2441) syz_usb_disconnect(r0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2) ioctl$HIDIOCAPPLICATION(r1, 0xc028660f, 0x400003) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x2) write$hidraw(r2, &(0x7f00000000c0)="e9", 0x1) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f00000001c0)=""/202) [ 52.031259][ T3106] udc-core: couldn't find an available UDC or it's busy [ 52.038277][ T3106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 52.047962][ T3076] usb 2-1: USB disconnect, device number 3 [ 52.064336][ T3076] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 52.082232][ T83] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 52.190331][ T83] usb 4-1: Invalid ep0 maxpacket: 0 [ 52.210208][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 52.240314][ T95] usb 5-1: new high-speed USB device number 4 using dummy_hcd 21:54:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001180)=""/4096) r2 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYBLOB="e27742d80feb507df47b25d3533871576d48d89626a064d6f942f58f5c9ee3cacb795075eac254927bf678df2480a8ae41be633263590a62e147242b7922a3ab8bb92d0ba94fbc87af5445", @ANYRESHEX, @ANYBLOB="a3083d588b68496b90c3580c5fa4b54821c00ce7f7d3b483b8547c8da9e9d097f6f683376417d8ba5e47712d5223d47e745ef7c35d080483e37a9a7f9578023a59fd18ff5370649b3c4dee3e0fc1bf386c999a7b872fa9f5d682bb155a3c568e727fb6f8d654fe88e5da554792cf5b723cbe63b264a1b38e37414a538ac92e8f810adf4aac1590bb9540673d31e8f459edfda4c17fc07c722a6c6097d9db33bb089f357a1fead24b20120594f5f0c31d59985b709706f34f9ea52fff6184f826710bbff586960a784427c0a58b731c6cb0f9", @ANYRESDEC=r3], 0x0) [ 52.300386][ T12] usb 1-1: Invalid ep0 maxpacket: 0 [ 52.305014][ T3061] usb 3-1: USB disconnect, device number 2 [ 52.340248][ T83] usb 4-1: new low-speed USB device number 5 using dummy_hcd 21:54:56 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c1221e101d0660c1e7130000000000000000000018152305dcbe63f675890f39cc30943c00"/54], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x5) syz_usb_control_io(r0, 0x0, 0x0) 21:54:56 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007075eb08f305400255e30000021b0200000000000000000000cb9d7afaa2e7d8f37d668e03f9280a183139116cca021b5a384b84bec3e22143b806c397f919e81d0912b3c542428458f8"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x81) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc0c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"]) syz_usb_ep_read(r1, 0x5, 0xfd, &(0x7f0000000180)=""/253) read$char_usb(r0, &(0x7f0000000040)=""/133, 0x85) [ 52.370383][ T95] usb 5-1: too many configurations: 9, using maximum allowed: 8 21:54:56 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xff, 0xe, 0x9f, 0x10, 0xcdab, 0x8010, 0xef4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)={0x0, 0x0, 0x3, '\x00\x00q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x20, 0x5, 0x1f, {0x1f, 0x0, "cbf680f74708ecdcd4d932b7452582b39bf3b39912c2dd4217fefac555"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000100)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x3, 0x800}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x11, 0xff, "9aa7d4c8", "e31a321b"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x18, 0x81, 0x9, 0x5, 0x30, 0x1}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x0, 0x8, 0x6a, "6066a671da7c1844ac42e8032da3b46bff8e2f5aafd7de1934c7502de4e2a4623bfc8e804cfb0cfd6da06b0cc01bc36bb3cfb5ef9ab744140fdda501430244323dae2ca061731d27783f0332809437692cb856deaa9d7277e9a21978aed849488345a8acc0799005d658"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x29}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x100, 0x4}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x1000}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000480)={0x40, 0xb, 0x2, "a9f1"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="72d8cc15d419"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="6a9aab8e59ea"}, &(0x7f0000000580)={0x40, 0x19, 0x2, '#u'}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xfc5}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xdf}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x3}}) [ 52.460328][ T12] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.490386][ T95] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 52.498036][ T95] usb 5-1: can't read configurations, error -61 [ 52.505735][ T3076] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 52.660128][ T95] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.750181][ T3076] usb 2-1: Using ep0 maxpacket: 8 [ 52.780111][ T3061] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 52.790584][ T95] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 52.830132][ T83] usb 4-1: device not accepting address 5, error -71 [ 52.837034][ T83] usb usb4-port1: unable to enumerate USB device [ 52.870276][ T3076] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.880469][ T3107] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 52.888131][ T3076] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 52.898635][ T3076] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.911593][ T3076] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.920860][ T3076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.930447][ T95] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 52.938392][ T95] usb 5-1: can't read configurations, error -61 [ 52.945445][ T12] usb 1-1: device not accepting address 5, error -71 [ 52.952878][ T3076] usb 2-1: config 0 descriptor?? [ 52.958007][ T12] usb usb1-port1: unable to enumerate USB device [ 52.966515][ T95] usb usb5-port1: unable to enumerate USB device [ 52.992675][ T3076] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 53.020108][ T3061] usb 3-1: Using ep0 maxpacket: 16 [ 53.060839][ T3061] usb 3-1: no configurations [ 53.065487][ T3061] usb 3-1: can't read configurations, error -22 [ 53.160282][ T3107] usb 6-1: Using ep0 maxpacket: 8 21:54:57 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e44c, [{{0x9, 0x2, 0x41}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc0c, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX]) syz_open_dev$hidraw(0x0, 0x2, 0x12d27d) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x80000408e201) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) write$hidraw(r1, &(0x7f0000000000)="3a0a18bdf46c9800"/23, 0x17) read$hidraw(0xffffffffffffffff, &(0x7f0000000240)=""/96, 0xfffffffffffffcfd) r3 = syz_open_dev$hidraw(0x0, 0x4, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000140), 0x41) syz_open_dev$hidraw(&(0x7f0000000f00)='/dev/hidraw#\x00', 0x40, 0x400) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x2) read$hidraw(r3, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCAPPLICATION(r1, 0x40305828, 0x400007) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x1) write$hidraw(r2, &(0x7f0000000340)="49c1ff6658de51a3906b553c0d6273095ba019132987ddf730d73652c610dd676f73466bca77738053442d75be22d8764914f257843af41fb851b4b10022007a506d145e6f0add8a6749a3879f44612428b956b44b710412d5c875deab142c80c3956e5c22fea37e58855dc179d4e283010896c8056081b9c0139e3a48eafdf32f1124c794fc5c3fe8a663c1a08892c868489fa52e2c65a321f0ddcd4e3c081cea44259b7307565f834a6afeb97561d7c8294a35ba2ab977168f90c9aa7b2a9123546fded2a56c5f60b624456490ac38f5a4a2a74f94a502ade53b78403bb5e5d87e3db708f59518bac399309e", 0xed) r5 = syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000002c0)=ANY=[]) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f0000000200)={0x7, 0x0, 0xca, 0xffff}) syz_usb_ep_write(0xffffffffffffffff, 0xf6, 0x9a34eddacaa4cf4e, &(0x7f0000000080)="bac00b34803a150500e9000000000000000000367fb2888a") [ 53.190885][ T83] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 53.196382][ T3076] usb 2-1: USB disconnect, device number 4 [ 53.204853][ T3107] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 53.220158][ T3061] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.320129][ T12] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 53.360281][ T3107] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 53.368120][ T3107] usb 6-1: can't read configurations, error -61 [ 53.460091][ T3061] usb 3-1: Using ep0 maxpacket: 16 [ 53.465319][ T83] usb 4-1: device descriptor read/64, error 18 [ 53.500152][ T3061] usb 3-1: no configurations [ 53.504875][ T3061] usb 3-1: can't read configurations, error -22 [ 53.511753][ T3061] usb usb3-port1: attempt power cycle [ 53.520159][ T3107] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 53.570017][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 53.690108][ T12] usb 1-1: New USB device found, idVendor=cdab, idProduct=8010, bcdDevice= e.f4 [ 53.699207][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.709359][ T12] usb 1-1: config 0 descriptor?? [ 53.730199][ T95] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.751038][ T12] usb 1-1: This Realtek USB WiFi dongle (0xcdab:0x8010) is untested! [ 53.759189][ T12] usb 1-1: Please report results to Jes.Sorensen@gmail.com [ 53.766801][ T3107] usb 6-1: Using ep0 maxpacket: 8 [ 53.810162][ T3107] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 53.880004][ T83] usb 4-1: device descriptor read/64, error 18 [ 53.930097][ T3107] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 53.937756][ T3107] usb 6-1: can't read configurations, error -61 [ 53.945400][ T3107] usb usb6-port1: attempt power cycle [ 54.010292][ T95] usb 5-1: too many configurations: 76, using maximum allowed: 8 21:54:58 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120100004d10c310ba4b9192ff050002000109026ae6c9a100b1000904080002fe03010009050502090000010009058f1e18"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGRAWPHYS(r1, 0x40045b0a, 0x0) [ 54.090361][ T95] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.100541][ T95] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.160079][ T3076] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 54.160144][ T83] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 54.190254][ T95] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.200713][ T95] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.250016][ T3061] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 54.290326][ T95] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.300906][ T95] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.340040][ T3061] usb 3-1: Using ep0 maxpacket: 16 [ 54.380775][ T3061] usb 3-1: no configurations [ 54.385379][ T3061] usb 3-1: can't read configurations, error -22 [ 54.400176][ T95] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.410347][ T95] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.469931][ T83] usb 4-1: device descriptor read/64, error 18 [ 54.520446][ T95] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.531391][ T95] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.549921][ T3061] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 54.589920][ T3076] usb 2-1: device descriptor read/64, error -71 [ 54.620396][ T95] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.630551][ T95] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.650597][ T3061] usb 3-1: Using ep0 maxpacket: 16 [ 54.660183][ T3107] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 54.690133][ T3061] usb 3-1: no configurations [ 54.694791][ T3061] usb 3-1: can't read configurations, error -22 [ 54.701481][ T3061] usb usb3-port1: unable to enumerate USB device [ 54.720092][ T95] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.730593][ T95] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.750203][ T3107] usb 6-1: Using ep0 maxpacket: 8 [ 54.790096][ T3107] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 54.820034][ T95] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.830590][ T95] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 54.899913][ T83] usb 4-1: device descriptor read/64, error 18 [ 54.910503][ T3107] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 54.918203][ T3107] usb 6-1: can't read configurations, error -61 [ 54.949929][ T3076] usb 2-1: Using ep0 maxpacket: 16 [ 54.999985][ T95] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 55.009230][ T95] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.017387][ T95] usb 5-1: Product: syz [ 55.021620][ T95] usb 5-1: Manufacturer: syz [ 55.026216][ T95] usb 5-1: SerialNumber: syz [ 55.029988][ T83] usb usb4-port1: attempt power cycle [ 55.070116][ T3076] usb 2-1: config index 0 descriptor too short (expected 58986, got 36) [ 55.078495][ T3076] usb 2-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 55.087453][ T3076] usb 2-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 55.096807][ T3076] usb 2-1: config 161 has no interface number 0 [ 55.103360][ T3107] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 55.112511][ T95] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 55.124006][ T3076] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 55.133986][ T3076] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 55.209928][ T3107] usb 6-1: Using ep0 maxpacket: 8 [ 55.220848][ T3076] usb 2-1: New USB device found, idVendor=4bba, idProduct=9291, bcdDevice= 5.ff [ 55.230186][ T3076] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 55.238167][ T3076] usb 2-1: Product: syz [ 55.249968][ T3107] usb 6-1: too many configurations: 27, using maximum allowed: 8 [ 55.260044][ T3147] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 55.266942][ T3147] raw-gadget gadget: fail, usb_ep_enable returned -22 21:54:59 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc0c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="050c004e83e89102ec8bde087a6bfede66e17d55dc48fbfc69ce1831b8406d7232f1bd2c043cbe8f6a601dedfbd83e6611185ff626d0a8b9d77a17bff4509b9a9a3c6d35337fec002551d9e831788ad98b8a00a8abaf61da2c595735722218b055a947cc9d0a300500865a338b822f390661bacca766015278856e6f67e61b893ce71b9a3aa3f097848b4a2ec886a5f97c47d76541f0ddf1aa6de26d3c9b9741b157ea6ce05a7a289662c252707b503de4e2271acc418aefd1c2b610c2cf0d2d8569025fdd09cbbcad3f7d3f7e8f9781db43ba3a529485ac8eaacc1105b37f14ccea22f82c5f048da7eb637d7862064c10c2b61835401f79f8a50e78bd95bd4cbbb57cce8e54e0ef934b32fa75663af10d9dd12467882ecb68cbdb055948f11dd04c9e7ffc97916b19a87df9f530a88821b847a54099014c000000a7e0ceecf54dde0cd1dcd9936020a7364edc687adad30ce25828cb0d6810d2e0fa6d1eb8faf98aadb101bd583bb35c2b93250f1bb3cd4f95a43fdd5670e59a7d5a3b97a20800fec97ab01818f196a7ed035235ccf84db12deafce7f72d5a7f8f168cfa071e68168efbbd332d1bd6d02d7bc3d23dd3835906784936a10e872af2eacd9613a79368ce7d5402de4f662778261ed7055e9b6d6e97da91609d23e4c9335d9de63a7df1ade3bce7a532bbf853c62f269f7941981626b8fa1c2e8d0269309034ff82893c9f7ca84bbfd46f4935710f74d551ee9e63b173ddbacfb5f1a75d307a3e0bcfb6c8ee0efd8fdb3c0380bfb506d73e457af8c2263bd00ea10fd274f294b770e87ecfe10ac215a12de112698c67c3a6ef72e214e07ca6ca3766d81d355af35830d9d76640bacdfaf3eedb5a656cfd1edc76df8afafdbac20acc8de4d493814da48b7b9ae1fe6cc0d1028779327afeb3215ff4ef4a58d2f06cae67e153eecf6734bbe7616ae9e81d7e3367c18e16d392a968bf39ab1e0e59742d069f9ddc82927dca25a383793ca294e15e7d6dfcd019084d3475e4555456d4d596e00c39614245b607a93bcb29e5286e1391b9039663825556efd39ad9509f9e658f62c66850d02b04f7813223b3914f54daace072e465b1576cbd333b91972559f7411ca25bbaf1fe40bb3e9a680f333025ecc7fb1a4e8af11a8293a91e8609158572341ba429687224212ac977fa058c4bd6f9e0c8329e9705222a3b0e463c59d0ff4ab47f5b6b407168c16c3a1669604e83704c00f501fd3fef6f8535c6cef334a25789ce6b7bf6dc218b69d36b87c582157c1ba205eb30bc33e25671247eaa67471e704b922d30d1c8deb9f397a2fc4349cdc9a37317130f2d7851f8ef5e2dd5df4611cc1d571ac1f6045ac1b59fc12bafb88f50e1126f6480d9ea223c123c99150f05d018d1c8e58efc47ebfec2d8e915d932aef473a0039032f88364b8849f8bc022ff7a1050132301b5af21cc1a29619f9aebaad6a44d2e2340aadd833a2171bf87054c342fab6f9b82a1b90f4b78cf467a3dc82889d8d21cdcbe4dd8668ec2d302380cfc6ead0228c66516d9d044ac11ae5c3c3f8e2a1f3e59567963351d7fd67c6a04d21b3f50e2feaa577bad6844d49ba31dbf1db34f2390222bbdc791c8c27b1cb7bdf00c3c7e4bc239468ea93b7a95cf48643d1c17f2990ae33dfcb817cced0421d5cd3b7e4983835236e736cf0bc55fbe7542114e6fa9f1596fc0329e3d26f97c4b7d54cafb7344e6cbb99341ec65ed43fde214beb1c6648d438496be300633db5dad5063ed9abc25c38b6e1414c3272f0dc1123e61ecb39965a32bd8e540666adbd50bed785077b7cc7912b65f53cb683949fc32315a29dc276cb705e43117b6cf7a28c76ac5d58c3c01a71e41d9905381a91301c4f25777cfef58b23088c0f3cfd1c4a4fb01052c60692092593685ce62ec4247db7865047c69320b14627f884137105d43f1eba6cd3ee1fdf2bae11c5c3ed8728c7395d0b173ee85e63056941bffd8f2e98ba0555ce3b458c3ddcaa7a8d8739fe59cd1cc4ecc00de561ebf37bb885e47e169930f7088d3b1f89420a3b8daf065ba57cac0ac06e680838a21cbfee6aad2baa9bf5ab9bd44a2ea3e1cfb7a8a6dc34f3039f6daff5bebcbabd0683ad9049f288532ec53c69913dad30c1f0b1ae032b95fbe3acf2bd38d845f555460de89f1f854845696a9edf92189b47e7deb02833f7040d6e5a15959c72c712282fb40008cf310c99e521c709535132a2534fb02b18c01e8c8d517b72311f1621b67381049aff0194f390531e4df7d3494d362f7fa060000b000f5e1b459b0951f760f43fd8a99321ea6cbd1a5000d562d8e65339dedcf6fe0efafa184f707154b08ad74f52e2ca51b2942350023f87f1ef4d1f4cfa7d878bceba5875b3ce9c71556da9b654ab3ab9c9278128cb35bffc6e6a89ca137e3f7458d08aa2e6399f3bef82bd26465af466d144bbb1c27a8e0e8b236cd63ddd57d224b86061e06f5daec86c6ec0e126a7fa1833bd6819af434a557f1f639326870e80bde6501def4e1ed46982ab63db2f42106fadf52e41ecb97722cf89ae9adf316c8472a1f9b05fffcd2b5fdf683570b9079e236beb4706e0596baf1c7f180544d34114c76c81070d77697e89c6db2c57437ea2b7a4a41fe232ea69afdfc4955bd7b12eb724b4958099fc1da4715373137c3b655357fc1eadf0180419e2667c19fd5acb003bcb6dcd05656cff8737a0b70880df17a154a89bf5f0a72664ca57c9574db73bec117c851e399cdf5d4d439e2dc7dffbee00a4cb4589eb614cb4e3014ce9d8c750b3c9c36d643ec8e8cdeb136278afb640f7ff532976ab745fa3560ba5c9a31ec73bcc3dfc0a51f5903333160d6a349e4e9ad9eb25f25ac88e0deb84ba26192f440d2afbd039ed260cd41d8f8bcbdd6fa2182acbcdeac538181fd5efb08877e6a73af1db14144e7a25a4467b15a6b32683b977f8a6996052e3097320beb64ade19f1caa480936e277f9ddd41ae647ec2083e81c8bb8a851475aa782f047c56e8bd09fa2ddac1f9eee8152dfffaa74b47426c9c7430b23004b87ec1cd3901d7d81a6a243e61f1c3534afef0514bb4541e516e7db11cb58075cfa5c43e1874031036b7766f0f86f53215766f4b69ba5bf523bf5ab9cb4db364c5b928439d7bd31586f7629c2c49c9b41aefd6cd7dfa0428c82626a2b9b09e1da5dfbbea0e6c80ff26c25cafedf0b60e5729f5189fd929b55e5f3dab8b1b474c7327cef1c065eff86ceb0c3f48dfb8bf73c8b7b4bc3b5ee454f3f989666a03f0a43c586650166eb39941540a4e7b010b830c76b7346c4a4a6125497cfe70fa8c477d766b2376189395e1583055155a51798b039b546c2e547d6c4c20139007014df69c6dff94c48ca1465d66323e25f8ff94fc988eb261752a99b361409a5ba879c7569a846d594507a26c599f8081a84a3937c95b5c7dc31f115a7daa011e327b5033c3a2507bc0af687be52a8b4f4750ebfd07acbb3ba7b446a9b9497926d4f6bad236fc886180b9b93fe4b5d8e234c848dca48ef2df3b11a5955456b053ac1a86f9c42838fa4ff23a34e435f32c0816a025554696c47add742243df5e52a085272ad8aee35c56570505c6dad45bd517faa499b6b5ecc99051ce0901a651b93430f57456d9f4ae8502bfa82ec756ed9522fcce8f5fbadf0fccbfbb88a47d70f9ef60aed9081c80d78b01862d63357750769acf7a8373d56814572e7fcc8e32bfdde85f651fbdc17d8b625198581c6a00c603d56b862829dcf466a4cc121b4107664e08c584bd2106a918b01c64c7859f14715cb0427c313783dcfe7fab02e30fe364a1bd59e68f962a96b4e9c5db1118388dd04891e2282112840f3131277fafafb4f1d90b0173f393e0a1be64748b43580eea24baccee47cfb3ed463d70a6e5ddaab38a0605b666cae99535d3f7561a139e9b1ae835888c574bbe71e70fe1889c7fcb1984af487dedaad9ca3e6dd995b74c9137ea4d06b25c28c51184af99988cc80db20a5368aca5e8b56badd29b72e84be54b2447fea2bddae5cec171078bb2c8cc7a795e175ffef3720838827e2708368aa3f1a7e5aa8ce960b3c8ee50ce9cf9c28e7c53e9b50d7b7ea7bdc5056071323aaf055deb7f41b10729cbf92051e0664b21ce866e016a402dd1e64e98809da7f8d660865212f94a8f8cb9196b410a3df9996348801b5bfec32b75f259db19be56b000183d515cffa558be42adeaa7f00109e96b181976847cb68176fcadc3ca5c97636595a89f59fe7199c3e578ce72552fb51ed6fbd1d640cf3f3a378cc766499fdcf1288e17e3eb5361522429da0aefb38e08745c9efedede8a96044cf6b43"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "8e9f703e", {0x1, 0x200, 0x400, 0x5, 0x9}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100006bd32310501da160316a000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000001c0)=""/250) 21:54:59 executing program 5: syz_usb_connect(0x0, 0x2c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x18, 0xa2, 0x45, 0x8, 0x5e3, 0x505, 0x34af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}]}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x7ff, 0x1, 0x1, 0x28, 0x5, 0x2}) [ 55.370008][ T3107] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 55.377807][ T3107] usb 6-1: can't read configurations, error -61 [ 55.385929][ T3107] usb usb6-port1: unable to enumerate USB device 21:54:59 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000580)='/dev/usb/hiddev#\x00', 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000040)={0x1fe, 0x0, 0x1000}) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x1000) r1 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc0c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"]) syz_open_dev$hidraw(0x0, 0x0, 0x180041) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x2) write$hidraw(r2, &(0x7f0000001200)='\x00', 0x1) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hiddev(0x0, 0x0, 0x0) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) ioctl$HIDIOCAPPLICATION(r5, 0x4030582b, 0x4001e0) read$hidraw(r4, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCAPPLICATION(r3, 0x660c, 0x0) r6 = syz_open_dev$hidraw(0x0, 0x0, 0x9142) ioctl$HIDIOCGRDESCSIZE(r6, 0x6611, 0x0) [ 55.499988][ T3076] usb 2-1: usb_control_msg returned -32 [ 55.506194][ T3076] usbtmc 2-1:161.8: can't read capabilities [ 55.749886][ T95] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 55.829804][ T83] usb 4-1: new high-speed USB device number 8 using dummy_hcd 21:55:00 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x81, 0xed, 0x1a, 0x40, 0x471, 0x303, 0xb446, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb, 0x36, 0xae}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000b40)={0x0, 0xc, 0x1f, "b6a049ace4339514551531450d0351f986ffdef77c8bb035543af07ed106ad"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x0, 0x21, 0x18, {0x18, 0xc, "252c441a17af73f90e7922baf5747576c0b92de59373"}}, &(0x7f00000000c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "4e561c97182ab02b8f8d57905b098771e0c2c44a570c457c4682dc30d46a85f057703a10d442"}}, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x7, 'E'}, @local=@item_012={0x2, 0x2, 0x3, "dec1"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x25e}}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x40, 0xd, 0x58, "12f1bf7f9701c2c7e0e2e7005c938241365440a8b5504ecefb84ea126fdc0ea70acf773ce21d19a958389a3d07df38853713bb86091aca0cd2a70ffe235428ef9a6ab413e678e337532e4a3c0d611035912b86a0f2951650"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x1, 0x5f, "24bf3697bbc71a866fb364a3bb0672a224537d7ddbe2c5955e94fb22033002088a719812f3e30eb53313e77e400d19f416f7002097d0867363a114ffcc0b901b493e58a369c8ada5d492894ce5ef7988f441774420a8115f66474fe0057c5f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001c40)={0x84, &(0x7f00000006c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 55.889808][ T3061] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 55.909842][ T3107] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 55.954889][ T17] usb 5-1: USB disconnect, device number 6 [ 56.159834][ T3107] usb 6-1: Using ep0 maxpacket: 8 [ 56.199926][ T83] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.209063][ T83] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.217139][ T83] usb 4-1: Product: syz [ 56.221528][ T83] usb 4-1: Manufacturer: syz [ 56.226129][ T83] usb 4-1: SerialNumber: syz [ 56.279947][ T3107] usb 6-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=34.af [ 56.289090][ T3107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.290715][ T83] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 56.304008][ T3107] usb 6-1: config 0 descriptor?? [ 56.352183][ T3107] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 56.359241][ T3107] uvcvideo: No valid video chain found. [ 56.450514][ T3061] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.459826][ T3061] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.467835][ T3061] usb 3-1: Product: syz [ 56.472126][ T3061] usb 3-1: Manufacturer: syz [ 56.476726][ T3061] usb 3-1: SerialNumber: syz [ 56.520763][ T3061] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 56.553148][ T3107] usb 6-1: USB disconnect, device number 10 [ 56.779700][ T95] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 56.787001][ T95] ath9k_htc: Failed to initialize the device [ 56.795084][ T17] usb 5-1: ath9k_htc: USB layer deinitialized [ 56.899751][ T83] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:55:01 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc0c, &(0x7f0000001a80)=ANY=[@ANYBLOB="050c004e83e89102ec8bde087a6bfede66e17d55dc48fbfc69ce1831b8406d7232f1bd2c043cbe8f6a601dedfbd83e6611185ff626d0a8b9d77a17bff4509b9a9a3c6d35337fec002551d9e831788ad98b8a00a8abaf61da2c595735722218b055a947cc9d0a300500865a338b822f390661bacca766015278856e6f67e61b893ce71b9a3aa3f097848b4a2ec886a5f97c47d76541f0ddf1aa6de26d3c9b9741b157ea6ce05a7a289662c252707b503de4e2271acc418aefd1c2b610c2cf0d2d8569025fdd09cbbcad3f7d3f7e8f9781db43ba3a529485ac8eaacc1105b37f14ccea22f82c5f048da7eb637d7862064c10c2b61835401f79f8a50e78bd95bd4cbbb57cce8e54e0ef934b32fa75663af10d9dd12467882ecb68cbdb055948f11dd04c9e7ffc97916b19a87df9f530a88821b847a5409901570563aca7e0ceecf54dde0cd1dcd9936020a7364edc687adad30ce25828cb0d6810d2e0fa6d1eb8faf98aadb101bd583bb35c2b93250f1bb3cd4f95a43fdd5670e59a7d5a3b97a20800fec97ab01818f196a7ed035235ccf84db12deafce7f72d5a7f8f168cfa071e68168efbbd332d1bd6d02d7bc3d23dd3835906784936a10e8700f2eacd9613a79368ce7d5402de4f662778261ed7055e9b6d6e97da91609d23e4c9335d9de63a7df1ade3bce7a532bbf853c62f269f7941981626b8fa1c2e9d0269309034ff82893c9f7ca84bbfd46f4935710f74d551ee9e63b173ddbacfb5f1a75d307a3e0bcfb6c8ee0efd8fdb3c0380bfb506d73e457af8c2263bd00ea10fd274f294b770e87ecfe10ac215a12de112698c67c3a6ef72e214e07ca6ca3766d81d355af35830d9d76640bacdfaf3eedb5a656cfd1edc76df8afafdbac20acc8de4d493814da48b7b9ae1fe6cc0d1028779327afeb3215ff4ef4a58d2f06cae67e153eecf6734bbe7616ae9e81d7e3367c18e16d392a968bf39ab1e0e59742d069f9ddc82927dca25a383793ca294e15e7d6dfcd019084d3475e4555456d4d596e00c39614245b607a93bcb29e5286e1391b9039663825556efd39ad9509f9e658f62c66850d02b04f7813223b3914f54daace072e465b1576cbd333b91972559f7411ca25bbaf1fe40bb3e9a680f333025ecc7fb1a4e8af11a8293a91e8609158572341ba429687224212ac977fa058c4bd6f9e0c8329e9705222a3b0e463c59d0ff4ab47f5b6b407168c16c3a1669604e83704c00f501fd3fef6f850800000000000000ce6b7bf6dc218b69d36b87c582157c1ba205eb30bc33e25671247eaa67471e704b922d30d1c8deb9f397a2fc4349cdc9a37317130f2d7851f8ef5e2dd5df4611cc1d571ac1f6045ac1b59fc12bafb88f50e1126f6480d9ea223c123c99150f05d018d1c8e58efc47ebfec2d8e915d932aef473a0039032f88364b8849f8bc022ff7a1050132301b5af21cc1829619f9aebaad6a44d2e2340aadd833a2171bf87054c342fab6f9b82a1b90f4b78cf467a3dc82889d8d21cdcbe4dd8668ec2d302780cfc6ead0228c66516d9d044ac11ae5c3c3f8e2a1f3e59567963351d7fd67c6a04d21b3f50e2feaa577bad6844d49ba31dbf1db34f2390222bbdc791c8c27b1cb7bdf00c3c7e4bc239468ea93b7a95cf48643d1c17f2990ae33dfcb817cced0421d5cd3b7e4983835236e736cf0bc55fbe7542114e6fa9f1596fc0329e3d26f97c4b7d54cafb7344e6cbb99341ec65ed43fde214beb1c6648d438496be300633db5dad5063ed9abc25c38b6e1414c3272f0dc1123e61ecb39965a32bd8e540666adbd50bed785077b7cc7912b65f53cb683949fc32315a29dc276cb70549da17b6cf7a28c76ac5d58c3c01a71e41d9905381a91301c4f257774fef58b23088c0f3cfd1c4a4fb01052c60692092593685ce62ec4247db7843f1eba6cd3ee1fdf2bae11c5c3ed8728c7395d0b173ee85e63056941bffd8f2e98ba0555ce3b458c3ddcaa7a8d8739fe59cd1cc4ecc00de561ebf37bb885e47e169930f7088d3b1f89420a3b8daf065ba57cac0ac06e680838a21cbfee6aad2baa9bf5ab9bd44a2ea3e1cfb7a8a6dc34f3039f6daff5bebcbabd0683ad9049f288532ec53c69913dad30c1f0b1ae032b95fbe3acf2bd38d845f555460de89f1f854845696a9edf92189b47e7deb02833f7040d6e5a15959c72c712282fb40008cf310c99e521c709535132a2534fb02b18c01e8c8d517b72311f1621b673810c9aff0194f390531e4df7d34949362f7fa060000b000f5e1b459b0951f760f43fd8a99321ea6cbd1a5000d562d8e65339dedcf6fe0efafa184f707154b08ad74f52e2ca51b2942350023f87f1ef4d1f4cfa7d878bceba5875b3ce9c71556da9b654ab3ab9c9278128cb35bffc6e6a89ca137e3f7458d08aa2e6399f3bef82bd26465af466d144bbb1c27a8e0e8b236cd63ddd57d224b86061e06f5daec86c6ec0e126a7fa1833bd6819af434a557f1f639326870e80bde6501def4e1ed46982ab63db2f42106fadf52e41ecb97722cf89ae9adf316c8472a1f9b05fffcd2b5fdf683570b9079e236beb4706e0596baf1c7f180544d34114c76c81070d77697e89c6db2c57437ea2b7a4a41fe232ea69afdfc4955bd7b12eb724b4958099fc1da4715373137c3b655357fc1eadf0180419e2667c19fd5acb003bcb6dcd05656cff8737a0b70880df17a154a89bf5f0a72664ca57c9574db73bec117c851e399cdf5d4d439e2dc7dffbee00a4cb4589eb614cb4e3014ce9d8c750b3c9c36d643ec8e8cdeb136278afb640f7ff532976ab745fa3560ba5c9a31ec73bcc3dfc0a51f5903333160d6a349e4e9ad9eb25f25ac88e0deb84ba26192f440d2afbd039ed260cd41d8f8bcbdd6fa2182acbcdeac538181fd5efb08877e6a73af1db14144e7a25a4467b15a6b32683b977f8a6996052e3097320beb64ade18f1caa480936e277f9ddd41ae647ec2083e81c8bb8a851475aa782f047c56e8bd09fa2ddac1f9eee8152dfffaa74b47426c9c7430b23004b87ec1cd3901d7d81a6a243e61f1c3534afef0514bb4541e516e7db11cb58075cfa5c43e1874031036b7766f0f86f53215766f4b69ba5bf523bf5ab9cb4db364c5b928439d7bd31586f7629c2c49c9b41aefd6cd7dfa0428c82626a2b9b57d7066d133a98fbc80ff26c25cafedf0b60e5729f5189fd929b55e5f3dab8b1b474c7327cef1c065eff86ceb0c3f48dfb8bf73c8b7b4bc3b5ee454f3f989666a03f0a43c586650166eb39941540a4e7b010b830c76b7346c4a4a6125497cfe70fa8c477d766b2376189395e1583055155a51798b039b546c2e547d6c4c20139007014df69c6dff94c48ca1465d66323e25f8ff94fc988eb261752a99b361409a5ba879c7569a846d594507a26c599f8081a84a3937c95b5c7dc31f115a7daa011e327b5033c3a2507bc0af687be52a8b4f4750ebfd07acbb3ba7b446a9b9497926d4f6bad236fc886180b9b93fe4b5d8e234c848dca48ef2df3b11a5955456b053ac1a86f9c42838fa4ff23a34e435f32c0816a025554696c47add742243df5e52a085272ad8aee35c56570505c6dad45bd517faa499b6b5ecc99051ce0901a651b93430f57456d9f4ae8502bfa82ec756ed9522fcce8f5fbadf0fccbfbb88a47d70f9ef60aed9081c80d78b01862d63357750769acf7a8373d56814572e7fc38e32bfdde85f651fbdc17d8b625198581c6a00c603d56b862829dcf466a4cc121b4107664e08c584bd2106a918b01c64c7859f14715cb0427c313783dcfe7fab02e30fe364a1bd59e68f962a96b4e9c5db1118388dd04891e2282112840f3131277fafafb4f1d90b0173f393e8a1be64748b43580eea24baccee47cfb3ed463d70a6e5ddaab38a0605b666cae99535d3f7561a139e9b1ae835888c574bbe71e70fe1889c7fcb1984af487dedaad9ca3e6dd995b74c9137ea4d06b25c28c51184af99988cc80db20a5368aca5e8b56badd29b72e84be54b2447fea2bddae5cec171078bb2c8cc7a795e175ffef3720838827e2708368aa3f1a7e5aa8ce960b3c8ee50ce9cf9c28e7c53e9b50d7b7ea7bdc5056071323aaf055deb7f41b10729cbf92051e0664b21ce866e016a402dd1e64e98809da7f8d660865212f94a8f8cb9196b410a3df9996348801b5bfec32b75f259db19be56b000183d515cffa558be42adeaa7f00109e96b181976847cb68176fcadc3ca5c97636595a89f59fe7199c3e578ce72552fb51ed6fbd1d640cf3f3a378cc766499fdcf1288e17e3eb5361522429da0aefb38e08745c9efedede8a96044cf6b437f359648fee1f91e7b50f7c2da36"]) syz_open_dev$hidraw(0x0, 0x0, 0x10ff41) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x40305829, 0x2040003f) [ 57.089822][ T3061] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 21:55:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12c746a7132f07fa6198eb27bb186f0301000004b21840e91726821881000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 57.139334][ T3107] usb 2-1: USB disconnect, device number 5 [ 57.389731][ T3087] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 57.449682][ T17] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 57.526202][ T3076] usb 4-1: USB disconnect, device number 8 [ 57.609637][ T3107] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 57.629675][ T3087] usb 6-1: Using ep0 maxpacket: 8 [ 57.710411][ T3155] udc-core: couldn't find an available UDC or it's busy [ 57.717365][ T3155] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 57.728551][ T3121] usb 3-1: USB disconnect, device number 7 [ 57.749842][ T3087] usb 6-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=34.af [ 57.758911][ T3087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.769226][ T3087] usb 6-1: config 0 descriptor?? [ 57.814059][ T3087] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 57.821270][ T3087] uvcvideo: No valid video chain found. [ 57.899556][ T3107] usb 2-1: device descriptor read/64, error 18 [ 57.969611][ T83] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 57.976636][ T17] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.985771][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.993814][ T17] usb 5-1: Product: syz [ 57.997992][ T17] usb 5-1: Manufacturer: syz [ 58.002644][ T17] usb 5-1: SerialNumber: syz [ 58.009624][ T83] ath9k_htc: Failed to initialize the device 21:55:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0xffffffff, 0x80]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/45) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000011f79e08070ada00488f000000010902240001000000000904"], 0x0) [ 58.013829][ T3187] usb 6-1: USB disconnect, device number 11 [ 58.021619][ T3076] usb 4-1: ath9k_htc: USB layer deinitialized [ 58.050343][ T17] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 21:55:02 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc0c, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32]) syz_open_dev$hidraw(0x0, 0x0, 0x180041) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x12923d) write$hidraw(r1, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x800000) write$hidraw(r1, 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) [ 58.309526][ T3107] usb 2-1: device descriptor read/64, error 18 [ 58.489533][ T3076] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 58.497114][ T3187] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 58.579688][ T3107] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 58.609592][ T3061] usb 3-1: Service connection timeout for: 256 [ 58.616640][ T3061] ================================================================== [ 58.625138][ T3061] BUG: KASAN: use-after-free in kfree_skb+0x32/0x3d0 [ 58.631817][ T3061] Read of size 4 at addr ffff8881cca47d54 by task kworker/1:3/3061 [ 58.639686][ T3061] [ 58.642010][ T3061] CPU: 1 PID: 3061 Comm: kworker/1:3 Not tainted 5.7.0-rc6-syzkaller #0 [ 58.650324][ T3061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.660396][ T3061] Workqueue: events request_firmware_work_func [ 58.666542][ T3061] Call Trace: [ 58.669878][ T3061] dump_stack+0xef/0x16e [ 58.674192][ T3061] print_address_description.constprop.0.cold+0xd3/0x415 [ 58.681224][ T3061] ? vprintk_func+0x7d/0x113 [ 58.685856][ T3061] ? kfree_skb+0x32/0x3d0 [ 58.690244][ T3061] __kasan_report.cold+0x37/0x7d [ 58.695168][ T3061] ? kfree_skb+0x32/0x3d0 [ 58.699492][ T3061] ? kfree_skb+0x32/0x3d0 [ 58.703819][ T3061] kasan_report+0x33/0x50 [ 58.708280][ T3061] check_memory_region+0x173/0x1d0 [ 58.713377][ T3061] kfree_skb+0x32/0x3d0 [ 58.717545][ T3061] htc_connect_service.cold+0xa9/0x109 [ 58.722994][ T3061] ath9k_wmi_connect+0xd2/0x1a0 [ 58.727830][ T3061] ? ath9k_fatal_work+0x20/0x20 [ 58.732664][ T3061] ? ath9k_hif_usb_firmware_cb.cold+0xde/0xde [ 58.738711][ T3061] ? ath9k_wmi_event_tasklet+0x440/0x440 [ 58.739699][ T3076] usb 4-1: Using ep0 maxpacket: 8 [ 58.744336][ T3061] ath9k_init_htc_services.constprop.0+0xb4/0x650 [ 58.744366][ T3061] ? ath9k_reg_rmw_flush+0x2d0/0x2d0 [ 58.744382][ T3061] ? lockdep_init_map_waits+0x26a/0x7c0 [ 58.744399][ T3061] ? __raw_spin_lock_init+0x34/0x100 [ 58.744413][ T3061] ? tasklet_init+0x69/0x110 [ 58.744432][ T3061] ath9k_htc_probe_device+0x25a/0x1da0 [ 58.782148][ T3061] ? ath9k_init_htc_services.constprop.0+0x650/0x650 [ 58.788807][ T3061] ? usb_submit_urb+0x6ed/0x1460 [ 58.793776][ T3061] ? usb_free_urb.part.0+0x52/0x110 [ 58.798974][ T3061] ? usb_free_urb+0x1b/0x30 [ 58.803488][ T3061] ath9k_htc_hw_init+0x31/0x60 [ 58.808276][ T3061] ath9k_hif_usb_firmware_cb+0x274/0x510 [ 58.813920][ T3061] ? ath9k_hif_usb_resume+0x320/0x320 [ 58.819299][ T3061] request_firmware_work_func+0x126/0x242 [ 58.825028][ T3061] ? request_firmware_into_buf+0x90/0x90 21:55:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x24, 0x0, 0x0}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x54, 0x5, 0x4, {0x7, 0x2}, {0x3, 0x3}, @const={0xffff, {0x9, 0x80, 0x950e, 0x8}}}) r1 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff51}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc0c, &(0x7f00000002c0)=ANY=[@ANYBLOB="050c004e83e89102ec8bde087a6bfede66e17d55dc48fbfc69ce1831b8406d7232f1bd2c043cbe8f6a601dedfbd83e6611185ff626d0a8b9d77a17bff4509b9a9a3c6d35337fec002551d9e831788ad98b8a00a8abaf61da2c595735722218b055a947cc9d0a300500865a338b822f390661bacca766015278856e6f67e61b893ce71b9a3aa3f097848b4a2ec886a5f97c47d76541f0ddf1aa6de26d3c9b9741b157ea6ce05a7a289662c252707b503de4e2271acc418aefd1c2b610c2cf0d2d8569025fdd09cbbcad3f7d3f7e8f9781db43ba3a529485ac8eaacc1105b37f14ccea22f82c5f048da7eb637d7862064c10c2b61835401f79f8a50e78bd95bd4cbbb57cce8e54e0ef934b32fa75663af10d9dd12467882ecb68cbdb055948f11dd04c9e7ffc97916b19a87df9f530a88821b847a5409901570563aca7e0ceecf54dde0cd1dcd9936020a7364edc687adad30ce25828cb0d6810d2e0fa6d1eb8faf98aadb101bd583bb35c2b93250f1bb3cd4f95a43fdd5670e59a7d5a3b97a20800fec97ab01818f196a7ed035235ccf84db12deafce7f72d5a7f8f168cfa071e68168efbbd332d1bd6d02d7bc3d23dd3835906784936a10e872af2eacd9613a79368ce7d5402de4f662778261ed7055e9b6d6e97da91609d23e4c9335d9de63a7df1ade3bce7a532bbf853c62f269f7941981626b8fa1c2e8d0269309034ff82893c9f7ca84bbfd46f4935710f74d551ee9e63b173ddbacfb5f1a75d307a3e0bcfb6c8ee0efd8fdb3c0380bfb506d73e457af8c2263bd00ea10fd274f294b770e87ecfe10ac215a12de112698c67c3a6ef72e214e07ca6ca3766d81d355af35830d9d76640bacdfa9d1f0000656cfd1edc76df8afafdbac20acc8de4d493814da48b7b9ae1fe6cc0d1028779327afeb3215ff4ef4a58d2f06cae67e153eecf6734bbe7616ae9e81d7e3367c18e16d392a968bf39ab1e0e59742d069f9ddc82927dca25a383793ca294e15e7d6dfcd019084d3475e4555456d4d596e00c39614245b607a93bcb29e5286e1391b9039663825556efd39ad9509f9e658f62c66850d02b04f7813223b3914f54daace072e465b1576cbd333b91972559f7411ca25bbaf1fe40bb3e9a680f333025ecc7fb1a4e8af11a8293a91e8609158572341ba429687224212ac977fa058c4bd6f9e0c8329e9705222a3b0e463c59d0ff4ab47f5b6b407168c16c3a1669604e83704c00f501fd3fef6f8535c6cef334a25789ce6b7bf6dc218b69d36b87c582157c1ba205eb30bc33e25671247eaa67471e704b922d30d1c8deb9f397a2fc4349cdc9a37317130f2d7851f8ef5e2dd5df4611cc1d571ac1f6045ac1b59fc12bafb88f50e1126f6480d9ea223c123c99150f05d018d1c8e58efc47ebfec2d8e915d932aef473a0039032f88364b8849f8bc022ff7a1050132301b5af21cc1a29619f9aebaad6a44d2e2340aadd833a2171bf87054c342fab6f9b82a1b90f4b78cf467a3dc82889d8d21cdcbe4dd8668ec2d302780cfc6ead0228c66516d9d044ac11ae5c3c3f8e2a1f3e59567963351d7fd67c6a04d21b3f50e2feaa577bad6844d49ba31dbf1db34f2390222bbdc791c8c27b1cb7bdf00c3c7e4bc239468ea93b7a95cf48643d1c17f2990ae33de736cf0bc55fbe7542114e6fa9f1596fc0329e3d26f97c4b7d54cafb7344e6cbb99341ec65ed43fde214beb1c6648d438496be300633db5dad5063ed9abc25c38b6e1414c3272f0dc1123e61ecb39965a32bd8e540666adbd50bed785077b7cc7912b65f53cb683949fc32315a29dc276cb705e43117b6cf7a28c76ac5d58c3c01a71e41d9905381a91301c4f257774fef58b23088c0f3cfd1c4a4fb01052c60692092593685ce62ec4247db7843f1eba6cd3ee1fdf2bae11c5c3ed8728c7395d0b173ee85e63056941bffd8f2e98ba0555ce3b458c3ddcaa7a8d8739fe59cd1cc4ecc00de561ebf37bb885e47e169930f7088d3b1f89420a3b8daf065ba57cac0ac06e680838a21cbfee6aad2baa9bf5ab9bd44a2ea3e1cfb7a8a6dc34f3039f6daff5bebcbabd0683ad9049f288532ec53c69913dad30c1f0b1ae032b95fbe3acf2bd38d845f555460de89f1f854845696a9edf92189b47e7deb02833f7040d6e5a15959c72c712282fb40008cf310c99e521c709535132a2534fb02b18c01e8c8d517b72311f1621b67381049aff0194f390531e4df3d3494d362f7fa060000b000f5e1b459b0951f760f43fd8a99321ea6cbd1a5000d562d8e65339dedcf6fe0efafa184f707154b08ad74f52e2ca51b2942350023f87f1ef4d1f4cfa7d878bceba5875b3ce9c71556da9b654ab3ab9c9278128cb35bffc6e6a89ca137e3f7458d08aa2e6399f3bef82bd26465af466d144bbb1c27a8e0e8b236cd63ddd57d224b86061e06f5daec86c6ec0e126a7fa1833bd6819af434a557f1f639326870e80bde6501def4e1ed46982ab63db2f42106fadf52e41ecb97722cf89ae9adf316c8472a1f9b05fffcd2b5fdf683570b9079e236beb4706e0596baf1c7f180544d34114c76c81070d77697e89c6db2c57437ea2b7a4a41fe232ea69afdfc4955bd7b12eb724b4958099fc1da4715373137c3b655357fc1eadf0180419e2667c19fd5acb003bcb6dcd05656cff8737a0b70880df17a154a89bf5f0a72664ca57c9574db73bec117c851e399cdf5d4d439e2dc8effbee00a4cb4589eb614cb4e3014ce9d8c750b3c9c36d643ec8e8cdeb136278afb640f7ff532976ab745fa3560ba5c9a31ec73bcc3dfc0a51f5903333160d6a349e4e9ad9eb25f25ac88e0deb84ba26192f440d2afbd039ed260cd41d8f8bcbdd6fa2182acbcdeac538181fd5efb08877e6a73af1db14144e7a25a4467b15a6b32683b977f8a6996052e3097320beb64ade18f1caa480936e277f9ddd41ae647ec2083e81c8bb8a851475aa782f047c56e8bd09fa2ddac1f9eee8152dfffaa74b47426c9c7430b23004b87ec1cd3901d7d81a6a243e61f1c3534afef0514bb4541e516e7db11cb58075cfa5c43e1874031036b7766f0f86f53215766f4b69ba5bf523bf5ab9cb4db364c5b928439d7bd31586f7629c2c49c9b41aefd6cd7dfa0428c82626a2b9b09e1da5dfbbea0e6c80ff26c25cafedf0b60e5729f5189fd929b55e5f3dab8b1b474c7327cef1c065eff86ceb0c3f48dfb8bf73c8b7b4bc3b5ee454f3f989666a03f0a43c586650166eb39941540a4e7b010b830c76b7346c4a4a6125497cfe70fa8c477d766b2376189395e1583055155a51798b039b546c2e547d6c4c20139007014df69c6dff94c48ca1465d66323e25f8ff94fc988eb261752a99b361409a5ba879c7569a846d594507a26c599f8081a84a3937c95b5c7dc31f115a7daa011e327b5033c3a2507bc0af687be52a8b4f4750ebfd07acbb3ba7b446a9b9497926d4f6bad236fc886180b9b93fe4b5d8e234c848dca48ef2df3b11a5955456b053ac1a86f9c42838fa4ff23a34e435f32c0816a025554696c47add742243df5e52a085272ad8aee35c56570505c6dad45bd517faa499b6b5ecc99051ce0901a651b93430f57456d9f4ae8502bfa82ec756ed9522fcce8f5fbadf0fccbfbb88a47d70f9ef60aed9081c80d78b01862d63357750769acf7a8373d56814572e7fcc8e32bfdde85f651fbdc17d8b625198581c6a00c603d56b862829dcf466a4cc121b4107664e08c584bd2106a918b01c64c7859f14715cb0427c313783dcfe7fab02e30fe364a1bd59e68f962a96b4e9c5db1118388dd04891e2282112840f3131277fafafb4f1d90b0173f393e8a1be64748b43580eea24baccee47cfb3ed463d70a6e5ddaab38a0605b666cae99535d3f7561a139e9b1ae835888c574bbe71e70fe1889c7fcb1984af487dedaad9ca3e6dd995b74c9137ea4d06b25c28c51184af99988cc80db20a5368aca5e8b56badd29b72e84be54b2447fea2bddae5cec171078bb2c8cc7a795e175ffef3720838827e2708368aa3f1a7e5aa8ce960b3c8ee50ce9cf9c28e7c53e9b50d7b7ea7bdc5056071323aaf055deb7f41b10729cbf92051e0664b21ce866e016a402dd1e64e98809da7f8d660865212f94a8f8cb9196b410a3df9996348801b5bfec32b75f259db19be56b000183d515cffa558be42adeaa7f00109e96b181976847cb68176fcadc3ca5c97636595a89f59fe7199c3e578ce72552fb51ed6fbd1d640cf3f3a378cc766499fdcf1288e17e3eb5361522429da0aefb38e08745c9efedede8a96044cf6b437f359648fee1f91e7b50f7c2da36b343b1462e946a7b2c50dd20cb244227"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x80041) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x101) write$hidraw(r2, 0x0, 0xffde) [ 58.830672][ T3061] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 58.836235][ T3061] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 58.841515][ T3061] ? _raw_spin_unlock_irq+0x1f/0x30 [ 58.846708][ T3061] process_one_work+0x965/0x1630 [ 58.849709][ T3107] usb 2-1: device descriptor read/64, error 18 [ 58.851665][ T3061] ? lock_release+0x720/0x720 [ 58.851679][ T3061] ? pwq_dec_nr_in_flight+0x310/0x310 [ 58.851693][ T3061] ? rwlock_bug.part.0+0x90/0x90 [ 58.851706][ T3061] worker_thread+0x96/0xe20 [ 58.851720][ T3061] ? process_one_work+0x1630/0x1630 [ 58.851735][ T3061] kthread+0x326/0x430 [ 58.851756][ T3061] ? kthread_create_on_node+0xf0/0xf0 [ 58.879604][ T3076] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.882492][ T3061] ret_from_fork+0x24/0x30 [ 58.882499][ T3061] [ 58.882508][ T3061] Allocated by task 3061: [ 58.882525][ T3061] save_stack+0x1b/0x40 [ 58.882538][ T3061] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 58.882552][ T3061] kmem_cache_alloc_node+0xdc/0x330 [ 58.882572][ T3061] __alloc_skb+0xba/0x5a0 [ 58.886798][ T3076] usb 4-1: New USB device found, idVendor=0a07, idProduct=00da, bcdDevice=8f.48 [ 58.892402][ T3061] htc_connect_service+0x2cc/0x840 [ 58.892414][ T3061] ath9k_wmi_connect+0xd2/0x1a0 [ 58.892430][ T3061] ath9k_init_htc_services.constprop.0+0xb4/0x650 [ 58.892443][ T3061] ath9k_htc_probe_device+0x25a/0x1da0 [ 58.892458][ T3061] ath9k_htc_hw_init+0x31/0x60 [ 58.892472][ T3061] ath9k_hif_usb_firmware_cb+0x274/0x510 [ 58.892485][ T3061] request_firmware_work_func+0x126/0x242 21:55:03 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100004d10c310ba66dc92ff050002000109026ae6c9a100b1000904080002fe03010009050502090000f10009058f1e18"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGREP(r1, 0x40025b0c, 0x0) r2 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001c00f540c0070115146500000001090222000100000000090400000103011200090500000000000000070581bb6e"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x0, 0x5b, {0x5b, 0x7, "e6b581e9f0da188e54a368f0c87e7c6fcee61b6e38a7c1501711cccc0ffdce6de024cfc32ec0d16655d0ca13ad42423f8d1645bf8283d25f8020219131136eb4d5c079acad94d1d1336d738555e7c0adf4bc40b1bf68798706"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000180)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0x8, "2f9b5906"}, @local=@item_012={0x1, 0x2, 0x2, "f6"}, @local=@item_012={0x1, 0x2, 0x3, "f4"}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_012={0x2, 0x1, 0x6, "b00a"}, @main=@item_4={0x3, 0x0, 0x8, "2ae332ef"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x3f, 0x1, {0x22, 0xb1}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0xf, 0x3d, "681bc05af451b670d27c05f770a266f3b6c0d72967cd57c6fcb06177b774a1bb582a0c2161fb2f53c80a0784831fddbf3c9e1d8037034785ef0fd03417"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000380)={0x20, 0x1, 0xef, "6f1d1c2413d76e759fda0fdf855f2afbf5f25ef78c5e158defcd1809500464bde42b9f5669714f6449c90c7a3d5e7f0cfc8fecd8085023d36e833898e19669aa0307d976875210bc2d2e2477b806e9cb3b5d1285e325e1dd2eeea3b7e09b3f4b0e3561bd2aa5b175510bca04bf55c77ea638014787357b54a40c5adeb41d0c4475325ed647f5cade8dc319b2b85131b30c534fdf51a6828030aa7e1d8a58664632ee7c3c2fb938053ab60700ef26ca1b1382390fc14b1b52c125e9d0b759e626257ce973893efe8e1ce38f73d34c6d961f56efcf1a0f30d958f20ac38d2818d7d780f5e14fa459e9d062252dc139c7"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xa4}}) [ 58.892498][ T3061] process_one_work+0x965/0x1630 [ 58.892508][ T3061] worker_thread+0x96/0xe20 [ 58.892521][ T3061] kthread+0x326/0x430 [ 58.892533][ T3061] ret_from_fork+0x24/0x30 [ 58.892537][ T3061] [ 58.892544][ T3061] Freed by task 150: [ 58.892558][ T3061] save_stack+0x1b/0x40 [ 58.892570][ T3061] __kasan_slab_free+0x117/0x160 [ 58.892582][ T3061] kmem_cache_free+0x9b/0x360 [ 58.892597][ T3061] kfree_skbmem+0xef/0x1b0 [ 58.892606][ T3061] kfree_skb+0x102/0x3d0 [ 58.892626][ T3061] ath9k_htc_txcompletion_cb+0x1f8/0x2b0 [ 58.902753][ T3076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.907052][ T3061] hif_usb_regout_cb+0x115/0x1c0 [ 58.907070][ T3061] __usb_hcd_giveback_urb+0x29a/0x550 [ 58.925490][ T3076] usb 4-1: config 0 descriptor?? [ 58.928627][ T3061] usb_hcd_giveback_urb+0x368/0x420 [ 58.928644][ T3061] dummy_timer+0x125e/0x32b4 [ 58.928658][ T3061] call_timer_fn+0x1ac/0x700 [ 58.928671][ T3061] run_timer_softirq+0x5f9/0x1500 [ 58.928687][ T3061] __do_softirq+0x21e/0x9aa [ 58.928691][ T3061] [ 58.928702][ T3061] The buggy address belongs to the object at ffff8881cca47c80 [ 58.928702][ T3061] which belongs to the cache skbuff_head_cache of size 224 [ 58.928719][ T3061] The buggy address is located 212 bytes inside of [ 58.928719][ T3061] 224-byte region [ffff8881cca47c80, ffff8881cca47d60) [ 58.971236][ T3076] adutux 4-1:0.0: interrupt endpoints not found [ 58.974182][ T3061] The buggy address belongs to the page: [ 59.029799][ T3187] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 59.032183][ T3061] page:ffffea00073291c0 refcount:1 mapcount:0 mapping:0000000082c2b6fd index:0x0 [ 59.032196][ T3061] flags: 0x200000000000200(slab) [ 59.032216][ T3061] raw: 0200000000000200 ffffea00072d23c0 0000000400000004 ffff8881da175400 [ 59.032234][ T3061] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 59.032240][ T3061] page dumped because: kasan: bad access detected [ 59.032251][ T3061] [ 59.040322][ T3187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.045127][ T3061] Memory state around the buggy address: [ 59.045141][ T3061] ffff8881cca47c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 59.050623][ T3187] usb 6-1: Product: syz [ 59.055402][ T3061] ffff8881cca47c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.060830][ T3187] usb 6-1: Manufacturer: syz [ 59.065331][ T3061] >ffff8881cca47d00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 59.069937][ T3187] usb 6-1: SerialNumber: syz [ 59.074885][ T3061] ^ [ 59.074899][ T3061] ffff8881cca47d80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 59.150209][ T3187] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 59.152938][ T3061] ffff8881cca47e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 59.254007][ T3061] ================================================================== [ 59.262145][ T3061] Disabling lock debugging due to kernel taint [ 59.268375][ T3061] Kernel panic - not syncing: panic_on_warn set ... [ 59.274964][ T3061] CPU: 1 PID: 3061 Comm: kworker/1:3 Tainted: G B 5.7.0-rc6-syzkaller #0 [ 59.284651][ T3061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.289382][ T3107] usb 2-1: device descriptor read/64, error 18 [ 59.294711][ T3061] Workqueue: events request_firmware_work_func [ 59.294719][ T3061] Call Trace: [ 59.294741][ T3061] dump_stack+0xef/0x16e [ 59.294759][ T3061] panic+0x2aa/0x6e1 [ 59.319298][ T3061] ? add_taint.cold+0x16/0x16 [ 59.324142][ T3061] ? retint_kernel+0x10/0x10 [ 59.328741][ T3061] ? kfree_skb+0x32/0x3d0 [ 59.333137][ T3061] ? trace_hardirqs_on+0x55/0x200 [ 59.338238][ T3061] ? kfree_skb+0x32/0x3d0 [ 59.342674][ T3061] end_report+0x4d/0x53 [ 59.346819][ T3061] __kasan_report.cold+0x72/0x7d [ 59.353646][ T3061] ? kfree_skb+0x32/0x3d0 [ 59.357971][ T3061] ? kfree_skb+0x32/0x3d0 [ 59.362302][ T3061] kasan_report+0x33/0x50 [ 59.366613][ T3061] check_memory_region+0x173/0x1d0 [ 59.371722][ T3061] kfree_skb+0x32/0x3d0 [ 59.375903][ T3061] htc_connect_service.cold+0xa9/0x109 [ 59.381339][ T3061] ath9k_wmi_connect+0xd2/0x1a0 [ 59.386282][ T3061] ? ath9k_fatal_work+0x20/0x20 [ 59.392262][ T3061] ? ath9k_hif_usb_firmware_cb.cold+0xde/0xde [ 59.398417][ T3061] ? ath9k_wmi_event_tasklet+0x440/0x440 [ 59.404838][ T3061] ath9k_init_htc_services.constprop.0+0xb4/0x650 [ 59.412151][ T3061] ? ath9k_reg_rmw_flush+0x2d0/0x2d0 [ 59.417508][ T3061] ? lockdep_init_map_waits+0x26a/0x7c0 [ 59.419781][ T3107] usb usb2-port1: attempt power cycle [ 59.423665][ T3061] ? __raw_spin_lock_init+0x34/0x100 [ 59.423680][ T3061] ? tasklet_init+0x69/0x110 [ 59.423694][ T3061] ath9k_htc_probe_device+0x25a/0x1da0 [ 59.423713][ T3061] ? ath9k_init_htc_services.constprop.0+0x650/0x650 [ 59.451816][ T3061] ? usb_submit_urb+0x6ed/0x1460 [ 59.456740][ T3061] ? usb_free_urb.part.0+0x52/0x110 [ 59.461946][ T3061] ? usb_free_urb+0x1b/0x30 [ 59.466432][ T3061] ath9k_htc_hw_init+0x31/0x60 [ 59.471199][ T3061] ath9k_hif_usb_firmware_cb+0x274/0x510 [ 59.476813][ T3061] ? ath9k_hif_usb_resume+0x320/0x320 [ 59.482168][ T3061] request_firmware_work_func+0x126/0x242 [ 59.487868][ T3061] ? request_firmware_into_buf+0x90/0x90 [ 59.493497][ T3061] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 59.499039][ T3061] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 59.504375][ T3061] ? _raw_spin_unlock_irq+0x1f/0x30 [ 59.509584][ T3061] process_one_work+0x965/0x1630 [ 59.514517][ T3061] ? lock_release+0x720/0x720 [ 59.519790][ T3061] ? pwq_dec_nr_in_flight+0x310/0x310 [ 59.525177][ T3061] ? rwlock_bug.part.0+0x90/0x90 [ 59.531136][ T3061] worker_thread+0x96/0xe20 [ 59.535646][ T3061] ? process_one_work+0x1630/0x1630 [ 59.540840][ T3061] kthread+0x326/0x430 [ 59.545066][ T3061] ? kthread_create_on_node+0xf0/0xf0 [ 59.550505][ T3061] ret_from_fork+0x24/0x30 [ 59.555645][ T3061] Kernel Offset: disabled [ 59.559963][ T3061] Rebooting in 86400 seconds..