: 00000000000002ff RDI: 0000000000000006 [ 1130.840406][ T2008] RBP: 00007f679f3ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1130.848402][ T2008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.856407][ T2008] R13: 00007ffdc231a60f R14: 00007f679f3ab300 R15: 0000000000022000 [ 1130.864420][ T2008] [ 1130.870702][ T2336] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1130.913221][ T2336] usbtest: probe of 1-1:1.1 failed with error -71 [ 1130.939176][ T2336] usb 1-1: USB disconnect, device number 48 [ 1131.043174][ T1142] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1131.333293][ T2336] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1131.443206][ T1142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.633258][ T1142] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.642328][ T1142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.650733][ T1142] usb 4-1: Product: syz [ 1131.655456][ T1142] usb 4-1: Manufacturer: syz [ 1131.660069][ T1142] usb 4-1: SerialNumber: syz [ 1131.693277][ T2336] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.863283][ T2336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.872458][ T2336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.881037][ T2336] usb 1-1: Product: syz [ 1131.885582][ T2336] usb 1-1: Manufacturer: syz [ 1131.890181][ T2336] usb 1-1: SerialNumber: syz [ 1131.915625][ T2006] UDC core: couldn't find an available UDC or it's busy: -16 [ 1131.923253][ T2006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1132.139409][ T2017] UDC core: couldn't find an available UDC or it's busy: -16 [ 1132.149657][ T2017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1132.393306][ T1142] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1132.399572][ T1142] cdc_ncm 4-1:1.0: bind() failure [ 1132.407394][ T1142] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1132.414442][ T1142] cdc_ncm 4-1:1.1: bind() failure [ 1132.621248][ T2006] UDC core: couldn't find an available UDC or it's busy: -16 [ 1132.631424][ T2006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1132.650590][ T1142] usb 4-1: USB disconnect, device number 18 [ 1133.383206][ T2336] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1133.389672][ T2336] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1133.397986][ T2336] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1133.603212][ T2336] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1133.612527][ T2336] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1134.235807][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready 03:12:34 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:12:34 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x800, 0x0, 0x0, 0x2ad}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:34 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:34 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r3, &(0x7f0000002bc0)={0x2020}, 0x2020) (async) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x1) 03:12:34 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xfffffdef, 0x0, 0x0, 0x0) (fail_nth: 6) 03:12:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io(r0, &(0x7f0000001140)={0x2c, &(0x7f0000000f80)={0x0, 0x5, 0x3c, {0x3c, 0x5, "083ae67556b3e097ec48ace7e72c468f9d12e5249a47664e5f4a3e03a87e9611cc4567654eddfd5c8e6444e3f0e9ca9b5c79246efa2a8f64dbe3"}}, &(0x7f0000001000)={0x0, 0x3, 0x9a, @string={0x9a, 0x3, "91ce47e29ebc2da35e5378ff8dfa574fc9bdd1f0b9c291db5737699f82ada55ba418aade9b6a330e79638879177a55d23e649211c94fe2f70c37c47c121bded475fb5bd2835976c2cc0f1c3498473dc587ee29751555d1f46d0f7fc509ae875927bac61a7760fa4dd60bd8cf1db5b08a3c7caa438e7f8ca30b671edcd6c28e4509a04075a72db3977a8a0b172a801c93553478601dfb125b"}}, &(0x7f0000000dc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000010c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x1, 0x9, 0x7, "a53a2fbb", "fd12daa0"}}, &(0x7f0000001100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0x40, 0x1, 0x0, 0x1, 0x40}}}, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x0, 0x14, 0xe7, "80750855e2393923954d297c9cf9cd2bd4229fb49de9636fec799e0114ecd447754ce5126a5e6bc5eddab97bf4e8e3f0dbe3caab9bd17a97dc5903252cdfe9055acdb40f7d559f24c4b77dc12b5a52368cb06e2a4930311e680fd58bbf269503e9680ffcf4e8f8333cc6bb1bf233c0bf23c57418e4c998bc0823056ca6a6f93eb50ef689567b89036c181a37685ac02e70b9f153275e7d896747cda4036e5f5666f98ad216587c674b588f2797b261cb4143b6629d2d5fb6a3e5a25980c486f2c474d26dd1cf813a3267c0723023ea2379f10b6737554656d00e8696769b1728da12b79ae69006"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0xd9}, &(0x7f0000001300)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001340)={0x20, 0x0, 0x8, {0x80, 0x1, [0xf00]}}, &(0x7f0000001380)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f00000013c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001400)={0x40, 0xb, 0x2, "02f2"}, &(0x7f0000001440)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001480)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000014c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001500)={0x40, 0x19, 0x2, "cf39"}, &(0x7f0000001540)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001580)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000015c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001600)={0x40, 0x21, 0x1, 0x6}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x3, 0x184, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x48, 0x12, 0x9b, 0xff, 0x19d2, 0x1062, 0xc635, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x172, 0x1, 0xff, 0x1f, 0x10, 0x3, [{{0x9, 0x4, 0x32, 0x6, 0x6, 0xff, 0xff, 0xff, 0xff, [@generic={0x12, 0x11, "24fe3e24ee420c6a9df7e2e23af91d83"}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x72, 0x4, 0x55, 0x5, "852a18"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x2, 0x3}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xf11a, 0x2, 0x6, "25b8a4cf852a10"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x9, 0x7, "", '\\'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x5}]}], [{{0x9, 0x5, 0x9, 0x8, 0x0, 0x3, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x74, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x3f, 0x7f, 0xe1, [@generic={0x2, 0x4}, @generic={0xa, 0xb, "c3e235ba5eeadd50"}]}}, {{0x9, 0x5, 0xe, 0x5, 0x20, 0x9, 0x80, 0x3}}, {{0x9, 0x5, 0x7, 0x14, 0x20, 0x5, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf0, 0x1}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x20, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7f}, @generic={0xc5, 0xa, "90cb0bc5d24660e76ddf9bf251daab0727642bd791a39ae868dbe7d66a8f88cf01f4a46951aa7b720265c13767c2db8da23b0cf6676d61cfa194b12f85f9484488e452179e98f7486c0ed001e694c5e0cdd9d81d8ed6bde460acc59408b726d77198dc5ae6b7defeed0e3d1938ea67763ffd1e43e819c10408cd305a639f210922ca130de84fe7b8865035251afa0a40481539336d5c88c597da87e8d5d0dd8bfdeb324353083215bd17df91ba8c8381e41436aaf02e78943a70baf97aa5501d24dda6"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0x8, 0x3}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x250, 0x20, 0x2, 0x73, 0xff, 0x20}, 0xc, &(0x7f0000000bc0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xb, 0x1, 0x7}]}, 0x6, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x2c09}}, {0xe, &(0x7f0000000c80)=@string={0xe, 0x3, "f9c6e19aae188309a8cdff2b"}}, {0x1e, &(0x7f0000000cc0)=@string={0x1e, 0x3, "d3b35a916cf64095ee2141b74eb1f085ae34c6b8ab4a73ad43224db1"}}, {0x58, &(0x7f0000000d00)=@string={0x58, 0x3, "965c2ec6b0ef9831f61982bb90fb2b9066cdb7f4782379a01ca15272953b9d054e3a41115ec01058fcecc2da9bf8e292c3ab1baf1badc06e97924423f5cc9188265c3572bc3b61be2d709c1b00d6f55b1700069e8b01"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x804}}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000003c0)={0x40, 0xf, 0xfe, {0xfe, 0x10, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0x80, 0x81, "877147ce", "8b1e374f"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x3}}}, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x0, 0x31, 0xf3, "9033d4963ee6092e245eecc8b1f825644ef6ce8901d4b0ae6ee5f5eafbe6300807b6f042ba2e47840b644c8b02de842113bb95da873b943147674afbbe685a5924ba54046aba8b1f8684d9fb93b706c9e3dc804b8b6abf4ec59eb92a8805662d8f1e8ab6ab8203069a7eced2193d83e3d179320df3903644a1af8110e036ba44d49619184e1879772d394731da5ca454bced1d4b7828cf70f113599d099c66e337d0bd7c0182cb820850114c04f948433fe734f624f9b9bfff3ea9af1a9367329fe5cc65d09174a967b0071da1e4f64f52b419819ca6831b3516362b8fb58450978230fc9560f936c7fc12ca1ee2be68b41fa8"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0xe0, 0x10, [0x0]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "4f10"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "819e"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x9283}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x9f}, &(0x7f0000000880)={0x40, 0x1e, 0x1}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001b40)={0x14, &(0x7f0000001ac0)={0x40, 0x8, 0x37, {0x37, 0x6c87962980b2e4c, "6ea7c80e5a8fe4f236b2a70be5b27ed83fafe23d42d1066961666bfd28bf417970c154f9def5fa909689ded71393de39635c76bbaf"}}, &(0x7f0000001b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d80)={0x44, &(0x7f0000001b80)={0x20, 0x12, 0x27, "2260986e59cfb1849a089dd98cf42b8764b9afe8b3182830cbbc3ea8078e919d99a20b5e5cf540"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001c40)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x6, 0xa, 0x1d9, 0x601, 0xfffa, 0x7, 0x3, 0x3, 0x40, 0xffe1}}, &(0x7f0000001c80)={0x20, 0x85, 0x4, 0x822}, &(0x7f0000001cc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001d00)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000001d40)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001800)={0x14, &(0x7f0000001700)={0x0, 0x21, 0x98, {0x98, 0x9, "ad5bd679c77a1e6577499692143822536e703393568df8dcc7fe82fe31a75490a42fb21fa2ae4bb3846a77d423b7e9d16ca8fa9de21c79101c86fa7b971be20ba6b1eace78c21ddbe89d597e71e775dbfd9f63b44ee018fbf82a753296718a7e80f52af73c014dde206c7df9f5fb490fc117c191c201149c052319a67f47b7e87a282b99a7672f8c489a43658fa775b630e8e3f210aa"}}, &(0x7f00000017c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001a40)={0x44, &(0x7f0000001840)={0x20, 0x15, 0x26, "3e3c6a65f972c95d9bef39915749e9e60e2a0a48c3da169c52f39fa6970ddce4877774cb2be6"}, &(0x7f0000001880)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000001900)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x9, 0x8, 0x40, 0x400, 0x49, 0x8, 0x1, 0x9301, 0x3ff, 0x5}}, &(0x7f0000001940)={0x20, 0x85, 0x4, 0x1000}, &(0x7f0000001980)={0x20, 0x83, 0x2}, &(0x7f00000019c0)={0x20, 0x87, 0x2, 0x1f}, &(0x7f0000001a00)={0x20, 0x89, 0x2, 0x1}}) [ 1134.826746][ T20] usb 1-1: USB disconnect, device number 49 [ 1134.843864][ T20] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:12:34 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1134.900177][ T2156] FAULT_INJECTION: forcing a failure. [ 1134.900177][ T2156] name failslab, interval 1, probability 0, space 0, times 0 03:12:35 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r3, &(0x7f0000002bc0)={0x2020}, 0x2020) (async) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x1) [ 1135.001465][ T2156] CPU: 0 PID: 2156 Comm: syz-executor.1 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1135.011924][ T2156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.021994][ T2156] Call Trace: [ 1135.025294][ T2156] [ 1135.028239][ T2156] dump_stack_lvl+0xcd/0x134 [ 1135.032858][ T2156] should_fail.cold+0x5/0xa [ 1135.037388][ T2156] should_failslab+0x5/0x10 [ 1135.042047][ T2156] __kmalloc+0x7b/0x4d0 [ 1135.046223][ T2156] ? dbgfs_schemes_read+0x66/0x8d0 [ 1135.051348][ T2156] ? dbgfs_schemes_read+0x52f/0x8d0 [ 1135.056575][ T2156] ? lockdep_hardirqs_on+0x79/0x100 [ 1135.061821][ T2156] dbgfs_schemes_read+0x66/0x8d0 [ 1135.066807][ T2156] ? unwind_next_frame+0xee1/0x1ce0 [ 1135.072033][ T2156] ? arch_stack_walk+0x5c/0xe0 [ 1135.076828][ T2156] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1135.083126][ T2156] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1135.089390][ T2156] ? debugfs_file_get+0x1ce/0x440 [ 1135.094447][ T2156] full_proxy_read+0x118/0x180 03:12:35 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x800, 0x0, 0x0, 0x2ad}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1135.099236][ T2156] ? full_proxy_write+0x180/0x180 [ 1135.104292][ T2156] loop_rw_iter+0x12d/0x530 [ 1135.108818][ T2156] io_read+0xce6/0xff0 [ 1135.112903][ T2156] ? __lock_acquire+0xbc4/0x56c0 [ 1135.117858][ T2156] ? kiocb_done+0x950/0x950 [ 1135.122382][ T2156] ? __lock_acquire+0xbc4/0x56c0 [ 1135.127336][ T2156] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1135.133353][ T2156] io_issue_sqe+0x800/0x7300 [ 1135.137989][ T2156] ? __fget_files+0x26a/0x470 [ 1135.142689][ T2156] ? lock_downgrade+0x6e0/0x6e0 [ 1135.147592][ T2156] ? find_held_lock+0x2d/0x110 03:12:35 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) connect(r0, &(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) r1 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, 'A^)}]!'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '$@.^'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}], 0xa, "8b44c573c907850016119294e5ad863b50d3c57314c3ca7d8cd84146915c843189bdf4cfd80f6f160c769ac38616cae94670de1c32440c572b864e6641e9225ae282d309b61641202a0a716fa18e9197b0d461de48bd7949ff0f54b7a907ed10df4755cd8b1dbf31e73c8b96fb0430c7f40303911dd40f12d75b2316367e5e7bac1910bbe4425ef8fbc758ad98360973a892925e6083e256136380ffdfad5eff9d5c3e0915c529cee338414afb87fc5437993851a56aa46a2082120f498ff8043b6c55bf493735fd2769e18ea9"}, 0x1b3) [ 1135.152378][ T2156] ? io_openat2+0xbc0/0xbc0 [ 1135.156902][ T2156] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1135.163176][ T2156] io_submit_sqes+0x1046/0x9100 [ 1135.168052][ T2156] ? find_held_lock+0x2d/0x110 [ 1135.172842][ T2156] ? io_apoll_task_func+0x250/0x250 [ 1135.178059][ T2156] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1135.183805][ T2156] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1135.189380][ T2156] ? io_submit_sqes+0x9100/0x9100 [ 1135.194427][ T2156] ? find_held_lock+0x2d/0x110 [ 1135.199211][ T2156] ? __context_tracking_exit+0xb8/0xe0 [ 1135.204687][ T2156] ? lock_downgrade+0x6e0/0x6e0 [ 1135.209562][ T2156] ? lock_downgrade+0x6e0/0x6e0 [ 1135.214429][ T2156] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 1135.220339][ T2156] ? syscall_enter_from_user_mode+0x21/0x70 [ 1135.226250][ T2156] do_syscall_64+0x35/0xb0 [ 1135.230688][ T2156] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1135.236612][ T2156] RIP: 0033:0x7f67a0a36049 03:12:35 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x800, 0x0, 0x0, 0x2ad}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1135.241038][ T2156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1135.261450][ T2156] RSP: 002b:00007f679f3ab168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1135.270242][ T2156] RAX: ffffffffffffffda RBX: 00007f67a0b48f60 RCX: 00007f67a0a36049 [ 1135.278232][ T2156] RDX: 00000000fffffdef RSI: 00000000000002ff RDI: 0000000000000006 [ 1135.286225][ T2156] RBP: 00007f679f3ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.294332][ T2156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:12:35 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1135.302349][ T2156] R13: 00007ffdc231a60f R14: 00007f679f3ab300 R15: 0000000000022000 [ 1135.310338][ T2156] [ 1135.497106][T30378] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1135.663177][ T20] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1135.913522][T30378] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.073403][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.133405][T30378] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1136.142492][T30378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.151091][T30378] usb 4-1: Product: syz [ 1136.155689][T30378] usb 4-1: Manufacturer: syz [ 1136.160303][T30378] usb 4-1: SerialNumber: syz [ 1136.263393][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1136.278197][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.290203][ T20] usb 1-1: Product: syz [ 1136.299052][ T20] usb 1-1: Manufacturer: syz [ 1136.307951][ T20] usb 1-1: SerialNumber: syz [ 1136.407704][ T2154] UDC core: couldn't find an available UDC or it's busy: -16 [ 1136.419056][ T2154] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1136.556708][ T2163] UDC core: couldn't find an available UDC or it's busy: -16 [ 1136.571037][ T2163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1136.813410][T30378] cdc_ncm 4-1:1.0: bind() failure [ 1136.831977][T30378] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1136.847496][T30378] cdc_ncm 4-1:1.1: bind() failure [ 1136.861284][T30378] usb 4-1: USB disconnect, device number 19 [ 1137.833151][ T20] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1137.839625][ T20] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1137.847156][ T20] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1138.053182][ T20] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1138.064942][ T20] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1138.643697][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready 03:12:39 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:12:39 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000240)={0x40, 0x23, 0xb4, {0xb4, 0x30, "85c86df5c0cb9fbf12a05a2a6f94945732ff5fee0c9f24a62b9a7007458a2d03bf28f8a87ef5b68f6ed5dcf602f4a572ca5f4c34a1584a507194eb864ec5d84f0ddab345ed7cc5c3044c4cb4d44dd02d802ed378287ae767da83cf099d2b2c9109537ed7e23fc9479d4bdb84e931c42c2f75d5729a2fd22f6c00b47cde2ed650175118b3b1668cfa9b6a04a5674892c4bea0f184312ec9b39f0e5dcd6f784da8a0b0d0107fe860d1e0f3fb1869766728e755"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, &(0x7f00000000c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x9, 0x0, 0x7, [0x3f30, 0xffc0, 0xc000]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x40, 0x9, 'uMVM', "0de988a3"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x10, 0x5, 0x20, 0x3, 0x3, 0x4}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x20, 0xf, 0x7d, "cdd6ddb2df845568ff40edcd63d69b736ff23463d1808f1b0bc52cfdca2176cc60a73100f58b861b3b6462e0c024ccfe17efbfdf3e83949be268dfcbf44b6acba4817b206062b82f0a3bba765323249a3b373d2024c4f31a12b1e6e32bb71e2b0edf081439cf548e8963eba6a21039d660ea3ee99caa399a88f19a747c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1d0, 0x40}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000600)={0x40, 0xb, 0x2, "60c3"}, &(0x7f0000000640)={0x40, 0xf, 0x2}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="a3461341e791"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "898e"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xcb}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) 03:12:39 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x800, 0x0, 0x0, 0x2ad}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:39 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) connect(r0, &(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) r1 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, 'A^)}]!'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '$@.^'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}], 0xa, "8b44c573c907850016119294e5ad863b50d3c57314c3ca7d8cd84146915c843189bdf4cfd80f6f160c769ac38616cae94670de1c32440c572b864e6641e9225ae282d309b61641202a0a716fa18e9197b0d461de48bd7949ff0f54b7a907ed10df4755cd8b1dbf31e73c8b96fb0430c7f40303911dd40f12d75b2316367e5e7bac1910bbe4425ef8fbc758ad98360973a892925e6083e256136380ffdfad5eff9d5c3e0915c529cee338414afb87fc5437993851a56aa46a2082120f498ff8043b6c55bf493735fd2769e18ea9"}, 0x1b3) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) connect(r0, &(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, 'A^)}]!'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '$@.^'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}], 0xa, "8b44c573c907850016119294e5ad863b50d3c57314c3ca7d8cd84146915c843189bdf4cfd80f6f160c769ac38616cae94670de1c32440c572b864e6641e9225ae282d309b61641202a0a716fa18e9197b0d461de48bd7949ff0f54b7a907ed10df4755cd8b1dbf31e73c8b96fb0430c7f40303911dd40f12d75b2316367e5e7bac1910bbe4425ef8fbc758ad98360973a892925e6083e256136380ffdfad5eff9d5c3e0915c529cee338414afb87fc5437993851a56aa46a2082120f498ff8043b6c55bf493735fd2769e18ea9"}, 0x1b3) (async) 03:12:39 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xfffffdef, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1139.276015][ T3684] usb 1-1: USB disconnect, device number 50 [ 1139.288463][ T3684] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:12:39 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x800, 0x0, 0x0, 0x2ad}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1139.365076][ T2373] FAULT_INJECTION: forcing a failure. [ 1139.365076][ T2373] name failslab, interval 1, probability 0, space 0, times 0 03:12:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1139.453217][ T2373] CPU: 1 PID: 2373 Comm: syz-executor.1 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1139.463691][ T2373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.473768][ T2373] Call Trace: [ 1139.477059][ T2373] [ 1139.480012][ T2373] dump_stack_lvl+0xcd/0x134 [ 1139.484632][ T2373] should_fail.cold+0x5/0xa [ 1139.489158][ T2373] should_failslab+0x5/0x10 [ 1139.493692][ T2373] __kmalloc+0x7b/0x4d0 [ 1139.497871][ T2373] ? dbgfs_schemes_read+0x66/0x8d0 03:12:39 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x800, 0x0, 0x0, 0x2ad}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1139.503013][ T2373] ? dbgfs_schemes_read+0x52f/0x8d0 [ 1139.508238][ T2373] ? lockdep_hardirqs_on+0x79/0x100 [ 1139.513459][ T2373] dbgfs_schemes_read+0x66/0x8d0 [ 1139.518427][ T2373] ? unwind_next_frame+0xee1/0x1ce0 [ 1139.523656][ T2373] ? arch_stack_walk+0x5c/0xe0 [ 1139.528447][ T2373] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1139.534715][ T2373] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1139.540989][ T2373] ? debugfs_file_get+0x1ce/0x440 [ 1139.546041][ T2373] full_proxy_read+0x118/0x180 03:12:39 executing program 5: r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1139.550834][ T2373] ? full_proxy_write+0x180/0x180 [ 1139.555880][ T2373] loop_rw_iter+0x12d/0x530 [ 1139.560411][ T2373] io_read+0xce6/0xff0 [ 1139.564501][ T2373] ? __lock_acquire+0xbc4/0x56c0 [ 1139.569458][ T2373] ? kiocb_done+0x950/0x950 [ 1139.573983][ T2373] ? __lock_acquire+0xbc4/0x56c0 [ 1139.578941][ T2373] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1139.584945][ T2373] io_issue_sqe+0x800/0x7300 [ 1139.589553][ T2373] ? __fget_files+0x26a/0x470 [ 1139.594244][ T2373] ? lock_downgrade+0x6e0/0x6e0 [ 1139.599121][ T2373] ? find_held_lock+0x2d/0x110 [ 1139.603908][ T2373] ? io_openat2+0xbc0/0xbc0 [ 1139.608431][ T2373] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1139.614701][ T2373] io_submit_sqes+0x1046/0x9100 [ 1139.619574][ T2373] ? find_held_lock+0x2d/0x110 [ 1139.624355][ T2373] ? io_apoll_task_func+0x250/0x250 [ 1139.629571][ T2373] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1139.633056][ T3758] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1139.635385][ T2373] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1139.648463][ T2373] ? io_submit_sqes+0x9100/0x9100 03:12:39 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) connect(r0, &(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) r1 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, 'A^)}]!'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '$@.^'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}], 0xa, "8b44c573c907850016119294e5ad863b50d3c57314c3ca7d8cd84146915c843189bdf4cfd80f6f160c769ac38616cae94670de1c32440c572b864e6641e9225ae282d309b61641202a0a716fa18e9197b0d461de48bd7949ff0f54b7a907ed10df4755cd8b1dbf31e73c8b96fb0430c7f40303911dd40f12d75b2316367e5e7bac1910bbe4425ef8fbc758ad98360973a892925e6083e256136380ffdfad5eff9d5c3e0915c529cee338414afb87fc5437993851a56aa46a2082120f498ff8043b6c55bf493735fd2769e18ea9"}, 0x1b3) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) connect(r0, &(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, 'A^)}]!'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, '$@.^'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}, {0x20, 'cpuacct.usage_user\x00'}, {0x20, '/sys/kernel/debug/damon/schemes\x00'}], 0xa, "8b44c573c907850016119294e5ad863b50d3c57314c3ca7d8cd84146915c843189bdf4cfd80f6f160c769ac38616cae94670de1c32440c572b864e6641e9225ae282d309b61641202a0a716fa18e9197b0d461de48bd7949ff0f54b7a907ed10df4755cd8b1dbf31e73c8b96fb0430c7f40303911dd40f12d75b2316367e5e7bac1910bbe4425ef8fbc758ad98360973a892925e6083e256136380ffdfad5eff9d5c3e0915c529cee338414afb87fc5437993851a56aa46a2082120f498ff8043b6c55bf493735fd2769e18ea9"}, 0x1b3) (async) [ 1139.653508][ T2373] ? find_held_lock+0x2d/0x110 [ 1139.658295][ T2373] ? __context_tracking_exit+0xb8/0xe0 [ 1139.663768][ T2373] ? lock_downgrade+0x6e0/0x6e0 [ 1139.668638][ T2373] ? lock_downgrade+0x6e0/0x6e0 [ 1139.673508][ T2373] ? syscall_enter_from_user_mode+0x21/0x70 [ 1139.679423][ T2373] do_syscall_64+0x35/0xb0 [ 1139.683859][ T2373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1139.689772][ T2373] RIP: 0033:0x7f67a0a36049 [ 1139.694197][ T2373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1139.713821][ T2373] RSP: 002b:00007f679f3ab168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1139.722257][ T2373] RAX: ffffffffffffffda RBX: 00007f67a0b48f60 RCX: 00007f67a0a36049 [ 1139.730259][ T2373] RDX: 00000000fffffdef RSI: 00000000000002ff RDI: 0000000000000006 [ 1139.738256][ T2373] RBP: 00007f679f3ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1139.746249][ T2373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.754232][ T2373] R13: 00007ffdc231a60f R14: 00007f679f3ab300 R15: 0000000000022000 [ 1139.762219][ T2373] 03:12:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1140.013488][ T3758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.143227][ T3684] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1140.193226][ T3758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1140.202597][ T3758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.212617][ T3758] usb 4-1: Product: syz [ 1140.217490][ T3758] usb 4-1: Manufacturer: syz [ 1140.222262][ T3758] usb 4-1: SerialNumber: syz [ 1140.476444][ T2374] UDC core: couldn't find an available UDC or it's busy: -16 [ 1140.487278][ T2374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1140.503235][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.683358][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1140.692442][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.717999][ T3684] usb 1-1: Product: syz [ 1140.722209][ T3684] usb 1-1: Manufacturer: syz [ 1140.727323][ T3684] usb 1-1: SerialNumber: syz [ 1140.985178][ T2379] UDC core: couldn't find an available UDC or it's busy: -16 [ 1140.992688][ T2379] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1141.733518][ T3758] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1141.740012][ T3758] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1141.748708][ T3758] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1141.953189][ T3758] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1141.974568][ T3758] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1142.243331][ T3684] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1142.257723][ T3684] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1142.265258][ T3684] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1142.463206][ T3684] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1142.486245][ T3684] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1142.517213][ T2518] UDC core: couldn't find an available UDC or it's busy: -16 [ 1142.528206][ T2518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1142.580776][T30378] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1143.503405][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 1143.647638][T30378] usb 4-1: USB disconnect, device number 20 [ 1143.673465][T30378] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 1143.682317][ T3684] usb 1-1: USB disconnect, device number 51 03:12:43 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 03:12:43 executing program 5: r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:43 executing program 2: stat(&(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, 0xa, &(0x7f0000000840)=[{&(0x7f0000000200)="babe88c08d650f495a88d0ecabc47486d8c86ae0226d5e355c2a735c728f30c65e13", 0x22, 0x8}, {&(0x7f00000002c0)="2b66dbc34f908aaaebb9496da987dfc4a6b4f1ce97e72690a666aa", 0x1b, 0x1b3f}, {&(0x7f0000000340)="b6960358448bc31ddec95c868b25658722165b648fd66613496a5bba9df7125c71cd8da4f0440bd5733debfe2e68a96a3d506f5bc82950a044b1cc25814f67c98494b4143fcf3df6d3b7132b913cb8b937f3a01d1f2bf437bfd8359d6ba6ee8171ea70fafaca2fdc1e213f5b4db8526a9f62443bb65c055a3fce34e8763ef5827d0da9681ca2dd4074f445be27725182", 0x90, 0x1e3}, {&(0x7f0000000400)="fdff4cf5f4886f694b", 0x9, 0x5}, {&(0x7f0000000440)="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", 0xfb, 0x9}, {&(0x7f0000000540)="e1a20958096f48f86f5104ba94c51183743b1b2d998682296e4e266a550b1c6a7262dc7bb3ecd11256a67bd1c52b074281c41db39fd4a895f62f475f5e006bf372467a29d003313243afd37f7213d41bff51b48521f6379aa3a42f79a5e11c50b2d4e65cb7445f81e870762960a9ba1ef7fbab25984d89717150714c650cc5efd6", 0x81, 0x1}, {&(0x7f0000000600)="d6f5db3c5504225ae2d5ac0e958a72a856d3a9ae8d70f607c9042c9bb0ab678133288d6cf52e488eb7", 0x29, 0x7f}, {&(0x7f0000000640)="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", 0xfb, 0x4}, {&(0x7f0000000740)="56277a7fc55604ee511569252d400399e21b8970858b495341d58ff5f12c4fa2e2b213ddd96d14b1cf2a4cf7a68bbca95fc91856203ae4eedeb6ebb7d9e27c9df69c392946d54d6b86baf7e01ca8c357001d8fc81b2b97054ca1aa0556effc1df81a7d398bcccefaa4d6f1514d6d15600e88303ddddc559cf2ed262cb7d77b05372693eb1cbfb78aefcc831c86042b38209f93064f22eb22e21a3749ce22a649f6d3dde059f2bfd859dc1383d49e", 0xae, 0x100}, {&(0x7f0000000800)="42768fecd67fafdf16f30c102176ea2628b1b64cf8a63d1fa50deeae764532f4", 0x20, 0x81}], 0x200000, &(0x7f0000000a00)={[{'\x00'}], [{@euid_gt}, {@uid_eq={'uid', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@permit_directio}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:43 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:43 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xfffffdef, 0x0, 0x0, 0x0) (fail_nth: 8) 03:12:43 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async, rerun: 64) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000240)={0x40, 0x23, 0xb4, {0xb4, 0x30, "85c86df5c0cb9fbf12a05a2a6f94945732ff5fee0c9f24a62b9a7007458a2d03bf28f8a87ef5b68f6ed5dcf602f4a572ca5f4c34a1584a507194eb864ec5d84f0ddab345ed7cc5c3044c4cb4d44dd02d802ed378287ae767da83cf099d2b2c9109537ed7e23fc9479d4bdb84e931c42c2f75d5729a2fd22f6c00b47cde2ed650175118b3b1668cfa9b6a04a5674892c4bea0f184312ec9b39f0e5dcd6f784da8a0b0d0107fe860d1e0f3fb1869766728e755"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, &(0x7f00000000c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x9, 0x0, 0x7, [0x3f30, 0xffc0, 0xc000]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x40, 0x9, 'uMVM', "0de988a3"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x10, 0x5, 0x20, 0x3, 0x3, 0x4}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x20, 0xf, 0x7d, "cdd6ddb2df845568ff40edcd63d69b736ff23463d1808f1b0bc52cfdca2176cc60a73100f58b861b3b6462e0c024ccfe17efbfdf3e83949be268dfcbf44b6acba4817b206062b82f0a3bba765323249a3b373d2024c4f31a12b1e6e32bb71e2b0edf081439cf548e8963eba6a21039d660ea3ee99caa399a88f19a747c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1d0, 0x40}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000600)={0x40, 0xb, 0x2, "60c3"}, &(0x7f0000000640)={0x40, 0xf, 0x2}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="a3461341e791"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "898e"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xcb}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) [ 1143.705341][ T3684] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 1143.748950][ T2586] loop2: detected capacity change from 0 to 27 03:12:43 executing program 5: r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:43 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1143.851292][ T2586] (syz-executor.2,2586,0):ocfs2_parse_options:1476 ERROR: Invalid heartbeat mount options [ 1143.854117][ T2587] FAULT_INJECTION: forcing a failure. [ 1143.854117][ T2587] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.946568][ T2586] (syz-executor.2,2586,0):ocfs2_fill_super:1185 ERROR: status = -22 [ 1143.969109][ T2587] CPU: 1 PID: 2587 Comm: syz-executor.1 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1143.979572][ T2587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.989644][ T2587] Call Trace: [ 1143.992934][ T2587] [ 1143.995872][ T2587] dump_stack_lvl+0xcd/0x134 [ 1144.000512][ T2587] should_fail.cold+0x5/0xa [ 1144.005041][ T2587] should_failslab+0x5/0x10 [ 1144.009567][ T2587] __kmalloc+0x7b/0x4d0 [ 1144.013774][ T2587] ? dbgfs_schemes_read+0x66/0x8d0 [ 1144.018905][ T2587] ? dbgfs_schemes_read+0x52f/0x8d0 [ 1144.024100][ T2587] ? lockdep_hardirqs_on+0x79/0x100 [ 1144.029293][ T2587] dbgfs_schemes_read+0x66/0x8d0 [ 1144.034228][ T2587] ? mark_lock.part.0+0xee/0x1910 [ 1144.039250][ T2587] ? arch_stack_walk+0x5c/0xe0 [ 1144.044011][ T2587] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1144.050271][ T2587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1144.057037][ T2587] ? debugfs_file_get+0x1ce/0x440 [ 1144.062064][ T2587] full_proxy_read+0x118/0x180 [ 1144.066841][ T2587] ? full_proxy_write+0x180/0x180 [ 1144.071865][ T2587] loop_rw_iter+0x12d/0x530 [ 1144.076372][ T2587] io_read+0xce6/0xff0 [ 1144.080437][ T2587] ? __lock_acquire+0xbc4/0x56c0 [ 1144.085379][ T2587] ? kiocb_done+0x950/0x950 [ 1144.089878][ T2587] ? __lock_acquire+0xbc4/0x56c0 [ 1144.094821][ T2587] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1144.100813][ T2587] io_issue_sqe+0x800/0x7300 [ 1144.105402][ T2587] ? __fget_files+0x26a/0x470 [ 1144.110079][ T2587] ? lock_downgrade+0x6e0/0x6e0 [ 1144.114951][ T2587] ? find_held_lock+0x2d/0x110 [ 1144.119723][ T2587] ? io_openat2+0xbc0/0xbc0 [ 1144.124222][ T2587] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1144.130466][ T2587] io_submit_sqes+0x1046/0x9100 [ 1144.135319][ T2587] ? find_held_lock+0x2d/0x110 [ 1144.140077][ T2587] ? io_apoll_task_func+0x250/0x250 [ 1144.145281][ T2587] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1144.150998][ T2587] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1144.156542][ T2587] ? io_submit_sqes+0x9100/0x9100 [ 1144.161564][ T2587] ? find_held_lock+0x2d/0x110 [ 1144.166323][ T2587] ? __context_tracking_exit+0xb8/0xe0 [ 1144.171777][ T2587] ? lock_downgrade+0x6e0/0x6e0 [ 1144.176636][ T2587] ? lock_downgrade+0x6e0/0x6e0 [ 1144.181572][ T2587] ? syscall_enter_from_user_mode+0x21/0x70 [ 1144.187462][ T2587] do_syscall_64+0x35/0xb0 [ 1144.191881][ T2587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1144.197801][ T2587] RIP: 0033:0x7f67a0a36049 [ 1144.202211][ T2587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1144.221903][ T2587] RSP: 002b:00007f679f3ab168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1144.230331][ T2587] RAX: ffffffffffffffda RBX: 00007f67a0b48f60 RCX: 00007f67a0a36049 [ 1144.238298][ T2587] RDX: 00000000fffffdef RSI: 00000000000002ff RDI: 0000000000000006 03:12:44 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2ad}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1144.246350][ T2587] RBP: 00007f679f3ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.254316][ T2587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.262294][ T2587] R13: 00007ffdc231a60f R14: 00007f679f3ab300 R15: 0000000000022000 [ 1144.270273][ T2587] 03:12:44 executing program 2: stat(&(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, 0xa, &(0x7f0000000840)=[{&(0x7f0000000200)="babe88c08d650f495a88d0ecabc47486d8c86ae0226d5e355c2a735c728f30c65e13", 0x22, 0x8}, {&(0x7f00000002c0)="2b66dbc34f908aaaebb9496da987dfc4a6b4f1ce97e72690a666aa", 0x1b, 0x1b3f}, {&(0x7f0000000340)="b6960358448bc31ddec95c868b25658722165b648fd66613496a5bba9df7125c71cd8da4f0440bd5733debfe2e68a96a3d506f5bc82950a044b1cc25814f67c98494b4143fcf3df6d3b7132b913cb8b937f3a01d1f2bf437bfd8359d6ba6ee8171ea70fafaca2fdc1e213f5b4db8526a9f62443bb65c055a3fce34e8763ef5827d0da9681ca2dd4074f445be27725182", 0x90, 0x1e3}, {&(0x7f0000000400)="fdff4cf5f4886f694b", 0x9, 0x5}, {&(0x7f0000000440)="be4b6c38f4573c87a271f9eed11cb97600cdf7bcf8a0dd88825da14065706bbd0b4cc6f649bd46ff4f424a41f5b43343fe08f8acd786aaff459f5ac3ff3c1c169d6cd7dd5ee0a303529ffca507bac876f485c7fa39fd85d7c05a0a66df0621ea314b37379fbf851e914ee2121708e25292630c8b3b771ab7fb09eacb273ad9bc7e1f851b83eb9eb85fe92922cec8c94215fa6d45751f0400d78625b26fc07f61e31032d87bee17ebd69d3799b1bfc9dd6e2a6db166c22ba7952eaeb6dcc8989d20f216b5a5fed6299377e70aaa7632ebac5c1b7fa08ef6365e486b7e51085dd1ec09f7891650a5944327c7984ff75130d8881c206d18db3980e73f", 0xfb, 0x9}, {&(0x7f0000000540)="e1a20958096f48f86f5104ba94c51183743b1b2d998682296e4e266a550b1c6a7262dc7bb3ecd11256a67bd1c52b074281c41db39fd4a895f62f475f5e006bf372467a29d003313243afd37f7213d41bff51b48521f6379aa3a42f79a5e11c50b2d4e65cb7445f81e870762960a9ba1ef7fbab25984d89717150714c650cc5efd6", 0x81, 0x1}, {&(0x7f0000000600)="d6f5db3c5504225ae2d5ac0e958a72a856d3a9ae8d70f607c9042c9bb0ab678133288d6cf52e488eb7", 0x29, 0x7f}, {&(0x7f0000000640)="b690882564f94fd23989d9860b250515c92533f458bee9281217cb63ce84bcf3df1db31de9dbc4c4e9dddf65912772bb1e95b929f76e595f539ae45aa982f6048e23af645b6ac4d5daa50c7b569f1233845af98b23d527cf247b42796942c29e2e22dcd3215e3cc7a6bb8fddc1398673a8663989f393a967e45a885c55eeb533e6f0c60bea2fb4d247a99a4f0a828785f370695cffb7e966cfea931b148399a1058f7b305e4154f3a9f00cc368318974c1e8efa6af130dab75c4e53aa200c14de0e2e76cf5811440b9f224e790d3b36604a4906415bd9cae2266011bcd01edd631f752f370fa3740b54f11e8296e4e5d8d712581f5be010302b272", 0xfb, 0x4}, {&(0x7f0000000740)="56277a7fc55604ee511569252d400399e21b8970858b495341d58ff5f12c4fa2e2b213ddd96d14b1cf2a4cf7a68bbca95fc91856203ae4eedeb6ebb7d9e27c9df69c392946d54d6b86baf7e01ca8c357001d8fc81b2b97054ca1aa0556effc1df81a7d398bcccefaa4d6f1514d6d15600e88303ddddc559cf2ed262cb7d77b05372693eb1cbfb78aefcc831c86042b38209f93064f22eb22e21a3749ce22a649f6d3dde059f2bfd859dc1383d49e", 0xae, 0x100}, {&(0x7f0000000800)="42768fecd67fafdf16f30c102176ea2628b1b64cf8a63d1fa50deeae764532f4", 0x20, 0x81}], 0x200000, &(0x7f0000000a00)={[{'\x00'}], [{@euid_gt}, {@uid_eq={'uid', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@permit_directio}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) (async) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 03:12:44 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xfffffdef, 0x0, 0x0, 0x0) (fail_nth: 9) 03:12:44 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1144.518498][ T2601] loop2: detected capacity change from 0 to 27 [ 1144.525080][ T3684] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1144.577254][ T2611] FAULT_INJECTION: forcing a failure. [ 1144.577254][ T2611] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.629443][T30378] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1144.638496][ T2601] (syz-executor.2,2601,1):ocfs2_parse_options:1476 ERROR: Invalid heartbeat mount options [ 1144.662449][ T2601] (syz-executor.2,2601,1):ocfs2_fill_super:1185 ERROR: status = -22 [ 1144.662588][ T2611] CPU: 0 PID: 2611 Comm: syz-executor.1 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1144.680967][ T2611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.691039][ T2611] Call Trace: [ 1144.694436][ T2611] [ 1144.697381][ T2611] dump_stack_lvl+0xcd/0x134 [ 1144.702001][ T2611] should_fail.cold+0x5/0xa [ 1144.706530][ T2611] should_failslab+0x5/0x10 [ 1144.711060][ T2611] __kmalloc+0x7b/0x4d0 [ 1144.715238][ T2611] ? dbgfs_schemes_read+0x66/0x8d0 [ 1144.720373][ T2611] ? dbgfs_schemes_read+0x52f/0x8d0 [ 1144.725594][ T2611] ? lockdep_hardirqs_on+0x79/0x100 [ 1144.730907][ T2611] dbgfs_schemes_read+0x66/0x8d0 [ 1144.735879][ T2611] ? unwind_next_frame+0xee1/0x1ce0 [ 1144.741097][ T2611] ? arch_stack_walk+0x5c/0xe0 [ 1144.745886][ T2611] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1144.752156][ T2611] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1144.758420][ T2611] ? debugfs_file_get+0x1ce/0x440 [ 1144.763511][ T2611] full_proxy_read+0x118/0x180 [ 1144.768389][ T2611] ? full_proxy_write+0x180/0x180 [ 1144.773437][ T2611] loop_rw_iter+0x12d/0x530 [ 1144.777967][ T2611] io_read+0xce6/0xff0 [ 1144.782054][ T2611] ? __lock_acquire+0xbc4/0x56c0 [ 1144.787015][ T2611] ? kiocb_done+0x950/0x950 [ 1144.791536][ T2611] ? __lock_acquire+0xbc4/0x56c0 [ 1144.796500][ T2611] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1144.802505][ T2611] io_issue_sqe+0x800/0x7300 [ 1144.807120][ T2611] ? __fget_files+0x26a/0x470 [ 1144.811818][ T2611] ? lock_downgrade+0x6e0/0x6e0 [ 1144.816690][ T2611] ? find_held_lock+0x2d/0x110 [ 1144.821477][ T2611] ? io_openat2+0xbc0/0xbc0 [ 1144.825997][ T2611] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1144.832266][ T2611] io_submit_sqes+0x1046/0x9100 [ 1144.837238][ T2611] ? find_held_lock+0x2d/0x110 [ 1144.842022][ T2611] ? io_apoll_task_func+0x250/0x250 [ 1144.847245][ T2611] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1144.852987][ T2611] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1144.858558][ T2611] ? io_submit_sqes+0x9100/0x9100 [ 1144.863601][ T2611] ? find_held_lock+0x2d/0x110 [ 1144.868384][ T2611] ? __context_tracking_exit+0xb8/0xe0 [ 1144.873865][ T2611] ? lock_downgrade+0x6e0/0x6e0 [ 1144.878743][ T2611] ? lock_downgrade+0x6e0/0x6e0 [ 1144.883624][ T2611] ? syscall_enter_from_user_mode+0x21/0x70 [ 1144.889550][ T2611] do_syscall_64+0x35/0xb0 [ 1144.893987][ T2611] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1144.899903][ T2611] RIP: 0033:0x7f67a0a36049 [ 1144.904336][ T2611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1144.924054][ T2611] RSP: 002b:00007f679f3ab168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1144.932489][ T2611] RAX: ffffffffffffffda RBX: 00007f67a0b48f60 RCX: 00007f67a0a36049 [ 1144.940489][ T2611] RDX: 00000000fffffdef RSI: 00000000000002ff RDI: 0000000000000006 [ 1144.948482][ T2611] RBP: 00007f679f3ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1144.956474][ T2611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.964465][ T2611] R13: 00007ffdc231a60f R14: 00007f679f3ab300 R15: 0000000000022000 [ 1144.972455][ T2611] [ 1145.143265][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.313292][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.322380][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.331688][ T3684] usb 1-1: Product: syz [ 1145.336840][ T3684] usb 1-1: Manufacturer: syz [ 1145.341544][ T3684] usb 1-1: SerialNumber: syz [ 1145.403406][T30378] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.600917][T30378] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.612146][T30378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.612412][ T2590] UDC core: couldn't find an available UDC or it's busy: -16 [ 1145.620778][T30378] usb 4-1: Product: syz [ 1145.628379][ T2590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1145.640548][T30378] usb 4-1: Manufacturer: syz [ 1145.653214][T30378] usb 4-1: SerialNumber: syz [ 1145.932443][ T2588] UDC core: couldn't find an available UDC or it's busy: -16 [ 1145.948784][ T2588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1145.957349][ T2588] UDC core: couldn't find an available UDC or it's busy: -16 [ 1145.965159][ T2588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1145.973459][ T2588] UDC core: couldn't find an available UDC or it's busy: -16 [ 1145.980854][ T2588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1145.992062][ T2588] UDC core: couldn't find an available UDC or it's busy: -16 [ 1146.009163][ T2588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1146.019043][ T2588] UDC core: couldn't find an available UDC or it's busy: -16 [ 1146.032022][ T2588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1146.053328][T30378] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1146.059392][T30378] cdc_ncm 4-1:1.0: bind() failure [ 1146.073463][T30378] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1146.080352][T30378] cdc_ncm 4-1:1.1: bind() failure [ 1146.665554][ T3683] usb 4-1: USB disconnect, device number 21 [ 1146.883192][ T3684] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1146.889839][ T3684] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1146.897418][ T3684] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1147.103338][ T3684] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1147.125737][ T3684] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1148.181799][T30378] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready 03:12:48 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 03:12:48 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:48 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:48 executing program 2: stat(&(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, 0xa, &(0x7f0000000840)=[{&(0x7f0000000200)="babe88c08d650f495a88d0ecabc47486d8c86ae0226d5e355c2a735c728f30c65e13", 0x22, 0x8}, {&(0x7f00000002c0)="2b66dbc34f908aaaebb9496da987dfc4a6b4f1ce97e72690a666aa", 0x1b, 0x1b3f}, {&(0x7f0000000340)="b6960358448bc31ddec95c868b25658722165b648fd66613496a5bba9df7125c71cd8da4f0440bd5733debfe2e68a96a3d506f5bc82950a044b1cc25814f67c98494b4143fcf3df6d3b7132b913cb8b937f3a01d1f2bf437bfd8359d6ba6ee8171ea70fafaca2fdc1e213f5b4db8526a9f62443bb65c055a3fce34e8763ef5827d0da9681ca2dd4074f445be27725182", 0x90, 0x1e3}, {&(0x7f0000000400)="fdff4cf5f4886f694b", 0x9, 0x5}, {&(0x7f0000000440)="be4b6c38f4573c87a271f9eed11cb97600cdf7bcf8a0dd88825da14065706bbd0b4cc6f649bd46ff4f424a41f5b43343fe08f8acd786aaff459f5ac3ff3c1c169d6cd7dd5ee0a303529ffca507bac876f485c7fa39fd85d7c05a0a66df0621ea314b37379fbf851e914ee2121708e25292630c8b3b771ab7fb09eacb273ad9bc7e1f851b83eb9eb85fe92922cec8c94215fa6d45751f0400d78625b26fc07f61e31032d87bee17ebd69d3799b1bfc9dd6e2a6db166c22ba7952eaeb6dcc8989d20f216b5a5fed6299377e70aaa7632ebac5c1b7fa08ef6365e486b7e51085dd1ec09f7891650a5944327c7984ff75130d8881c206d18db3980e73f", 0xfb, 0x9}, {&(0x7f0000000540)="e1a20958096f48f86f5104ba94c51183743b1b2d998682296e4e266a550b1c6a7262dc7bb3ecd11256a67bd1c52b074281c41db39fd4a895f62f475f5e006bf372467a29d003313243afd37f7213d41bff51b48521f6379aa3a42f79a5e11c50b2d4e65cb7445f81e870762960a9ba1ef7fbab25984d89717150714c650cc5efd6", 0x81, 0x1}, {&(0x7f0000000600)="d6f5db3c5504225ae2d5ac0e958a72a856d3a9ae8d70f607c9042c9bb0ab678133288d6cf52e488eb7", 0x29, 0x7f}, {&(0x7f0000000640)="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", 0xfb, 0x4}, {&(0x7f0000000740)="56277a7fc55604ee511569252d400399e21b8970858b495341d58ff5f12c4fa2e2b213ddd96d14b1cf2a4cf7a68bbca95fc91856203ae4eedeb6ebb7d9e27c9df69c392946d54d6b86baf7e01ca8c357001d8fc81b2b97054ca1aa0556effc1df81a7d398bcccefaa4d6f1514d6d15600e88303ddddc559cf2ed262cb7d77b05372693eb1cbfb78aefcc831c86042b38209f93064f22eb22e21a3749ce22a649f6d3dde059f2bfd859dc1383d49e", 0xae, 0x100}, {&(0x7f0000000800)="42768fecd67fafdf16f30c102176ea2628b1b64cf8a63d1fa50deeae764532f4", 0x20, 0x81}], 0x200000, &(0x7f0000000a00)={[{'\x00'}], [{@euid_gt}, {@uid_eq={'uid', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@permit_directio}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000980)) (async) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, 0xa, &(0x7f0000000840)=[{&(0x7f0000000200)="babe88c08d650f495a88d0ecabc47486d8c86ae0226d5e355c2a735c728f30c65e13", 0x22, 0x8}, {&(0x7f00000002c0)="2b66dbc34f908aaaebb9496da987dfc4a6b4f1ce97e72690a666aa", 0x1b, 0x1b3f}, {&(0x7f0000000340)="b6960358448bc31ddec95c868b25658722165b648fd66613496a5bba9df7125c71cd8da4f0440bd5733debfe2e68a96a3d506f5bc82950a044b1cc25814f67c98494b4143fcf3df6d3b7132b913cb8b937f3a01d1f2bf437bfd8359d6ba6ee8171ea70fafaca2fdc1e213f5b4db8526a9f62443bb65c055a3fce34e8763ef5827d0da9681ca2dd4074f445be27725182", 0x90, 0x1e3}, {&(0x7f0000000400)="fdff4cf5f4886f694b", 0x9, 0x5}, {&(0x7f0000000440)="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", 0xfb, 0x9}, {&(0x7f0000000540)="e1a20958096f48f86f5104ba94c51183743b1b2d998682296e4e266a550b1c6a7262dc7bb3ecd11256a67bd1c52b074281c41db39fd4a895f62f475f5e006bf372467a29d003313243afd37f7213d41bff51b48521f6379aa3a42f79a5e11c50b2d4e65cb7445f81e870762960a9ba1ef7fbab25984d89717150714c650cc5efd6", 0x81, 0x1}, {&(0x7f0000000600)="d6f5db3c5504225ae2d5ac0e958a72a856d3a9ae8d70f607c9042c9bb0ab678133288d6cf52e488eb7", 0x29, 0x7f}, {&(0x7f0000000640)="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", 0xfb, 0x4}, {&(0x7f0000000740)="56277a7fc55604ee511569252d400399e21b8970858b495341d58ff5f12c4fa2e2b213ddd96d14b1cf2a4cf7a68bbca95fc91856203ae4eedeb6ebb7d9e27c9df69c392946d54d6b86baf7e01ca8c357001d8fc81b2b97054ca1aa0556effc1df81a7d398bcccefaa4d6f1514d6d15600e88303ddddc559cf2ed262cb7d77b05372693eb1cbfb78aefcc831c86042b38209f93064f22eb22e21a3749ce22a649f6d3dde059f2bfd859dc1383d49e", 0xae, 0x100}, {&(0x7f0000000800)="42768fecd67fafdf16f30c102176ea2628b1b64cf8a63d1fa50deeae764532f4", 0x20, 0x81}], 0x200000, &(0x7f0000000a00)={[{'\x00'}], [{@euid_gt}, {@uid_eq={'uid', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@permit_directio}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) (async) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 03:12:48 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xfffffdef, 0x0, 0x0, 0x0) (fail_nth: 10) 03:12:48 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000240)={0x40, 0x23, 0xb4, {0xb4, 0x30, "85c86df5c0cb9fbf12a05a2a6f94945732ff5fee0c9f24a62b9a7007458a2d03bf28f8a87ef5b68f6ed5dcf602f4a572ca5f4c34a1584a507194eb864ec5d84f0ddab345ed7cc5c3044c4cb4d44dd02d802ed378287ae767da83cf099d2b2c9109537ed7e23fc9479d4bdb84e931c42c2f75d5729a2fd22f6c00b47cde2ed650175118b3b1668cfa9b6a04a5674892c4bea0f184312ec9b39f0e5dcd6f784da8a0b0d0107fe860d1e0f3fb1869766728e755"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, &(0x7f00000000c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x9, 0x0, 0x7, [0x3f30, 0xffc0, 0xc000]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x10, 0x40, 0x9, 'uMVM', "0de988a3"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x10, 0x5, 0x20, 0x3, 0x3, 0x4}}}, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x20, 0xf, 0x7d, "cdd6ddb2df845568ff40edcd63d69b736ff23463d1808f1b0bc52cfdca2176cc60a73100f58b861b3b6462e0c024ccfe17efbfdf3e83949be268dfcbf44b6acba4817b206062b82f0a3bba765323249a3b373d2024c4f31a12b1e6e32bb71e2b0edf081439cf548e8963eba6a21039d660ea3ee99caa399a88f19a747c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1d0, 0x40}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000600)={0x40, 0xb, 0x2, "60c3"}, &(0x7f0000000640)={0x40, 0xf, 0x2}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="a3461341e791"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "898e"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0xcb}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x3}}) [ 1148.329439][ T3684] usb 1-1: USB disconnect, device number 52 [ 1148.352224][ T3684] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 1148.386601][ T2821] loop2: detected capacity change from 0 to 27 [ 1148.406382][ T2822] FAULT_INJECTION: forcing a failure. [ 1148.406382][ T2822] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.428033][ T2821] (syz-executor.2,2821,1):ocfs2_parse_options:1476 ERROR: Invalid heartbeat mount options 03:12:48 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1148.464123][ T2822] CPU: 0 PID: 2822 Comm: syz-executor.1 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1148.474592][ T2822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.484673][ T2822] Call Trace: [ 1148.487971][ T2822] [ 1148.489215][ T2821] (syz-executor.2,2821,1):ocfs2_fill_super:1185 ERROR: status = -22 [ 1148.490929][ T2822] dump_stack_lvl+0xcd/0x134 [ 1148.490969][ T2822] should_fail.cold+0x5/0xa [ 1148.490996][ T2822] should_failslab+0x5/0x10 [ 1148.512545][ T2822] kmem_cache_alloc_bulk+0x45/0x480 [ 1148.517778][ T2822] io_submit_sqes.cold+0x20b/0x43d [ 1148.522930][ T2822] ? find_held_lock+0x2d/0x110 [ 1148.527728][ T2822] ? io_apoll_task_func+0x250/0x250 [ 1148.532958][ T2822] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1148.538715][ T2822] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1148.544376][ T2822] ? io_submit_sqes+0x9100/0x9100 [ 1148.549426][ T2822] ? find_held_lock+0x2d/0x110 [ 1148.554215][ T2822] ? __context_tracking_exit+0xb8/0xe0 [ 1148.559700][ T2822] ? lock_downgrade+0x6e0/0x6e0 [ 1148.564581][ T2822] ? lock_downgrade+0x6e0/0x6e0 [ 1148.569459][ T2822] ? syscall_enter_from_user_mode+0x21/0x70 [ 1148.575383][ T2822] do_syscall_64+0x35/0xb0 [ 1148.580179][ T2822] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1148.586102][ T2822] RIP: 0033:0x7f67a0a36049 [ 1148.590533][ T2822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 03:12:48 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:48 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1148.610263][ T2822] RSP: 002b:00007f679f3ab168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1148.618700][ T2822] RAX: ffffffffffffffda RBX: 00007f67a0b48f60 RCX: 00007f67a0a36049 [ 1148.626781][ T2822] RDX: 00000000fffffdef RSI: 00000000000002ff RDI: 0000000000000006 [ 1148.634771][ T2822] RBP: 00007f679f3ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.642785][ T2822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.650775][ T2822] R13: 00007ffdc231a60f R14: 00007f679f3ab300 R15: 0000000000022000 [ 1148.658770][ T2822] 03:12:48 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:48 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) open(&(0x7f0000000000)='./file0\x00', 0x240000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:48 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1148.823098][ T3758] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1149.083162][ T3684] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1149.183262][ T3758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.353193][ T3758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1149.366880][ T3758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.375621][ T3758] usb 4-1: Product: syz [ 1149.379992][ T3758] usb 4-1: Manufacturer: syz [ 1149.385098][ T3758] usb 4-1: SerialNumber: syz [ 1149.453356][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.623308][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1149.636054][ T2818] UDC core: couldn't find an available UDC or it's busy: -16 [ 1149.648262][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.660091][ T2818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1149.672560][ T3684] usb 1-1: Product: syz [ 1149.679797][ T3684] usb 1-1: Manufacturer: syz [ 1149.689871][ T3684] usb 1-1: SerialNumber: syz [ 1149.950986][ T2825] UDC core: couldn't find an available UDC or it's busy: -16 [ 1149.958593][ T2825] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1150.343499][ T3758] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1150.350087][ T3758] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1150.357918][ T3758] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1150.544085][ T2904] UDC core: couldn't find an available UDC or it's busy: -16 [ 1150.552293][ T2904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1150.563167][ T3758] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1150.571793][ T3758] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1151.168639][T20684] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1151.205925][ T3684] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1151.212400][ T3684] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1151.220509][ T3684] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1151.423310][ T3684] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1151.435227][ T3684] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1152.183307][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 1152.261138][T20684] usb 4-1: USB disconnect, device number 22 [ 1152.274764][T20684] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:12:52 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 03:12:52 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:52 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:52 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xfffffdef, 0x0, 0x0, 0x0) (fail_nth: 11) 03:12:52 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) open(&(0x7f0000000000)='./file0\x00', 0x240000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) open(&(0x7f0000000000)='./file0\x00', 0x240000, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 03:12:52 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "997cc7abb28e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a00)={0x14, &(0x7f0000000900)={0x40, 0xd, 0x8a, {0x8a, 0x23, "41874ffe2af00623bdf2eb1ebb2233727e03e4074476aec36a0740cac7d61f017196dd2db5dfc6f0fda7faef5250ff13a4e8768d2b56e1e0d1722261e720fb582c7f075c270ceb073a15fc55d52ba609d36d6c551cb41b525c7382fa518a65dcd67cf9e04692f8e95a83e803adbc5b855b5e3e9adb18d5489c4d7c83d4541a943a4aed13fe520207"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a40)={0x40, 0x31, 0xfd, "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"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x6, 0x6, 0x7626, 0x4, 0xff, 0x3ff, 0x7fff, 0x3ff, 0x800, 0x4, 0x1, 0x100}}, &(0x7f0000000c40)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000c80)={0x20, 0x83, 0x2}, &(0x7f0000000cc0)={0x20, 0x87, 0x2}, &(0x7f0000000d00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x4, 0x60, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'F'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0x39}, [@acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xa2, 0xbc, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x1b, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x0, 0x3f}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x151, 0x9, 0x2, 0x2, 0x10, 0x4}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x345081b577755e24, 0x5, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xa, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x9}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41d}}, {0xea, &(0x7f00000003c0)=@string={0xea, 0x3, "976aa82cc548c7e553dafe6d1cc54afebd8b685af2140e8291a70dcfeeed1bbdf6c9986adef2fd575da7ba6cf04ba799d9e600f8747e83080cc5eed2028126399cf3b7ac41bdf6ed5f28a2924b07cf357b87dffb9913d2f57647a38d814cc89e7f6dddcbf3c5803fb4c087605af51393855aee6c7f87a4c429e65a6f97a3c528a6446f38e704a946bc01ac5224cda57804c8aec04d08deac732dcab2779c62fca99e647270980efcc5245e1700d8fdd1069ad272be0dc3ff3c79cfa8478ecf8f1023730e84f1ad38b4c9f99fa6095bc805cf6bee65d48a89b0f6135830c6e54a07bd0fe849bae5aa"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x40, 0x11, 0x3b, {0x3b, 0xe, "dec4d2652349c241364cd32187dcc5d2af30379a9bd7af07fd8b7cee8003fc7a4be55d29503b5002ae55e4cc75d915234808e76b215d87cf71"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x20, 0x14, 0x99, "b29470f30047c9b5730ecf90a1b6d7b2bd7d46fdd2edac50900d2abc25006683c4c80d25f0ed5bd73855899305733ea860e8e422a913ee23c0c5931e5724c0f9f6ddd27b0a982287ba29d5baa7357f6ab4a663046bcd5664cadb041cd1be8d1d593b17d3145d25c8c89a6752b4dc05a42f5dc4e49d21bc727fec9ce456d529f9972d34b7c03277e32b44740f20f6080d4bed4f704d7e4941c0"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x1, 0x81, 0x4, 0x8001, 0x1ff, 0x0, 0x7c, 0x1, 0x9fa8, 0x9, 0x4, 0x5}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0xc80}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x8000}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1152.649034][ T3758] usb 1-1: USB disconnect, device number 53 [ 1152.702347][ T3758] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 1152.713853][ T3023] FAULT_INJECTION: forcing a failure. [ 1152.713853][ T3023] name failslab, interval 1, probability 0, space 0, times 0 03:12:52 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:52 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1152.819234][ T3023] CPU: 0 PID: 3023 Comm: syz-executor.1 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1152.829755][ T3023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.839830][ T3023] Call Trace: [ 1152.843120][ T3023] [ 1152.846068][ T3023] dump_stack_lvl+0xcd/0x134 [ 1152.850690][ T3023] should_fail.cold+0x5/0xa [ 1152.855226][ T3023] should_failslab+0x5/0x10 [ 1152.859751][ T3023] __kmalloc+0x7b/0x4d0 [ 1152.864167][ T3023] ? dbgfs_schemes_read+0x66/0x8d0 [ 1152.869302][ T3023] ? dbgfs_schemes_read+0x52f/0x8d0 [ 1152.874528][ T3023] ? lockdep_hardirqs_on+0x79/0x100 [ 1152.879750][ T3023] dbgfs_schemes_read+0x66/0x8d0 [ 1152.884714][ T3023] ? mark_lock.part.0+0xee/0x1910 [ 1152.889764][ T3023] ? arch_stack_walk+0x5c/0xe0 [ 1152.894554][ T3023] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1152.900826][ T3023] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1152.907097][ T3023] ? debugfs_file_get+0x1ce/0x440 [ 1152.912156][ T3023] full_proxy_read+0x118/0x180 [ 1152.916952][ T3023] ? full_proxy_write+0x180/0x180 [ 1152.922006][ T3023] loop_rw_iter+0x12d/0x530 [ 1152.926541][ T3023] io_read+0xce6/0xff0 [ 1152.930634][ T3023] ? __lock_acquire+0xbc4/0x56c0 [ 1152.935603][ T3023] ? kiocb_done+0x950/0x950 [ 1152.940132][ T3023] ? __lock_acquire+0xbc4/0x56c0 [ 1152.945272][ T3023] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1152.951282][ T3023] io_issue_sqe+0x800/0x7300 [ 1152.955890][ T3023] ? __fget_files+0x26a/0x470 [ 1152.960596][ T3023] ? lock_downgrade+0x6e0/0x6e0 [ 1152.965471][ T3023] ? find_held_lock+0x2d/0x110 [ 1152.970251][ T3023] ? io_openat2+0xbc0/0xbc0 [ 1152.974778][ T3023] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1152.981050][ T3023] io_submit_sqes+0x1046/0x9100 [ 1152.985925][ T3023] ? find_held_lock+0x2d/0x110 [ 1152.990713][ T3023] ? io_apoll_task_func+0x250/0x250 [ 1152.995935][ T3023] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1153.001679][ T3023] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1153.007256][ T3023] ? io_submit_sqes+0x9100/0x9100 [ 1153.012305][ T3023] ? find_held_lock+0x2d/0x110 [ 1153.017092][ T3023] ? __context_tracking_exit+0xb8/0xe0 [ 1153.022577][ T3023] ? lock_downgrade+0x6e0/0x6e0 [ 1153.027454][ T3023] ? lock_downgrade+0x6e0/0x6e0 [ 1153.032332][ T3023] ? syscall_enter_from_user_mode+0x21/0x70 [ 1153.038256][ T3023] do_syscall_64+0x35/0xb0 [ 1153.042709][ T3023] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1153.048644][ T3023] RIP: 0033:0x7f67a0a36049 [ 1153.053079][ T3023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1153.072794][ T3023] RSP: 002b:00007f679f3ab168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1153.081232][ T3023] RAX: ffffffffffffffda RBX: 00007f67a0b48f60 RCX: 00007f67a0a36049 [ 1153.089226][ T3023] RDX: 00000000fffffdef RSI: 00000000000002ff RDI: 0000000000000006 [ 1153.097220][ T3023] RBP: 00007f679f3ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1153.105209][ T3023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 03:12:53 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) open(&(0x7f0000000000)='./file0\x00', 0x240000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) open(&(0x7f0000000000)='./file0\x00', 0x240000, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 1153.113200][ T3023] R13: 00007ffdc231a60f R14: 00007f679f3ab300 R15: 0000000000022000 [ 1153.121198][ T3023] 03:12:53 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1153.240744][ T3683] usb 4-1: new high-speed USB device number 23 using dummy_hcd 03:12:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:53 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1153.533146][ T3758] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1153.653605][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.670432][ T3683] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1153.900785][ T3683] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1153.903268][ T3758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.909997][ T3683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.939491][ T3683] usb 4-1: Product: syz [ 1153.945676][ T3683] usb 4-1: Manufacturer: syz [ 1153.950304][ T3683] usb 4-1: SerialNumber: syz [ 1154.093140][ T3758] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.102228][ T3758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.111103][ T3758] usb 1-1: Product: syz [ 1154.115909][ T3758] usb 1-1: Manufacturer: syz [ 1154.120699][ T3758] usb 1-1: SerialNumber: syz [ 1154.228575][ T3026] UDC core: couldn't find an available UDC or it's busy: -16 [ 1154.239197][ T3026] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1154.380260][ T3032] UDC core: couldn't find an available UDC or it's busy: -16 [ 1154.392498][ T3032] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1154.600942][ T3129] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1155.039710][ T3683] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1155.047343][ T3683] cdc_ncm 4-1:1.0: bind() failure [ 1155.059490][ T3683] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1155.073682][ T3683] cdc_ncm 4-1:1.1: bind() failure [ 1155.653562][ T3758] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1155.660034][ T3758] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1155.679035][ T3758] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1155.726118][ T3199] UDC core: couldn't find an available UDC or it's busy: -16 [ 1155.733946][ T3199] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1155.863223][ T3758] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1155.874779][ T3758] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1156.473078][T20684] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1156.762771][ T3684] usb 4-1: USB disconnect, device number 23 03:12:57 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "997cc7abb28e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a00)={0x14, &(0x7f0000000900)={0x40, 0xd, 0x8a, {0x8a, 0x23, "41874ffe2af00623bdf2eb1ebb2233727e03e4074476aec36a0740cac7d61f017196dd2db5dfc6f0fda7faef5250ff13a4e8768d2b56e1e0d1722261e720fb582c7f075c270ceb073a15fc55d52ba609d36d6c551cb41b525c7382fa518a65dcd67cf9e04692f8e95a83e803adbc5b855b5e3e9adb18d5489c4d7c83d4541a943a4aed13fe520207"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a40)={0x40, 0x31, 0xfd, "0a767642e1ed2cfd39c6037f0c38d57355057c133a3d2d58a610e02dc69a585b4c0eda50c5afd9b52c442ebb136d038e20dd4e3090b6dda5e7222b83eedf4274e6fb0e19cba59b51541788c76d0f71c61c454ae99b68db6bdbe5824e87f0a406ff5e98efce1342cd4895462e2a5db672c6454f563fe666310fc9b4bbd2345b53414174bfa0410387980c88a24becefaf970b4a3a78e596ecf48c437dc3487e799a1c52b03c6be25297c8c818f6451ecc0db9928eef685fba0ea7a9bd8d32194d0c528afedd0a7ac51802e10cc3f5e8212859fabc5b661dfa9d54ff96418dfe9db7b9e25161ba7fb7557d0d16871355824d55b351f3e088402171f90526"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x6, 0x6, 0x7626, 0x4, 0xff, 0x3ff, 0x7fff, 0x3ff, 0x800, 0x4, 0x1, 0x100}}, &(0x7f0000000c40)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000c80)={0x20, 0x83, 0x2}, &(0x7f0000000cc0)={0x20, 0x87, 0x2}, &(0x7f0000000d00)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x4, 0x60, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'F'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0x39}, [@acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xa2, 0xbc, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x1b, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x0, 0x3f}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x151, 0x9, 0x2, 0x2, 0x10, 0x4}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x345081b577755e24, 0x5, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xa, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x9}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41d}}, {0xea, &(0x7f00000003c0)=@string={0xea, 0x3, "976aa82cc548c7e553dafe6d1cc54afebd8b685af2140e8291a70dcfeeed1bbdf6c9986adef2fd575da7ba6cf04ba799d9e600f8747e83080cc5eed2028126399cf3b7ac41bdf6ed5f28a2924b07cf357b87dffb9913d2f57647a38d814cc89e7f6dddcbf3c5803fb4c087605af51393855aee6c7f87a4c429e65a6f97a3c528a6446f38e704a946bc01ac5224cda57804c8aec04d08deac732dcab2779c62fca99e647270980efcc5245e1700d8fdd1069ad272be0dc3ff3c79cfa8478ecf8f1023730e84f1ad38b4c9f99fa6095bc805cf6bee65d48a89b0f6135830c6e54a07bd0fe849bae5aa"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x40, 0x11, 0x3b, {0x3b, 0xe, "dec4d2652349c241364cd32187dcc5d2af30379a9bd7af07fd8b7cee8003fc7a4be55d29503b5002ae55e4cc75d915234808e76b215d87cf71"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x20, 0x14, 0x99, "b29470f30047c9b5730ecf90a1b6d7b2bd7d46fdd2edac50900d2abc25006683c4c80d25f0ed5bd73855899305733ea860e8e422a913ee23c0c5931e5724c0f9f6ddd27b0a982287ba29d5baa7357f6ab4a663046bcd5664cadb041cd1be8d1d593b17d3145d25c8c89a6752b4dc05a42f5dc4e49d21bc727fec9ce456d529f9972d34b7c03277e32b44740f20f6080d4bed4f704d7e4941c0"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x1, 0x81, 0x4, 0x8001, 0x1ff, 0x0, 0x7c, 0x1, 0x9fa8, 0x9, 0x4, 0x5}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0xc80}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x8000}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) 03:12:57 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:57 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:57 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:57 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xfffffdef, 0x0, 0x0, 0x0) [ 1157.081014][ T1142] usb 1-1: USB disconnect, device number 54 [ 1157.096375][ T1142] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:12:57 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1157.162134][ T3266] UDC core: couldn't find an available UDC or it's busy: -16 [ 1157.198244][ T3266] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:12:57 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:57 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1157.255175][ T3275] UDC core: couldn't find an available UDC or it's busy: -16 03:12:57 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1157.312134][ T3275] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:12:57 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:57 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2, 0xfffffdef, 0x0, 0x0, 0x0) [ 1157.413152][ T3758] usb 4-1: new high-speed USB device number 24 using dummy_hcd 03:12:57 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1157.773309][ T3758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.784378][ T3758] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1157.843280][ T1142] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1157.953267][ T3758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1157.962349][ T3758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.979064][ T3758] usb 4-1: Product: syz [ 1157.984772][ T3758] usb 4-1: Manufacturer: syz [ 1157.989398][ T3758] usb 4-1: SerialNumber: syz [ 1158.273605][ T1142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.301006][ T3758] cdc_ncm 4-1:1.0: bind() failure [ 1158.324596][ T3758] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1158.332728][ T3758] cdc_ncm 4-1:1.1: bind() failure [ 1158.350888][ T3758] usb 4-1: USB disconnect, device number 24 [ 1158.493367][ T1142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1158.502448][ T1142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.510597][ T1142] usb 1-1: Product: syz [ 1158.522784][ T1142] usb 1-1: Manufacturer: syz [ 1158.527790][ T1142] usb 1-1: SerialNumber: syz 03:12:58 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "997cc7abb28e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a00)={0x14, &(0x7f0000000900)={0x40, 0xd, 0x8a, {0x8a, 0x23, "41874ffe2af00623bdf2eb1ebb2233727e03e4074476aec36a0740cac7d61f017196dd2db5dfc6f0fda7faef5250ff13a4e8768d2b56e1e0d1722261e720fb582c7f075c270ceb073a15fc55d52ba609d36d6c551cb41b525c7382fa518a65dcd67cf9e04692f8e95a83e803adbc5b855b5e3e9adb18d5489c4d7c83d4541a943a4aed13fe520207"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a40)={0x40, 0x31, 0xfd, "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"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x6, 0x6, 0x7626, 0x4, 0xff, 0x3ff, 0x7fff, 0x3ff, 0x800, 0x4, 0x1, 0x100}}, &(0x7f0000000c40)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000c80)={0x20, 0x83, 0x2}, &(0x7f0000000cc0)={0x20, 0x87, 0x2}, &(0x7f0000000d00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x4, 0x60, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'F'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0x39}, [@acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xa2, 0xbc, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x1b, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x0, 0x3f}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x151, 0x9, 0x2, 0x2, 0x10, 0x4}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x345081b577755e24, 0x5, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xa, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x9}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41d}}, {0xea, &(0x7f00000003c0)=@string={0xea, 0x3, "976aa82cc548c7e553dafe6d1cc54afebd8b685af2140e8291a70dcfeeed1bbdf6c9986adef2fd575da7ba6cf04ba799d9e600f8747e83080cc5eed2028126399cf3b7ac41bdf6ed5f28a2924b07cf357b87dffb9913d2f57647a38d814cc89e7f6dddcbf3c5803fb4c087605af51393855aee6c7f87a4c429e65a6f97a3c528a6446f38e704a946bc01ac5224cda57804c8aec04d08deac732dcab2779c62fca99e647270980efcc5245e1700d8fdd1069ad272be0dc3ff3c79cfa8478ecf8f1023730e84f1ad38b4c9f99fa6095bc805cf6bee65d48a89b0f6135830c6e54a07bd0fe849bae5aa"}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x40, 0x11, 0x3b, {0x3b, 0xe, "dec4d2652349c241364cd32187dcc5d2af30379a9bd7af07fd8b7cee8003fc7a4be55d29503b5002ae55e4cc75d915234808e76b215d87cf71"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x20, 0x14, 0x99, "b29470f30047c9b5730ecf90a1b6d7b2bd7d46fdd2edac50900d2abc25006683c4c80d25f0ed5bd73855899305733ea860e8e422a913ee23c0c5931e5724c0f9f6ddd27b0a982287ba29d5baa7357f6ab4a663046bcd5664cadb041cd1be8d1d593b17d3145d25c8c89a6752b4dc05a42f5dc4e49d21bc727fec9ce456d529f9972d34b7c03277e32b44740f20f6080d4bed4f704d7e4941c0"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x1, 0x81, 0x4, 0x8001, 0x1ff, 0x0, 0x7c, 0x1, 0x9fa8, 0x9, 0x4, 0x5}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0xc80}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x8000}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "997cc7abb28e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a00)={0x14, &(0x7f0000000900)={0x40, 0xd, 0x8a, {0x8a, 0x23, "41874ffe2af00623bdf2eb1ebb2233727e03e4074476aec36a0740cac7d61f017196dd2db5dfc6f0fda7faef5250ff13a4e8768d2b56e1e0d1722261e720fb582c7f075c270ceb073a15fc55d52ba609d36d6c551cb41b525c7382fa518a65dcd67cf9e04692f8e95a83e803adbc5b855b5e3e9adb18d5489c4d7c83d4541a943a4aed13fe520207"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a40)={0x40, 0x31, 0xfd, "0a767642e1ed2cfd39c6037f0c38d57355057c133a3d2d58a610e02dc69a585b4c0eda50c5afd9b52c442ebb136d038e20dd4e3090b6dda5e7222b83eedf4274e6fb0e19cba59b51541788c76d0f71c61c454ae99b68db6bdbe5824e87f0a406ff5e98efce1342cd4895462e2a5db672c6454f563fe666310fc9b4bbd2345b53414174bfa0410387980c88a24becefaf970b4a3a78e596ecf48c437dc3487e799a1c52b03c6be25297c8c818f6451ecc0db9928eef685fba0ea7a9bd8d32194d0c528afedd0a7ac51802e10cc3f5e8212859fabc5b661dfa9d54ff96418dfe9db7b9e25161ba7fb7557d0d16871355824d55b351f3e088402171f90526"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x6, 0x6, 0x7626, 0x4, 0xff, 0x3ff, 0x7fff, 0x3ff, 0x800, 0x4, 0x1, 0x100}}, &(0x7f0000000c40)={0x20, 0x85, 0x4, 0x7fffffff}, &(0x7f0000000c80)={0x20, 0x83, 0x2}, &(0x7f0000000cc0)={0x20, 0x87, 0x2}, &(0x7f0000000d00)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x4, 0x60, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'F'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0x39}, [@acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0xa2, 0xbc, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x1b, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x0, 0x3f}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x151, 0x9, 0x2, 0x2, 0x10, 0x4}, 0x1a, &(0x7f00000001c0)={0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x345081b577755e24, 0x5, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xa, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x9}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41d}}, {0xea, &(0x7f00000003c0)=@string={0xea, 0x3, "976aa82cc548c7e553dafe6d1cc54afebd8b685af2140e8291a70dcfeeed1bbdf6c9986adef2fd575da7ba6cf04ba799d9e600f8747e83080cc5eed2028126399cf3b7ac41bdf6ed5f28a2924b07cf357b87dffb9913d2f57647a38d814cc89e7f6dddcbf3c5803fb4c087605af51393855aee6c7f87a4c429e65a6f97a3c528a6446f38e704a946bc01ac5224cda57804c8aec04d08deac732dcab2779c62fca99e647270980efcc5245e1700d8fdd1069ad272be0dc3ff3c79cfa8478ecf8f1023730e84f1ad38b4c9f99fa6095bc805cf6bee65d48a89b0f6135830c6e54a07bd0fe849bae5aa"}}]}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x40, 0x11, 0x3b, {0x3b, 0xe, "dec4d2652349c241364cd32187dcc5d2af30379a9bd7af07fd8b7cee8003fc7a4be55d29503b5002ae55e4cc75d915234808e76b215d87cf71"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000600)={0x20, 0x14, 0x99, "b29470f30047c9b5730ecf90a1b6d7b2bd7d46fdd2edac50900d2abc25006683c4c80d25f0ed5bd73855899305733ea860e8e422a913ee23c0c5931e5724c0f9f6ddd27b0a982287ba29d5baa7357f6ab4a663046bcd5664cadb041cd1be8d1d593b17d3145d25c8c89a6752b4dc05a42f5dc4e49d21bc727fec9ce456d529f9972d34b7c03277e32b44740f20f6080d4bed4f704d7e4941c0"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x1, 0x81, 0x4, 0x8001, 0x1ff, 0x0, 0x7c, 0x1, 0x9fa8, 0x9, 0x4, 0x5}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0xc80}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x8000}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:12:58 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:58 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3, 0xfffffdef, 0x0, 0x0, 0x0) 03:12:58 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:58 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 1158.811874][ T3285] UDC core: couldn't find an available UDC or it's busy: -16 03:12:58 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r2}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:58 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:12:58 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4, 0xfffffdef, 0x0, 0x0, 0x0) [ 1158.854779][ T3285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1159.146072][ T3683] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1159.593264][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.608600][ T3683] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1159.793244][ T3683] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1159.802371][ T3683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.810882][ T3683] usb 4-1: Product: syz [ 1159.815229][ T3683] usb 4-1: Manufacturer: syz [ 1159.819924][ T3683] usb 4-1: SerialNumber: syz [ 1160.063781][ T3368] UDC core: couldn't find an available UDC or it's busy: -16 [ 1160.071942][ T3368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1160.153216][ T1142] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1160.159785][ T1142] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1160.167386][ T1142] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1160.373377][ T1142] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1160.388125][ T1142] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1160.433976][ T3391] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1160.881442][ T3683] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1160.887814][ T3683] cdc_ncm 4-1:1.0: bind() failure [ 1160.899903][ T3683] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1160.914398][ T3683] cdc_ncm 4-1:1.1: bind() failure [ 1160.993796][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1161.567661][ T3447] UDC core: couldn't find an available UDC or it's busy: -16 [ 1161.583655][ T3447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:13:01 executing program 0: stat(&(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, 0xa, &(0x7f0000000840)=[{&(0x7f0000000200)="babe88c08d650f495a88d0ecabc47486d8c86ae0226d5e355c2a735c728f30c65e13", 0x22, 0x8}, {&(0x7f00000002c0)="2b66dbc34f908aaaebb9496da987dfc4a6b4f1ce97e72690a666aa", 0x1b, 0x1b3f}, {&(0x7f0000000340)="b6960358448bc31ddec95c868b25658722165b648fd66613496a5bba9df7125c71cd8da4f0440bd5733debfe2e68a96a3d506f5bc82950a044b1cc25814f67c98494b4143fcf3df6d3b7132b913cb8b937f3a01d1f2bf437bfd8359d6ba6ee8171ea70fafaca2fdc1e213f5b4db8526a9f62443bb65c055a3fce34e8763ef5827d0da9681ca2dd4074f445be27725182", 0x90, 0x1e3}, {&(0x7f0000000400)="fdff4cf5f4886f694b", 0x9, 0x5}, {&(0x7f0000000440)="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", 0xfb, 0x9}, {&(0x7f0000000540)="e1a20958096f48f86f5104ba94c51183743b1b2d998682296e4e266a550b1c6a7262dc7bb3ecd11256a67bd1c52b074281c41db39fd4a895f62f475f5e006bf372467a29d003313243afd37f7213d41bff51b48521f6379aa3a42f79a5e11c50b2d4e65cb7445f81e870762960a9ba1ef7fbab25984d89717150714c650cc5efd6", 0x81, 0x1}, {&(0x7f0000000600)="d6f5db3c5504225ae2d5ac0e958a72a856d3a9ae8d70f607c9042c9bb0ab678133288d6cf52e488eb7", 0x29, 0x7f}, {&(0x7f0000000640)="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", 0xfb, 0x4}, {&(0x7f0000000740)="56277a7fc55604ee511569252d400399e21b8970858b495341d58ff5f12c4fa2e2b213ddd96d14b1cf2a4cf7a68bbca95fc91856203ae4eedeb6ebb7d9e27c9df69c392946d54d6b86baf7e01ca8c357001d8fc81b2b97054ca1aa0556effc1df81a7d398bcccefaa4d6f1514d6d15600e88303ddddc559cf2ed262cb7d77b05372693eb1cbfb78aefcc831c86042b38209f93064f22eb22e21a3749ce22a649f6d3dde059f2bfd859dc1383d49e", 0xae, 0x100}, {&(0x7f0000000800)="42768fecd67fafdf16f30c102176ea2628b1b64cf8a63d1fa50deeae764532f4", 0x20, 0x81}], 0x200000, &(0x7f0000000a00)={[{'\x00'}], [{@euid_gt}, {@uid_eq={'uid', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@permit_directio}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:01 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:01 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:01 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5, 0xfffffdef, 0x0, 0x0, 0x0) [ 1161.618294][ T1142] usb 1-1: USB disconnect, device number 55 [ 1161.633324][ T1142] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:13:02 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_disconnect(r1) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x2, 0x7e, &(0x7f00000000c0)="5a9dfd311237b070f99027fcb9dc21ee8d7730b81df6faa31861356e4e6324934f49b5191fe82b9bd3f443f697ce708c6d5bfbed7832f724724f2ff9bbb7221f71ca44761d982dae389705c614076c97e492613b87223d3cfb0eeaddc4f66cc58eb460dd40b30b7ecafa6683a4b26a36631ec7d5b2db0183994df000624d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:02 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:02 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:02 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x6, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:02 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:02 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1162.617476][ T3653] usb 4-1: USB disconnect, device number 25 03:13:02 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:02 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x7, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:02 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:02 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:02 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:02 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x8, 0xfffffdef, 0x0, 0x0, 0x0) [ 1163.123123][ T3653] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1163.123232][ T1142] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1163.483256][ T3653] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.543208][ T1142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.664258][ T3653] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1163.677426][ T3653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.685699][ T3653] usb 4-1: Product: syz [ 1163.689872][ T3653] usb 4-1: Manufacturer: syz [ 1163.694975][ T3653] usb 4-1: SerialNumber: syz [ 1163.713178][ T1142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1163.722217][ T1142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.730551][ T1142] usb 1-1: Product: syz [ 1163.735171][ T1142] usb 1-1: Manufacturer: syz [ 1163.739760][ T1142] usb 1-1: SerialNumber: syz [ 1163.945747][ T3523] UDC core: couldn't find an available UDC or it's busy: -16 [ 1163.953304][ T3523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1163.962564][ T3523] UDC core: couldn't find an available UDC or it's busy: -16 [ 1163.970079][ T3523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1163.992243][ T3530] UDC core: couldn't find an available UDC or it's busy: -16 [ 1163.999862][ T3530] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1165.263222][ T1142] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1165.269835][ T1142] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1165.278230][ T1142] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1165.433263][ T3653] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1165.439866][ T3653] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1165.447401][ T3653] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1165.483209][ T1142] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1165.492628][ T1142] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1165.663888][ T3653] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1165.675079][ T3653] cdc_ncm 4-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1166.153189][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1166.593385][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 1166.720652][ T3653] usb 1-1: USB disconnect, device number 56 [ 1166.738047][ T3653] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:13:07 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_disconnect(r1) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x2, 0x7e, &(0x7f00000000c0)="5a9dfd311237b070f99027fcb9dc21ee8d7730b81df6faa31861356e4e6324934f49b5191fe82b9bd3f443f697ce708c6d5bfbed7832f724724f2ff9bbb7221f71ca44761d982dae389705c614076c97e492613b87223d3cfb0eeaddc4f66cc58eb460dd40b30b7ecafa6683a4b26a36631ec7d5b2db0183994df000624d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r0, 0x2, 0x7e, &(0x7f00000000c0)="5a9dfd311237b070f99027fcb9dc21ee8d7730b81df6faa31861356e4e6324934f49b5191fe82b9bd3f443f697ce708c6d5bfbed7832f724724f2ff9bbb7221f71ca44761d982dae389705c614076c97e492613b87223d3cfb0eeaddc4f66cc58eb460dd40b30b7ecafa6683a4b26a36631ec7d5b2db0183994df000624d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:13:07 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:07 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:07 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x9, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:07 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffe, 0x100}}, './file0\x00'}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:07 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x1ff, "bdf535b9a9b888a85f649b56111683cc6553ac0db37b3ef8073f5384d9a348ac"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000380)={0x8, 0x3, 0x8, 0x4, 0x8}) r2 = syz_io_uring_setup(0x1558, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x5000)=nil, 0x5000, 0xa, 0x10, r2, 0x8000000) r6 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x121800, 0x102) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4000110, r2, 0x10000000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x8) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0100006465302f66696c653000"]) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) [ 1167.689461][T20684] usb 4-1: USB disconnect, device number 26 [ 1167.704077][T20684] cdc_ncm 4-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:13:07 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:07 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:07 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xa, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:07 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:07 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffe, 0x100}}, './file0\x00'}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) memfd_secret(0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffe, 0x100}}, './file0\x00'}) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 03:13:08 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x7, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1168.293263][ T20] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1168.313240][T20684] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1168.663553][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.730844][T20684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.833130][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.842220][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.858570][ T20] usb 1-1: Product: syz [ 1168.862778][ T20] usb 1-1: Manufacturer: syz [ 1168.868802][ T20] usb 1-1: SerialNumber: syz [ 1168.923203][T20684] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.932437][T20684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.941137][T20684] usb 4-1: Product: syz [ 1168.945604][T20684] usb 4-1: Manufacturer: syz [ 1168.950358][T20684] usb 4-1: SerialNumber: syz [ 1169.131507][ T3742] UDC core: couldn't find an available UDC or it's busy: -16 [ 1169.139160][ T3742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1169.193832][ T3727] UDC core: couldn't find an available UDC or it's busy: -16 [ 1169.201282][ T3727] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1169.216941][ T3727] UDC core: couldn't find an available UDC or it's busy: -16 [ 1169.224941][ T3727] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1169.943151][ T20] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1169.949220][ T20] cdc_ncm 1-1:1.0: bind() failure [ 1169.959187][ T20] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1169.966298][ T20] cdc_ncm 1-1:1.1: bind() failure [ 1170.653256][T20684] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1170.659883][T20684] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1170.667437][T20684] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1170.873257][T20684] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1170.882414][T20684] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1171.018496][T20684] usb 1-1: USB disconnect, device number 57 [ 1171.449339][ T3726] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1171.474573][ T3726] CPU: 0 PID: 3726 Comm: syz-executor.3 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1171.485042][ T3726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.495112][ T3726] Call Trace: [ 1171.498405][ T3726] [ 1171.501342][ T3726] dump_stack_lvl+0xcd/0x134 [ 1171.505960][ T3726] warn_alloc.cold+0x9b/0x189 [ 1171.510659][ T3726] ? zone_watermark_ok_safe+0x290/0x290 [ 1171.516231][ T3726] ? __vmalloc_node_range+0x7bf/0x1060 [ 1171.521710][ T3726] __vmalloc_node_range+0xe18/0x1060 [ 1171.527025][ T3726] ? vfree_atomic+0xe0/0xe0 [ 1171.531546][ T3726] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1171.537115][ T3726] ? kmem_cache_alloc_node+0x3ce/0x590 [ 1171.542706][ T3726] ? kernel_clone+0xe7/0xab0 [ 1171.547403][ T3726] copy_process+0x926/0x7250 [ 1171.552010][ T3726] ? kernel_clone+0xe7/0xab0 [ 1171.556616][ T3726] ? find_held_lock+0x2d/0x110 [ 1171.561402][ T3726] ? __cleanup_sighand+0xb0/0xb0 [ 1171.566353][ T3726] ? __lock_acquire+0x1666/0x56c0 [ 1171.571395][ T3726] ? kernel_clone+0x314/0xab0 [ 1171.576265][ T3726] kernel_clone+0xe7/0xab0 [ 1171.580699][ T3726] ? create_io_thread+0xf0/0xf0 [ 1171.585655][ T3726] ? find_held_lock+0x2d/0x110 [ 1171.590435][ T3726] __do_sys_clone+0xc8/0x110 [ 1171.595041][ T3726] ? kernel_clone+0xab0/0xab0 [ 1171.599733][ T3726] ? syscall_enter_from_user_mode+0x21/0x70 [ 1171.605646][ T3726] do_syscall_64+0x35/0xb0 [ 1171.610080][ T3726] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1171.615995][ T3726] RIP: 0033:0x7f6f71a59471 [ 1171.620423][ T3726] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1171.640066][ T3726] RSP: 002b:00007ffede5a6ed8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1171.648550][ T3726] RAX: ffffffffffffffda RBX: 00007f6f70241700 RCX: 00007f6f71a59471 [ 1171.656542][ T3726] RDX: 00007f6f702419d0 RSI: 00007f6f702412f0 RDI: 00000000003d0f00 [ 1171.664529][ T3726] RBP: 00007ffede5a7120 R08: 00007f6f70241700 R09: 00007f6f70241700 [ 1171.672516][ T3726] R10: 00007f6f702419d0 R11: 0000000000000206 R12: 00007ffede5a6f8e [ 1171.680502][ T3726] R13: 00007ffede5a6f8f R14: 00007f6f70241300 R15: 0000000000022000 [ 1171.688497][ T3726] [ 1171.696474][ T3726] Mem-Info: [ 1171.699612][ T3726] active_anon:2531 inactive_anon:136546 isolated_anon:0 [ 1171.699612][ T3726] active_file:4731 inactive_file:7549 isolated_file:0 [ 1171.699612][ T3726] unevictable:768 dirty:13 writeback:0 [ 1171.699612][ T3726] slab_reclaimable:20809 slab_unreclaimable:116102 [ 1171.699612][ T3726] mapped:27839 shmem:4025 pagetables:864 bounce:0 [ 1171.699612][ T3726] kernel_misc_reclaimable:0 [ 1171.699612][ T3726] free:1311437 free_pcp:8191 free_cma:0 [ 1171.741493][ T3726] Node 0 active_anon:10120kB inactive_anon:545424kB active_file:18852kB inactive_file:30196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111364kB dirty:0kB writeback:0kB shmem:13632kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB kernel_stack:10892kB pagetables:3500kB all_unreclaimable? no [ 1171.775019][ T3726] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 1171.814658][ T3726] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1171.852398][ T3726] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1171.858414][ T3726] Node 0 DMA32 free:1281888kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:10120kB inactive_anon:545224kB active_file:18852kB inactive_file:30196kB unevictable:1536kB writepending:0kB present:3129332kB managed:2716700kB mlocked:0kB bounce:0kB free_pcp:33028kB local_pcp:19780kB free_cma:0kB [ 1171.897263][ T3726] lowmem_reserve[]: 0 0 0 0 0 [ 1171.902240][ T3726] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1171.929646][ T3726] lowmem_reserve[]: 0 0 0 0 0 [ 1171.939990][ T3726] Node 1 Normal free:3948500kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1171.971278][ T3726] lowmem_reserve[]: 0 0 0 0 0 [ 1171.977176][ T3726] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1171.990630][ T3726] Node 0 DMA32: 2694*4kB (UME) 357*8kB (UME) 1500*16kB (UME) 551*32kB (UME) 40*64kB (UME) 13*128kB (UM) 5*256kB (UM) 43*512kB (M) 25*1024kB (M) 11*2048kB (UME) 281*4096kB (UM) = 1281888kB [ 1172.009665][ T3726] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1172.021272][ T3726] Node 1 Normal: 73*4kB (UME) 186*8kB (U) 130*16kB (UE) 84*32kB (UE) 51*64kB (UME) 31*128kB (UM) 8*256kB (UE) 11*512kB (UE) 1*1024kB (U) 3*2048kB (UM) 957*4096kB (M) = 3948500kB [ 1172.039113][ T3726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1172.050250][ T3726] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1172.066276][ T3726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1172.076362][ T3726] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1172.086151][ T3726] 16307 total pagecache pages [ 1172.090817][ T3726] 0 pages in swap cache [ 1172.095685][ T3726] Swap cache stats: add 0, delete 0, find 0/0 03:13:12 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_disconnect(r1) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x2, 0x7e, &(0x7f00000000c0)="5a9dfd311237b070f99027fcb9dc21ee8d7730b81df6faa31861356e4e6324934f49b5191fe82b9bd3f443f697ce708c6d5bfbed7832f724724f2ff9bbb7221f71ca44761d982dae389705c614076c97e492613b87223d3cfb0eeaddc4f66cc58eb460dd40b30b7ecafa6683a4b26a36631ec7d5b2db0183994df000624d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write(r0, 0x2, 0x7e, &(0x7f00000000c0)="5a9dfd311237b070f99027fcb9dc21ee8d7730b81df6faa31861356e4e6324934f49b5191fe82b9bd3f443f697ce708c6d5bfbed7832f724724f2ff9bbb7221f71ca44761d982dae389705c614076c97e492613b87223d3cfb0eeaddc4f66cc58eb460dd40b30b7ecafa6683a4b26a36631ec7d5b2db0183994df000624d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:13:12 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:12 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xb, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:12 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x3, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:12 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffe, 0x100}}, './file0\x00'}) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:12 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1172.101761][ T3726] Free swap = 0kB [ 1172.105753][ T3726] Total swap = 0kB [ 1172.109459][ T3726] 2097051 pages RAM [ 1172.113663][ T3726] 0 pages HighMem/MovableOnly [ 1172.118343][ T3726] 384531 pages reserved [ 1172.122487][ T3726] 0 pages cma reserved [ 1172.133179][ T3758] usb 4-1: USB disconnect, device number 27 [ 1172.189430][ T3758] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:13:12 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x2, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:12 executing program 4: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:12 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xc, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:12 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) write$damon_schemes(r0, &(0x7f00000001c0)={0x20, 0x2, 0x20, 0x20, 0x5, 0x80, 0x100000001}, 0x66) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000040)={r5, r6+10000000}, 0x1, 0x0, 0x19389998a7210c5e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0700ffff000000002e2f66696cbc65a70e1c6530000000000000000000"]) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/178, 0xb2}], 0x4, 0x100, 0x3) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r7, 0x488f3000) 03:13:12 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x1, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:12 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1172.443002][ T32] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1172.753159][ T3758] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1172.883335][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.083286][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1173.092549][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.114543][ T32] usb 1-1: Product: syz [ 1173.118840][ T32] usb 1-1: Manufacturer: syz [ 1173.130814][ T32] usb 1-1: SerialNumber: syz [ 1173.133357][ T3758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.303254][ T3758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1173.312831][ T3758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.321732][ T3758] usb 4-1: Product: syz [ 1173.326337][ T3758] usb 4-1: Manufacturer: syz [ 1173.331128][ T3758] usb 4-1: SerialNumber: syz [ 1173.398139][ T3898] UDC core: couldn't find an available UDC or it's busy: -16 [ 1173.407046][ T3898] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1173.512462][ T32] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1173.519099][ T32] cdc_ncm 1-1:1.0: bind() failure [ 1173.528162][ T32] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1173.535673][ T32] cdc_ncm 1-1:1.1: bind() failure [ 1173.576097][ T3907] UDC core: couldn't find an available UDC or it's busy: -16 [ 1173.587487][ T3907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1173.601831][ T3907] UDC core: couldn't find an available UDC or it's busy: -16 [ 1173.610410][ T3907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1175.053192][ T3758] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1175.060453][ T3758] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1175.068501][ T3758] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1175.160115][T20684] usb 1-1: USB disconnect, device number 58 [ 1175.273222][ T3758] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1175.282707][ T3758] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 03:13:15 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="200b18000300182156ef6363493f5ec98ad9ef6aa70d1186c0407ae00510a8c49c359cc1061874fb49d80736b2bb27e1c5e0c54a08e47af4a119e64e8aea72bc9df9b4467c91b7036bdf0f82c8917ad0ac658101ce9c9fc41197ea91d7c330b31f4f25a2683d47d69113e83f2969f77e730a1aa5e1b2bde6405e99088848ba437ec3347d758852a5b1e1afc470d08992b630c4ad3c30ca4f636e4cb2cf9623ae36e0ec"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0xe, 0x47, "b95e18a8588aea12a085cfe1db96bcbef585e9469cdb4024f790755c1ec015a6281da427f976fe74f38fee588b844bcfdc0f64d44daa3cc8ffa17f14652e80d2fd8e3c7637e7af"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x56c, 0x7fff, 0x6, 0x0, 0x7, 0x1, 0x2, 0xfff, 0x1ff, 0x2, 0x4, 0x5}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) 03:13:15 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xd, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:15 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:13:15 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x1, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:15 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) write$damon_schemes(r0, &(0x7f00000001c0)={0x20, 0x2, 0x20, 0x20, 0x5, 0x80, 0x100000001}, 0x66) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000040)={r5, r6+10000000}, 0x1, 0x0, 0x19389998a7210c5e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0700ffff000000002e2f66696cbc65a70e1c6530000000000000000000"]) (async) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/178, 0xb2}], 0x4, 0x100, 0x3) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r7, 0x488f3000) 03:13:15 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) [ 1175.859538][T20684] usb 4-1: USB disconnect, device number 28 03:13:15 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1175.923715][T20684] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:13:16 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:16 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xe, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:16 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) write$damon_schemes(r0, &(0x7f00000001c0)={0x20, 0x2, 0x20, 0x20, 0x5, 0x80, 0x100000001}, 0x66) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000040)={r5, r6+10000000}, 0x1, 0x0, 0x19389998a7210c5e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0700ffff000000002e2f66696cbc65a70e1c6530000000000000000000"]) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/178, 0xb2}], 0x4, 0x100, 0x3) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r7, 0x488f3000) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) write$damon_schemes(r0, &(0x7f00000001c0)={0x20, 0x2, 0x20, 0x20, 0x5, 0x80, 0x100000001}, 0x66) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000580)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000040)={r5, r6+10000000}, 0x1, 0x0, 0x19389998a7210c5e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0700ffff000000002e2f66696cbc65a70e1c6530000000000000000000"]) (async) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/178, 0xb2}], 0x4, 0x100, 0x3) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000002, 0x2010, r7, 0x488f3000) (async) 03:13:16 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:16 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1176.196127][ T20] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1176.433116][T20684] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1176.455250][ T3683] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1176.631521][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.793208][T20684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.813813][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1176.833246][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.841277][ T20] usb 1-1: Product: syz [ 1176.846473][ T20] usb 1-1: Manufacturer: syz [ 1176.851096][ T20] usb 1-1: SerialNumber: syz [ 1176.856413][ T3683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.963293][T20684] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1176.973703][T20684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.981939][T20684] usb 4-1: Product: syz [ 1176.986432][T20684] usb 4-1: Manufacturer: syz [ 1176.991256][T20684] usb 4-1: SerialNumber: syz [ 1177.053434][ T3683] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1177.062654][ T3683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.080806][ T3683] usb 5-1: Product: syz [ 1177.085567][ T3683] usb 5-1: Manufacturer: syz [ 1177.090287][ T3683] usb 5-1: SerialNumber: syz [ 1177.097593][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.104004][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.114231][ T4034] UDC core: couldn't find an available UDC or it's busy: -16 [ 1177.121629][ T4034] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1177.237157][ T4047] UDC core: couldn't find an available UDC or it's busy: -16 [ 1177.252128][ T4047] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1177.397892][ T4062] UDC core: couldn't find an available UDC or it's busy: -16 [ 1177.412471][ T4062] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1177.953269][ T20] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1177.959325][ T20] cdc_ncm 1-1:1.0: bind() failure [ 1177.969184][ T20] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1177.976374][ T20] cdc_ncm 1-1:1.1: bind() failure [ 1178.203116][ T3683] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1178.209261][ T3683] cdc_ncm 5-1:1.0: bind() failure [ 1178.217742][ T3683] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1178.224946][ T3683] cdc_ncm 5-1:1.1: bind() failure [ 1178.513240][T20684] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1178.519859][T20684] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1178.529115][T20684] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1178.733218][T20684] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1178.744369][T20684] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1178.952903][ T3684] usb 1-1: USB disconnect, device number 59 [ 1179.210186][ T3683] usb 5-1: USB disconnect, device number 64 [ 1179.353327][T20684] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready 03:13:20 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="200b18000300182156ef6363493f5ec98ad9ef6aa70d1186c0407ae00510a8c49c359cc1061874fb49d80736b2bb27e1c5e0c54a08e47af4a119e64e8aea72bc9df9b4467c91b7036bdf0f82c8917ad0ac658101ce9c9fc41197ea91d7c330b31f4f25a2683d47d69113e83f2969f77e730a1aa5e1b2bde6405e99088848ba437ec3347d758852a5b1e1afc470d08992b630c4ad3c30ca4f636e4cb2cf9623ae36e0ec"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0xe, 0x47, "b95e18a8588aea12a085cfe1db96bcbef585e9469cdb4024f790755c1ec015a6281da427f976fe74f38fee588b844bcfdc0f64d44daa3cc8ffa17f14652e80d2fd8e3c7637e7af"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x56c, 0x7fff, 0x6, 0x0, 0x7, 0x1, 0x2, 0xfff, 0x1ff, 0x2, 0x4, 0x5}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) 03:13:20 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xf, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:20 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002080)={0x19a0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2000005d}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc2}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x74}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcc}, @NL80211_ATTR_CSA_IES={0x194c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x37, 0xfffe]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xf8, 0xf, [@prep={0x83, 0x25, @ext={{}, 0x81, 0x0, @broadcast, 0x1, @device_a, 0xfffffc01, 0x6, @device_b, 0x25494c10}}, @random_vendor={0xdd, 0xb4, "b13607dce718244369bde62110c188619bac91c0cee3a6874b31fc3e1ad71532c39fd88c14a09db7a6bb4517f61af78d9c7e6e9e6eb7dfb83b61c20edc346fca65a0ed4813c37266e1dcf8042bdf45813883440e6afcef1adf3751208af6984e3550734bf1406478a9d2047b4fdf220d1b55c9d641a3fd59c68bc96a61aa2cfc543e5b31e98c0f0ade7a3ae4ba6b5ff758314ea981c592b9b6d2b618d68533f2599ace01e0c62591b5908624c2a2b1df4d58b7fa"}, @rann={0x7e, 0x15, {{}, 0x2, 0x1, @broadcast, 0x0, 0x8b2, 0xffffffff}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1250, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "4547bc1a4979d60afe34578b2cf9cd22d23b8a4172a3ac260e29b465a143bc071e4019462f0e0d65683537fbbe0560a8a2369c8ccb65313cbf51308d766f1451fc6296374d09eb400ed0d7c853227498059f6617f57c0bae68890c8eedabc95fbf919bbb4a396a70c46392a9e2ab0bdfe30a15cf2919751083863e7bc931bd544701a682fb3451470cdfb3ef"}, @NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "160055365d07d14c80ef9942402a6b6f708862eda0392a235251992f5d33aa7699f061ab75c223302ad6b816d3c2f4458ca6f2448e2d2169dd81f0332c5b72b9947614abc19b461f0fb1dd9f59b2cc1bccc6d4aee2b507b333a74535a42aae572a8e0db2224dc561c49636746310e1190b65cfe075b502b3894131d43d5bef140858cd1246c6ca1dd29df0ad4392501f7bbe132e1cec0c42a4bb8acd4a14cd6dc45e459c94411526de1815dc2d12e704383911d798e0e71999538f00f423a1a0c01f7433dc6f7762335e4c4ede97825f72"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "6fb463679221307add196cbe96592511064fd7e76f1e5733243746aebe8f69da40d789613e123405ed06f74a53c59c77726b58fdbe8edba6c0667e5d20f26805b1a5df9ff2cac353b24576b7d179332fb67753312ff1740f0033"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "fa899d757e"}, @NL80211_FTM_RESP_ATTR_LCI={0x6d, 0x2, "a9a382d2880affbcd2ce54162a3174cf9c2cb009b5283b4398159381793ac42a7141163ddb5fd69431e6d7c3a7425dd80a9299cb47df1588a29c1bca610a3006c0894a36ee054a66d8cfb3e5bb5ff422735f7d11bd0de99b949a65d2d2fafaa18ae4d7cc6038e63436"}]}, @NL80211_ATTR_PROBE_RESP={0x571, 0x91, "67adc1188e4491832ea8a8aa07a7a20af9e5b88fe9848a754d112f8ba06336d5a2719afa934986d9257ddc2d748a9e7f48801b609a31892de2e67a09920924f3bb351f44e53155faa377b50067917591b6796c2952ac883a86d9d25ccf018b3b9ab806cfc5e7f7b779dc91755b0800c46d65706f6c81a0450fdc0851737396f7fdc0384e9b5ae15e78323739f3a5ca90be9718e7df146104329bc35c402a6d329b2346e07263a9815052bf4dcdfd589121f913d0376386fd184e057951c81411f1f6678689e1e9200b8742a150b1d4cdf0a140c086a60d8184f5b5cff749298dedd34304d7ec1e3f5190c1dc72833f280828b29ac977a156e5397ccbc1b531768a504b92a161b51cbe354dbb57bb78423859ad30665a17237b47a9006b24776d692894c89845a9fee54ed109201e8752186d9866d0836c66c35fcbc048375a2442a738ba9167c43091e8aaa71da4eb87513006ebbdb984172e94f70a7858542ae2b3bef1b63384c4360a49eb2181d703ce533f921e395b67ee92b0686a1928f91edc1ad3d7ffa3d0bfecf5741009ccbb09030f10350a7838929d6a7de7b135336bff6ea1491e27950a1fa2baa793ef09aa0d8e9edd31f1852710b83eabeeefc096d39ff26f2a2e4a51ca937b3123414741a76dbbb8b8d35e2f0bba7ececfdca2d2eb2bdd3505362ffa2e301e799accfb16f7d2ffd7a541356a830491789e3349de3064f633de0a23d01ffea63d03cb6e51e927e0c4873878c3009226c5ea544489176e35d20275e2848578afc1f56ead5c6e73fba167f98eb94543f47c7f9b9910265633fb6be93e38bd5a6c4a2d0f26857a8e6cf135500cadc2ca6963a2445335134994304f3cb2bfd73efeb11a624d0f9a43a87641a9d2d66596e94f58567974684ed2dba51381e4cabf24f2089870793a3cb405612d85b73af5887e34fc88f02848f5418b041cb0479ed10e5d43ebadd829c14ed159ad6fdc7c72bc32cf8ac1b1dd5485d4e96b61b8851447abb25c2606430c74106f3d26591c07efc81a3e0879f6081599174b906745ad2399609b39ebd20af1960a69cabe8a7048e6cd671e5dd84562802792882ad1d28ed1305542f1009b59b9dc2372d699506e5115bd64b970b0c1aea844ff05a2e3d79ab745e5c9d8f5dbdf84f9d739556ff9ea835c809f724ae8c0a74b1e7a22b577bca7a3c2c3c120aa9cc2ce77b4891b227ba39977d00d30cea6510f42fb7d2224dce57dace243afee4872b8fa69d7aa232888cb75a463dbee20408e20a76eb608d7aa6fe60dce1e56470bd6e0af8a085c4c2dda17b2f4ce1cc991be6e61e2132c69bc4eb8f71405aec6a233b1a751162a6287259f6ccae0f4d2968fb8b8c89ef393359edd0043fc8de13cd7fd1221f02d6fa4d03940da1a0b17e12f291cce2c10bb84234217892b138ed1a9e9fae42d5f59cccc9aa88d1b29192c14896d79310438ef7875adfcb67754054ea341687cc07e91c628e2e470c688042ded0652ca73b0985665d2752869950cd850ba8470b3b33c8a3010a70efa120e7f270858cf0ac6e69a54539e4af029f512ce230c9b54ab0586d326b9f4feb5c092ed755bc61feeeaf5839eb0d1b8061f1510d521420c79206e951b1816b2632af63d721999a091d5e43ae99f0543e7aef9d4649beb35a370bb953d41c9893f8543943a1cd5356b73b255a61fe5036cd63f8038cb46b571bcf262028b4455eb78620aefa503308caf97c0e21440219ea56cf54fa218f64a0da9062cd31ea1a16220a1bd3613f8c5df1e0a76f5df7c389d98691fa44c610d43754c8a0dcbb718aa81f187ccf38aa3457aa4c46adbed83c69bf105df3564d4c3b1295201818b60bf67072955af2772dbb8cd6bee588035c52a86090d41938deea1cf5bdb8ac180e19c3f9568a709134f7575031b98a4047bd93db278a1b5d82d04f72c9901ca17bc7e3ca0f59a6c"}, @NL80211_ATTR_BEACON_TAIL={0x7f, 0xf, [@measure_req={0x26, 0x52, {0x0, 0x7, 0x81, "727f604a1e1ab2b8f9ddc3be06386d10f4f5365d023093e2128323ee5684ad3388c5eb32cd74f61a13a7dd47337e575deb664b0dfdf81d563e50d904eb8363d6ed8c557c183afd5bef229aef69d4a6"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x3, 0x0, {0x4, 0x510, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x4, 0xc2}}]}]]}]}, 0x19a0}, 0x1, 0x0, 0x0, 0x20000890}, 0x41) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ftruncate(r3, 0xa71) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:20 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x85, {0x85, 0x16, "d1df4022dba15a526f2a47b5c690e4a05d48dee90e1074e11c712de288294497e2a0f7a791d7e3babbf86ccc266a4dbc8bb79af0c868a4b1476e95b42eb6ea4cd0718cdf06ff92824549fa5c88bd375a1f4c7b41b4614155f5f86c168a28a354dfcf70bbf030c6815285a9d8d7fdae8c8957496290827afd91ddd1e76c93b4230ead57"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f00000000c0)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x5, 0xf00, 0x2, [0xc0f0]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x7, 0x5, "9a32e7cf", "92c4ce6b"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xf, 0x40, 0x0, 0x81, 0x9}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x14, 0xde, "ccac9c250ad852421591631034ac2c7a7096c01e4814890ecf41749bdc2cca03a0ae533e9071cae0fd34a63fa561a2fbc2d6ec5922968472a25f71d0d2b79a375716fb79b9d840092c5788c6b95319f03e09e6fcdde99ffc0e6c66411741f93fba593abd3dc991aedf6d95489ae29f98ffce05ec184575d29ac9a9cab296dfe35ccddf6fac47977eba16c508cf74af4f967c506186566a131388273b0426795ceb27b9afc8f3621afcc67ea288b61086acd4260adab3abd99fa9fe5e1d5f37dabb0da73882d96e16b8ce7049a04b09a7b13d00260c4b4f52215d35ac1e66"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x0, 0x10, [0xf000]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'b/'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "8dd0"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000a40)={0x14, &(0x7f0000000940)={0x60, 0x23, 0xa1, {0xa1, 0x23, "e1abb47f8312bc967632967256761ca3cbcbf2419be2379ff30732f0c09ef8dc2907fcc628f5fe38f943d617a96a3bcf8b1eca21e702cde69f463e0f3c7b7ef82c512d037cdf84468bbb3466e5e2dc531d683a90a81285a4a506fc4603d342b06f16cd034a4ab60fe929e2f47c28146721215906593cdc785aa0ad296645d2d68cd92e279145da8a71b8c726eaf4741a458577de6d1c1cdc15cbcf3b8de58b"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000a80)={0x0, 0xe, 0x83, "6da22114356034b663365372e543e10afed37cbf1277a42669b600ab46a9197102aa873767c700e5e14728d14117725b32850121b8670f6e85676553a42b6365157c335aa196aa26cad8681ecfb36debc906183fa13b6bfbc77950c384009a0873e56f6eb39ab2e97d2dd00428e328539b228eb257de9279ac8b2be91121a62b978bc2"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x16}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:20 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:20 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1180.446847][ T3683] usb 4-1: USB disconnect, device number 29 03:13:20 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:20 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x10, 0xfffffdef, 0x0, 0x0, 0x0) [ 1180.491690][ T3683] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 1180.519304][ T4203] FAULT_INJECTION: forcing a failure. [ 1180.519304][ T4203] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.592342][ T4203] CPU: 1 PID: 4203 Comm: syz-executor.4 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1180.602820][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1180.612987][ T4203] Call Trace: [ 1180.616282][ T4203] [ 1180.619298][ T4203] dump_stack_lvl+0xcd/0x134 [ 1180.623923][ T4203] should_fail.cold+0x5/0xa [ 1180.628486][ T4203] should_failslab+0x5/0x10 [ 1180.633017][ T4203] kmem_cache_alloc_bulk+0x45/0x480 03:13:20 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x11, 0xfffffdef, 0x0, 0x0, 0x0) [ 1180.638244][ T4203] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1180.644517][ T4203] ? percpu_counter_add_batch+0xbd/0x180 [ 1180.650186][ T4203] io_submit_sqes.cold+0x20b/0x43d [ 1180.655415][ T4203] ? __do_sys_io_uring_enter+0xfcf/0x1fc0 [ 1180.661162][ T4203] ? find_held_lock+0x2d/0x110 [ 1180.665952][ T4203] ? io_apoll_task_func+0x250/0x250 [ 1180.671184][ T4203] ? __do_sys_io_uring_enter+0x361/0x1fc0 [ 1180.676926][ T4203] ? lock_downgrade+0x6e0/0x6e0 [ 1180.681814][ T4203] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1180.687566][ T4203] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1180.693226][ T4203] ? io_submit_sqes+0x9100/0x9100 [ 1180.698364][ T4203] ? find_held_lock+0x2d/0x110 [ 1180.703151][ T4203] ? __context_tracking_exit+0xb8/0xe0 [ 1180.708631][ T4203] ? lock_downgrade+0x6e0/0x6e0 [ 1180.713502][ T4203] ? lock_downgrade+0x6e0/0x6e0 [ 1180.718374][ T4203] ? syscall_enter_from_user_mode+0x21/0x70 [ 1180.724289][ T4203] do_syscall_64+0x35/0xb0 [ 1180.728723][ T4203] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1180.734636][ T4203] RIP: 0033:0x7f02e414b049 03:13:20 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x12, 0xfffffdef, 0x0, 0x0, 0x0) [ 1180.739068][ T4203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1180.758825][ T4203] RSP: 002b:00007f02e2ac0168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1180.767270][ T4203] RAX: ffffffffffffffda RBX: 00007f02e425df60 RCX: 00007f02e414b049 [ 1180.775295][ T4203] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 1180.783286][ T4203] RBP: 00007f02e2ac01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.791306][ T4203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.799379][ T4203] R13: 00007ffe7e8be3df R14: 00007f02e2ac0300 R15: 0000000000022000 [ 1180.807458][ T4203] 03:13:20 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002080)={0x19a0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2000005d}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc2}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x74}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcc}, @NL80211_ATTR_CSA_IES={0x194c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x37, 0xfffe]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xf8, 0xf, [@prep={0x83, 0x25, @ext={{}, 0x81, 0x0, @broadcast, 0x1, @device_a, 0xfffffc01, 0x6, @device_b, 0x25494c10}}, @random_vendor={0xdd, 0xb4, "b13607dce718244369bde62110c188619bac91c0cee3a6874b31fc3e1ad71532c39fd88c14a09db7a6bb4517f61af78d9c7e6e9e6eb7dfb83b61c20edc346fca65a0ed4813c37266e1dcf8042bdf45813883440e6afcef1adf3751208af6984e3550734bf1406478a9d2047b4fdf220d1b55c9d641a3fd59c68bc96a61aa2cfc543e5b31e98c0f0ade7a3ae4ba6b5ff758314ea981c592b9b6d2b618d68533f2599ace01e0c62591b5908624c2a2b1df4d58b7fa"}, @rann={0x7e, 0x15, {{}, 0x2, 0x1, @broadcast, 0x0, 0x8b2, 0xffffffff}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1250, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "4547bc1a4979d60afe34578b2cf9cd22d23b8a4172a3ac260e29b465a143bc071e4019462f0e0d65683537fbbe0560a8a2369c8ccb65313cbf51308d766f1451fc6296374d09eb400ed0d7c853227498059f6617f57c0bae68890c8eedabc95fbf919bbb4a396a70c46392a9e2ab0bdfe30a15cf2919751083863e7bc931bd544701a682fb3451470cdfb3ef"}, @NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "160055365d07d14c80ef9942402a6b6f708862eda0392a235251992f5d33aa7699f061ab75c223302ad6b816d3c2f4458ca6f2448e2d2169dd81f0332c5b72b9947614abc19b461f0fb1dd9f59b2cc1bccc6d4aee2b507b333a74535a42aae572a8e0db2224dc561c49636746310e1190b65cfe075b502b3894131d43d5bef140858cd1246c6ca1dd29df0ad4392501f7bbe132e1cec0c42a4bb8acd4a14cd6dc45e459c94411526de1815dc2d12e704383911d798e0e71999538f00f423a1a0c01f7433dc6f7762335e4c4ede97825f72"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "c6854d1f679c23c80ea3457f23c511ffeed194fd94e113bbcb223a1293d75b329347c6dc65dd4f1516e44d0946654e8527b7c8226a58271b2671b3b8fcf1a21fc867787c35c1afc9d9264f409d4e63480657c21cfed04a7bbd3a0c5742886dc74e106f57f19a18d05f427bc0d27ce04eac5f75d026849fa663faf8eebe7dc51696ff32bff8f423880dbec91f9b39ab1f685d60a39973ff5b98e33a99eb2c5c327fcc238e8fa5b2ba63de9e1f86b32bcdd939bc348b6f0c5ccfdb2eea82a3cceb8dbf847d3e06fa8dae9c4ede3159f0c9d60e6e3dcf0f7946303652fc1f32e16d631e4142ad4ed164fb81e4dc48613990e537004cb28c3a6b5dba09994a3edba4cfed5f571a70b0d20da1e4f4e8e753af922c2791dc6ebb64e154d2548d882e4637ea8f995d3d84495858ed9f44cf97ad6221be36f1b7d9b2ab4d3156f487731e5df00aeb96035ec6813d672fc4aa592c2b5654234594804164957089ab0e13c6daaf3a6d28ddb455918d6326cc530cf405c9daa01446e11977e13db0111a89bf019b062e1fb59571bd644f2f4bc64f1297859875ff236093f99621b6c0d464ce72baf78f01cc1e76f58845e60fae4f8c5d55853a62529af84609d1e3adb3d494aa5b29f060e6e1c5f146efd9ab1ee9ebfb3f9c24d7f0d215597470fdc0e661a4fc7d53a3e2fabed071bf43051e6df74231f955b6a5be30ea6f6151c451fd64ed1a2768d58a0d7c4e74b6881bdf1109f8776dde0d9aadc1d04dccb51211d5f395534eb6f5dcf03c282840996ee8ce9e54254fff6cc76f248981916ac53824b7b046b6b0bf2a15587a72cbc1653364ffd551bb3d58c92d85be38d27928754a8820b27976bbbf695c8fe4aa15934fbd0d02986faccf4f3b997f77cb9ff6fe2885a03ccca53f7e645bf7fec4ea8415609fb177cabd718747d0bce3701d4c21eee617791002cd37aeec3ab949d6bf05231c6a2635d7f5604b48dcb001e0886f7d759e9dccad76d47a22f93ac2caa4608e0180f4202b5074008d45c0ea34ae5771357feb2efe9518fa79e0d423940c376c06ca015d21ed16e15656b4ac582f327a9f770e5588e55b587893c90e80d7787cca3d26d65bf444966a4b29a3a10bbeabfd97b7fbea1c13953a6f6c9caae66c019ecaa4c18b860455376d5e7b3db9a1c93c01736791adbb98d3200a666eb22772b59de74702634b6480b6347c640ca40e09cec3b11258c97a00935f1dc6610fc8f91b4dd90b522a7acd3ee3b7fea31c7d0444ec28090a0cd384f1d8656be4c695d5e8c2fb0397f758160745301adf0c897efca181b55474e50e51f94ba0e1f67b1a126ecd334862b8f051d02ad282cd18eaf71a60a2ffd314a0d9691327acdb7b717b67776dc2bcb69499da7772dcbee94d021cfb4f4b050a724aaa10198074a784cd0583a3feb9798d7276f5da54e09b3b7884f8ed22b934574bdff99367de8207fccd948fea37f550bf9d9bf22e8a4c11759950c6bcda265c5c91197d4d2aa897f8d6541fc10de6ab94e4dd996bcccda59b48f7646d81c225a92ca2805b26980b6dfbc91d376beb8343815b2bbfaf8c5fcfc4501c8c71c8b3f56cbd98431ead06813ca2bfad058b4a4e5f152fd837035e4c6904cee74367a3f67f7d26e671bad22994ec95d07a315d0683422ba4087d461b9e72ba2dac50d288d207964d440b5fcfb8dfda7f82faa347237373152b7f9bcc8be489f3b1be47d4fbe5be2240db1b8266c730f23b6d9418a5080a26d4611cae480db7ec2618ae925dc5fc883c5e9ac4cdd96dd693d6c655bac75c3b6f5abefedd0751daada5b347bc4db4e078fd0562ad5bee4d6e0210084dbf8102e45320a4c97a0a636459ef8a82684052bc8ccd0695c4a13bbd676c1d46c6c7d4be5f288226d5ea38bc86c67fb878e9d0d8d397a7f869e57b4fd719d95684d2b3d6c6101ac283ae7890e47f4c520233a33b79c986a520456023dc13dd980ec856ef1b45be7c26bfd24240fbb6ea0afb9bd9d5cd020df48ad23c7bd40172bc37c7b0aebc4690269950684d51686cf1f45216be1b2d62a1d606922d06070436143a5c4eda2281ca37a3f9828d0364ead483de249ae8a59737b36e7ffd2b8cfa89da9f442007aa6fd13cc5bf5e6c7e11ecd0bba94adeaa4ba4af443c1ff4c278a50811ba5b3c46822ee2bca127c0a15ba853b6896c2ccc114fb3929df783718fd082f962f41fc2505bc2620fdc791c746c5d7e56cf871c373dc71af8f3c902f444ff3c0a8fe902e410a6452fb1162d60473c7b432d2e06cad4a3b149f83d7593ccc96c144b1ca0e68c9fb0a722f8d3e9ecb035ddc3ddae526ee56ee0a41de84430beef4def63d66cdd1f878038a5f7155bf3ff86141c129ce8ccb9edd5df948475c8697f7116fa72620b95622500a4f2175d60bc1cb80fad5e053ceb91d3c498b1a3de768ddf7e7e2e47ce452273c59c7a32e862cf16c540783c2e44d0ed1894c20c873d7103ed737e7b1b11767ca8b2e1fa95726db4f33f3f4b6d23c6e2aea9b6f54e01c5e851647950ff17c5f2fc59c6ea14708a131b2002b0dd60e94b331470d4d35256f81155050172da72f3692fb1105d14e45be7f342962ff6278282269a41be9a051795d42363dfc98b518fff7c815dd7cf5cc26fbba37c0c856cdd899cb6973a410b3557a581496591b58b2a7345c77176f9788f33faa1c0af6fb854ebd10356828d58b9b6d23f5e6b26852897ec4abd53852777a89a87f39d7f6cbeea1a5228093bf1fdd5a452806d8e577d544e9b0027697fe0eeb2e3af3c7b8576a6ed2470d6df3cbe26eee9bb38e4d6f73bed1da8fc3300c4df5124e223ba818ef3694e2d214c3c8513ba7d2afbbbf714309ce154407ff87746baf6ef13e839df7a91a952b8fddb8d8fa899bf8b33d4a2fbccb3692f278a276a0b7d051fca2910932239ee930bde52c3fc336b634e3608984ff96e3bfc8f480973817005feedf20a51547d1b8fcbb82f08568e62a6936ff756eb0878af633983689fffbd4ec934088e3cb81315dff1527745a4cc26c786dd524004670d1c850b381f40e902445bac6ca7bc91394ad35195097d3acce425b16a28d3de9fc49580d0cb33276e1aca27d3f6daa6566a371eeeca3909cadfb4fb665d80561006c6a086ee4bbde2212447c062e71cc74f0b7f9e5a06a80f657126dbcbe84e8531aaa395ce8dd9202806b62b3a0c0bd2a0dde366d15c871ad0dc81f3f0624a34e82451cca853098f3f6ddc991c536a3bf15b83dc1d1cefb7db513dda4ec50ac7ab3992cc932b934fcb8545da434149aea6b86f3951a078e467a3437c840804594b568ff24004587ce2f9141f8c6a7128700ec32485f8edadb1ceed9fc3c1320fce0b049d2b1d70114f4a654557b0f1ca13dc8a838065f1b9a78f1f1cfec6cc2f35e2a12fd82ff0ff3b385bb0a597fd786222877e1291335232f56b09808c17782c8c6a808c3100bdf27f6670042deb7373e7f960995784b76d974c84abc63769c625db9bfa4fa5e7547b6b93a09e8b8c67ab47e9ec7f00490c95690e32d8e195578306205f0a75606450432a324d75a73ee77de3f33ab45f48c0f301e88e91334a48786b596edcf4d9baf6d41bfa9d3b31bdc9a44c15e1610c94bb789a43bcea1be00e678b5997742e813f624b25a44785d1277c88cb0f6947077262833f744a72850a931b745afa725a0d92aaa55541de5f110d1c3cbf4f901295f674cde96aa0b7c9ba1398e0268d2b6096f27bbf0d9c5eb39d5db75044b34b1619af86d87bf17ee708889f2f1aca3bb1580a92d2aa82f9ded59a3c7d2707d388541ee1948dc16c9609ee179021453c46c0879c1be3315c95c10eefd7932cead551797ddd4eacf750995f57a54eec7625883dbfdb175a189d2040c6766d6d31ceab9807aba81173e4672ad58245a4b80111cac4112b68a819109e9ad65a8515ba6bfd10ed393dbfb849171ba8ce2a7093eadb8ee4fc6b683642a46239bca8d5205454720aa401d144b7f00af8028553551e5fb70b0cf69a7e686d3368fce6545d0a4a9aaad5f12967f60a61ec3770fd32ac6f8e11152855ecdbf0a38f2bd7f44efdf5f4d93e662f2bb96026cbffbd6dacb149df08dbc62493e6d60350bc77cb06ae5cfd436a462f2a47c8f1071cc9f925595af9347e3461b739a8018496be0eb736610feb1e0011ec1fd9f3b85f201cf215be9009049b85901b01dbc541ef32dc0a82b9abeaee35f9c0de7e0026dd91302c016a47f02a377ad0fe51104dde0b92234f09ee11f9fc48764f30c6b1a6c8e2744395800eca99f1f7f95e27b43a10c2829de23d3eb8d328a5419e57c9d9eb86bf98e9836021361f51a09bd2166576f43fb013f8aa224603309249498d371368c1f2dffe724f49bb3136f1530497ef6287f7404c6290fdbbde72e394cc4d297f8f58bf42e9bd6e0d5a31bec035f863fe1b3b01c25c5da0c1454acc9768e6cdc86af893300bfc2fd478cf4187d89379e546f506c923bbd48b1f3f6e787e3db62d52d30044c93c6eabb313d85b4e233b5ca899cf43a6043ef4d2ad03fbf7f1cba062dcb650c97d111f095b99424972b51266e2a7fbaabb643fa4b3e202536d50c9ce8541c64749a1d257782fc3b472f4aadfb3dae6396f123f036f2d6bdb8890639db522b4700bd7d1e2b2cd58ce852e1d0055d722427a60a3e00f897f6df181d0491fb9c56e9a4d943794193283b3af3dff3c7537305871cf7ea946eabe8c8aff32fe8b2a52c3bf6744f709b7b7bf06bf00c99e8710e534b1e606b836f8bd99002d4c096bb50aa90d5978483d19e208947da045f97fa875b72475d98deba58c4edaaa1ffd2dc494e365a88388403d07221cdc023731dc41e6c483c8440c2ce89745fd0013c0bd3a3df852a86b5ed29bc077ed7ed635f2a364b614ff10cb4b56e8cb37abe46bfcf11ae5753d2ed2eb3fc89556b6f4b7f9a9cb7f2f279800b71f675c46ea82c2ce4f4b16a8039e791e74fe25cbc9ac0d7774e89b497f4b8dad974e05d8e8581b9a274be704f4c42ae940c7c4aca140b482f7f7aad56b2d78ea7744db915fdbbec70a7ba4bcd4cb6fa0ce8c5203caa3b4a4940d72b695401015e3dc3f6a84666167d342ced0ba93c9c91eae4f3cec9d234e0b35b774bdba5e80a17a039649ac52a9d72baa442e6d7108801c9d0f8a472388334f4ff8cf12170568c72d6623a61ab6c7c758c047f0f26199cbfeeda2ca1f74c8c476aff211c053a6c814fcda74867b98721cb6d7ccdcfb8f708f854a63a3bd7818afdbe675b988522b1936306793a400fd9574d534082f4a7123ccf907410cbd3765b10da614a0b3a9c02886c1f0e6cd229bc1b6002c799c655d62100e3e96596e8b852081db2f4bc7d2261092e97b2227fb73a4cd6ec80a40e7d41b8e5d598ff9f9ea00ebb5f589a2a37bfd6abec6a100524418b49f2efdde26838c09972307af2f86be2739bf699d1193ca12ed5677eb86a27949b205c0c38f1950bdd673a7d6b2fb3c951c592dbc6471f05da8fb1fede884cc8b3f8c9da2d0dab98b26b34db73a34c49b5ef3d8c93b56d5f8e1701d6be4692a53c5c6436804a39d54ff8c8646709eab067d7d61ccc98a17f48ddfdb0cbc7f66a9d0c713a691b284ea5abb2c7e78d5ecd08a75fbbcbd98f1ff6e4dcbd291f8190057c11ccfcb5e2faf10085b24736f01c0d9947e241b43ca27ccd5ef22dfe93a4de31bc2d086c35fb89e31cc92a66305c32d1411e2635e75d0cc78d352c133f17f5477f0c2b450fc45848ce0d83bfb837019c5b1d57892b8878b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "6fb463679221307add196cbe96592511064fd7e76f1e5733243746aebe8f69da40d789613e123405ed06f74a53c59c77726b58fdbe8edba6c0667e5d20f26805b1a5df9ff2cac353b24576b7d179332fb67753312ff1740f0033"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "fa899d757e"}, @NL80211_FTM_RESP_ATTR_LCI={0x6d, 0x2, "a9a382d2880affbcd2ce54162a3174cf9c2cb009b5283b4398159381793ac42a7141163ddb5fd69431e6d7c3a7425dd80a9299cb47df1588a29c1bca610a3006c0894a36ee054a66d8cfb3e5bb5ff422735f7d11bd0de99b949a65d2d2fafaa18ae4d7cc6038e63436"}]}, @NL80211_ATTR_PROBE_RESP={0x571, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x7f, 0xf, [@measure_req={0x26, 0x52, {0x0, 0x7, 0x81, "727f604a1e1ab2b8f9ddc3be06386d10f4f5365d023093e2128323ee5684ad3388c5eb32cd74f61a13a7dd47337e575deb664b0dfdf81d563e50d904eb8363d6ed8c557c183afd5bef229aef69d4a6"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x3, 0x0, {0x4, 0x510, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x4, 0xc2}}]}]]}]}, 0x19a0}, 0x1, 0x0, 0x0, 0x20000890}, 0x41) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) (rerun: 32) ftruncate(r3, 0xa71) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:20 executing program 5: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1180.973046][T20684] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1181.273409][ T3683] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1181.383541][T20684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.593392][T20684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1181.602854][T20684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.611677][T20684] usb 1-1: Product: syz [ 1181.616556][T20684] usb 1-1: Manufacturer: syz [ 1181.621344][T20684] usb 1-1: SerialNumber: syz [ 1181.639648][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.813268][ T3683] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1181.822447][ T3683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.831264][ T3683] usb 4-1: Product: syz [ 1181.836182][ T3683] usb 4-1: Manufacturer: syz [ 1181.840898][ T3683] usb 4-1: SerialNumber: syz [ 1181.874996][ T4207] UDC core: couldn't find an available UDC or it's busy: -16 [ 1181.885473][ T4207] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1182.086673][ T4209] UDC core: couldn't find an available UDC or it's busy: -16 [ 1182.102620][ T4209] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1182.256410][ T4290] UDC core: couldn't find an available UDC or it's busy: -16 [ 1182.264026][ T4290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1182.883305][ T3683] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1182.889772][ T3683] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1182.897428][ T3683] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1183.103100][ T3683] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1183.115899][ T3683] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1183.116977][ T4290] UDC core: couldn't find an available UDC or it's busy: -16 [ 1183.141752][ T3683] usb 4-1: USB disconnect, device number 30 [ 1183.143533][ T4290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1183.157220][ T3683] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 1183.179500][T20684] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1183.188558][T20684] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1183.204220][T20684] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1183.403432][T20684] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1183.419107][T20684] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 03:13:23 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x13, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:23 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="200b18000300182156ef6363493f5ec98ad9ef6aa70d1186c0407ae00510a8c49c359cc1061874fb49d80736b2bb27e1c5e0c54a08e47af4a119e64e8aea72bc9df9b4467c91b7036bdf0f82c8917ad0ac658101ce9c9fc41197ea91d7c330b31f4f25a2683d47d69113e83f2969f77e730a1aa5e1b2bde6405e99088848ba437ec3347d758852a5b1e1afc470d08992b630c4ad3c30ca4f636e4cb2cf9623ae36e0ec"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0xe, 0x47, "b95e18a8588aea12a085cfe1db96bcbef585e9469cdb4024f790755c1ec015a6281da427f976fe74f38fee588b844bcfdc0f64d44daa3cc8ffa17f14652e80d2fd8e3c7637e7af"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x56c, 0x7fff, 0x6, 0x0, 0x7, 0x1, 0x2, 0xfff, 0x1ff, 0x2, 0x4, 0x5}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64) 03:13:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 1183.637159][ T4315] FAULT_INJECTION: forcing a failure. [ 1183.637159][ T4315] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.689227][ T4315] CPU: 0 PID: 4315 Comm: syz-executor.4 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1183.699737][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.709810][ T4315] Call Trace: [ 1183.713118][ T4315] [ 1183.716070][ T4315] dump_stack_lvl+0xcd/0x134 [ 1183.720691][ T4315] should_fail.cold+0x5/0xa [ 1183.725208][ T4315] should_failslab+0x5/0x10 [ 1183.725241][ T4315] kmem_cache_alloc_node_trace+0x69/0x5b0 [ 1183.725270][ T4315] create_io_worker+0x108/0x630 [ 1183.725368][ T4315] io_wqe_enqueue+0x692/0xbc0 [ 1183.725393][ T4315] ? create_io_worker+0x630/0x630 [ 1183.725418][ T4315] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1183.725449][ T4315] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1183.725481][ T4315] io_queue_async_work+0x28c/0x5d0 [ 1183.725506][ T4315] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1183.725536][ T4315] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1183.725562][ T4315] io_submit_sqes+0x7fb4/0x9100 [ 1183.725590][ T4315] ? find_held_lock+0x2d/0x110 [ 1183.725617][ T4315] ? io_apoll_task_func+0x250/0x250 [ 1183.725644][ T4315] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1183.725680][ T4315] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1183.725708][ T4315] ? io_submit_sqes+0x9100/0x9100 [ 1183.725734][ T4315] ? find_held_lock+0x2d/0x110 [ 1183.725760][ T4315] ? __context_tracking_exit+0xb8/0xe0 [ 1183.725787][ T4315] ? lock_downgrade+0x6e0/0x6e0 [ 1183.725816][ T4315] ? lock_downgrade+0x6e0/0x6e0 [ 1183.725845][ T4315] ? syscall_enter_from_user_mode+0x21/0x70 [ 1183.725873][ T4315] do_syscall_64+0x35/0xb0 [ 1183.762787][ T4315] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1183.762827][ T4315] RIP: 0033:0x7f02e414b049 [ 1183.762847][ T4315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1183.870547][ T4315] RSP: 002b:00007f02e2ac0168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1183.878963][ T4315] RAX: ffffffffffffffda RBX: 00007f02e425df60 RCX: 00007f02e414b049 [ 1183.886944][ T4315] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 1183.894931][ T4315] RBP: 00007f02e2ac01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.902918][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.910910][ T4315] R13: 00007ffe7e8be3df R14: 00007f02e2ac0300 R15: 0000000000022000 [ 1183.918893][ T4315] [ 1183.993001][ T3683] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1184.363611][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.533307][ T3683] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1184.542641][ T3683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.561085][ T3683] usb 4-1: Product: syz [ 1184.565820][ T3683] usb 4-1: Manufacturer: syz [ 1184.570660][ T3683] usb 4-1: SerialNumber: syz 03:13:24 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x85, {0x85, 0x16, "d1df4022dba15a526f2a47b5c690e4a05d48dee90e1074e11c712de288294497e2a0f7a791d7e3babbf86ccc266a4dbc8bb79af0c868a4b1476e95b42eb6ea4cd0718cdf06ff92824549fa5c88bd375a1f4c7b41b4614155f5f86c168a28a354dfcf70bbf030c6815285a9d8d7fdae8c8957496290827afd91ddd1e76c93b4230ead57"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f00000000c0)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x5, 0xf00, 0x2, [0xc0f0]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x7, 0x5, "9a32e7cf", "92c4ce6b"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xf, 0x40, 0x0, 0x81, 0x9}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x14, 0xde, "ccac9c250ad852421591631034ac2c7a7096c01e4814890ecf41749bdc2cca03a0ae533e9071cae0fd34a63fa561a2fbc2d6ec5922968472a25f71d0d2b79a375716fb79b9d840092c5788c6b95319f03e09e6fcdde99ffc0e6c66411741f93fba593abd3dc991aedf6d95489ae29f98ffce05ec184575d29ac9a9cab296dfe35ccddf6fac47977eba16c508cf74af4f967c506186566a131388273b0426795ceb27b9afc8f3621afcc67ea288b61086acd4260adab3abd99fa9fe5e1d5f37dabb0da73882d96e16b8ce7049a04b09a7b13d00260c4b4f52215d35ac1e66"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x0, 0x10, [0xf000]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'b/'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "8dd0"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000a40)={0x14, &(0x7f0000000940)={0x60, 0x23, 0xa1, {0xa1, 0x23, "e1abb47f8312bc967632967256761ca3cbcbf2419be2379ff30732f0c09ef8dc2907fcc628f5fe38f943d617a96a3bcf8b1eca21e702cde69f463e0f3c7b7ef82c512d037cdf84468bbb3466e5e2dc531d683a90a81285a4a506fc4603d342b06f16cd034a4ab60fe929e2f47c28146721215906593cdc785aa0ad296645d2d68cd92e279145da8a71b8c726eaf4741a458577de6d1c1cdc15cbcf3b8de58b"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000a80)={0x0, 0xe, 0x83, "6da22114356034b663365372e543e10afed37cbf1277a42669b600ab46a9197102aa873767c700e5e14728d14117725b32850121b8670f6e85676553a42b6365157c335aa196aa26cad8681ecfb36debc906183fa13b6bfbc77950c384009a0873e56f6eb39ab2e97d2dd00428e328539b228eb257de9279ac8b2be91121a62b978bc2"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x16}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x3}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 03:13:24 executing program 5: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:24 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x14, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:24 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 03:13:24 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002080)={0x19a0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2000005d}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc2}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x74}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcc}, @NL80211_ATTR_CSA_IES={0x194c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x37, 0xfffe]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xf8, 0xf, [@prep={0x83, 0x25, @ext={{}, 0x81, 0x0, @broadcast, 0x1, @device_a, 0xfffffc01, 0x6, @device_b, 0x25494c10}}, @random_vendor={0xdd, 0xb4, "b13607dce718244369bde62110c188619bac91c0cee3a6874b31fc3e1ad71532c39fd88c14a09db7a6bb4517f61af78d9c7e6e9e6eb7dfb83b61c20edc346fca65a0ed4813c37266e1dcf8042bdf45813883440e6afcef1adf3751208af6984e3550734bf1406478a9d2047b4fdf220d1b55c9d641a3fd59c68bc96a61aa2cfc543e5b31e98c0f0ade7a3ae4ba6b5ff758314ea981c592b9b6d2b618d68533f2599ace01e0c62591b5908624c2a2b1df4d58b7fa"}, @rann={0x7e, 0x15, {{}, 0x2, 0x1, @broadcast, 0x0, 0x8b2, 0xffffffff}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1250, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "4547bc1a4979d60afe34578b2cf9cd22d23b8a4172a3ac260e29b465a143bc071e4019462f0e0d65683537fbbe0560a8a2369c8ccb65313cbf51308d766f1451fc6296374d09eb400ed0d7c853227498059f6617f57c0bae68890c8eedabc95fbf919bbb4a396a70c46392a9e2ab0bdfe30a15cf2919751083863e7bc931bd544701a682fb3451470cdfb3ef"}, @NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "160055365d07d14c80ef9942402a6b6f708862eda0392a235251992f5d33aa7699f061ab75c223302ad6b816d3c2f4458ca6f2448e2d2169dd81f0332c5b72b9947614abc19b461f0fb1dd9f59b2cc1bccc6d4aee2b507b333a74535a42aae572a8e0db2224dc561c49636746310e1190b65cfe075b502b3894131d43d5bef140858cd1246c6ca1dd29df0ad4392501f7bbe132e1cec0c42a4bb8acd4a14cd6dc45e459c94411526de1815dc2d12e704383911d798e0e71999538f00f423a1a0c01f7433dc6f7762335e4c4ede97825f72"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "6fb463679221307add196cbe96592511064fd7e76f1e5733243746aebe8f69da40d789613e123405ed06f74a53c59c77726b58fdbe8edba6c0667e5d20f26805b1a5df9ff2cac353b24576b7d179332fb67753312ff1740f0033"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "fa899d757e"}, @NL80211_FTM_RESP_ATTR_LCI={0x6d, 0x2, "a9a382d2880affbcd2ce54162a3174cf9c2cb009b5283b4398159381793ac42a7141163ddb5fd69431e6d7c3a7425dd80a9299cb47df1588a29c1bca610a3006c0894a36ee054a66d8cfb3e5bb5ff422735f7d11bd0de99b949a65d2d2fafaa18ae4d7cc6038e63436"}]}, @NL80211_ATTR_PROBE_RESP={0x571, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x7f, 0xf, [@measure_req={0x26, 0x52, {0x0, 0x7, 0x81, "727f604a1e1ab2b8f9ddc3be06386d10f4f5365d023093e2128323ee5684ad3388c5eb32cd74f61a13a7dd47337e575deb664b0dfdf81d563e50d904eb8363d6ed8c557c183afd5bef229aef69d4a6"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x3, 0x0, {0x4, 0x510, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x4, 0xc2}}]}]]}]}, 0x19a0}, 0x1, 0x0, 0x0, 0x20000890}, 0x41) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ftruncate(r3, 0xa71) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002080)={0x19a0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2000005d}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc2}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x74}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcc}, @NL80211_ATTR_CSA_IES={0x194c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x37, 0xfffe]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xf8, 0xf, [@prep={0x83, 0x25, @ext={{}, 0x81, 0x0, @broadcast, 0x1, @device_a, 0xfffffc01, 0x6, @device_b, 0x25494c10}}, @random_vendor={0xdd, 0xb4, "b13607dce718244369bde62110c188619bac91c0cee3a6874b31fc3e1ad71532c39fd88c14a09db7a6bb4517f61af78d9c7e6e9e6eb7dfb83b61c20edc346fca65a0ed4813c37266e1dcf8042bdf45813883440e6afcef1adf3751208af6984e3550734bf1406478a9d2047b4fdf220d1b55c9d641a3fd59c68bc96a61aa2cfc543e5b31e98c0f0ade7a3ae4ba6b5ff758314ea981c592b9b6d2b618d68533f2599ace01e0c62591b5908624c2a2b1df4d58b7fa"}, @rann={0x7e, 0x15, {{}, 0x2, 0x1, @broadcast, 0x0, 0x8b2, 0xffffffff}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1250, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "4547bc1a4979d60afe34578b2cf9cd22d23b8a4172a3ac260e29b465a143bc071e4019462f0e0d65683537fbbe0560a8a2369c8ccb65313cbf51308d766f1451fc6296374d09eb400ed0d7c853227498059f6617f57c0bae68890c8eedabc95fbf919bbb4a396a70c46392a9e2ab0bdfe30a15cf2919751083863e7bc931bd544701a682fb3451470cdfb3ef"}, @NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "160055365d07d14c80ef9942402a6b6f708862eda0392a235251992f5d33aa7699f061ab75c223302ad6b816d3c2f4458ca6f2448e2d2169dd81f0332c5b72b9947614abc19b461f0fb1dd9f59b2cc1bccc6d4aee2b507b333a74535a42aae572a8e0db2224dc561c49636746310e1190b65cfe075b502b3894131d43d5bef140858cd1246c6ca1dd29df0ad4392501f7bbe132e1cec0c42a4bb8acd4a14cd6dc45e459c94411526de1815dc2d12e704383911d798e0e71999538f00f423a1a0c01f7433dc6f7762335e4c4ede97825f72"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "c6854d1f679c23c80ea3457f23c511ffeed194fd94e113bbcb223a1293d75b329347c6dc65dd4f1516e44d0946654e8527b7c8226a58271b2671b3b8fcf1a21fc867787c35c1afc9d9264f409d4e63480657c21cfed04a7bbd3a0c5742886dc74e106f57f19a18d05f427bc0d27ce04eac5f75d026849fa663faf8eebe7dc51696ff32bff8f423880dbec91f9b39ab1f685d60a39973ff5b98e33a99eb2c5c327fcc238e8fa5b2ba63de9e1f86b32bcdd939bc348b6f0c5ccfdb2eea82a3cceb8dbf847d3e06fa8dae9c4ede3159f0c9d60e6e3dcf0f7946303652fc1f32e16d631e4142ad4ed164fb81e4dc48613990e537004cb28c3a6b5dba09994a3edba4cfed5f571a70b0d20da1e4f4e8e753af922c2791dc6ebb64e154d2548d882e4637ea8f995d3d84495858ed9f44cf97ad6221be36f1b7d9b2ab4d3156f487731e5df00aeb96035ec6813d672fc4aa592c2b5654234594804164957089ab0e13c6daaf3a6d28ddb455918d6326cc530cf405c9daa01446e11977e13db0111a89bf019b062e1fb59571bd644f2f4bc64f1297859875ff236093f99621b6c0d464ce72baf78f01cc1e76f58845e60fae4f8c5d55853a62529af84609d1e3adb3d494aa5b29f060e6e1c5f146efd9ab1ee9ebfb3f9c24d7f0d215597470fdc0e661a4fc7d53a3e2fabed071bf43051e6df74231f955b6a5be30ea6f6151c451fd64ed1a2768d58a0d7c4e74b6881bdf1109f8776dde0d9aadc1d04dccb51211d5f395534eb6f5dcf03c282840996ee8ce9e54254fff6cc76f248981916ac53824b7b046b6b0bf2a15587a72cbc1653364ffd551bb3d58c92d85be38d27928754a8820b27976bbbf695c8fe4aa15934fbd0d02986faccf4f3b997f77cb9ff6fe2885a03ccca53f7e645bf7fec4ea8415609fb177cabd718747d0bce3701d4c21eee617791002cd37aeec3ab949d6bf05231c6a2635d7f5604b48dcb001e0886f7d759e9dccad76d47a22f93ac2caa4608e0180f4202b5074008d45c0ea34ae5771357feb2efe9518fa79e0d423940c376c06ca015d21ed16e15656b4ac582f327a9f770e5588e55b587893c90e80d7787cca3d26d65bf444966a4b29a3a10bbeabfd97b7fbea1c13953a6f6c9caae66c019ecaa4c18b860455376d5e7b3db9a1c93c01736791adbb98d3200a666eb22772b59de74702634b6480b6347c640ca40e09cec3b11258c97a00935f1dc6610fc8f91b4dd90b522a7acd3ee3b7fea31c7d0444ec28090a0cd384f1d8656be4c695d5e8c2fb0397f758160745301adf0c897efca181b55474e50e51f94ba0e1f67b1a126ecd334862b8f051d02ad282cd18eaf71a60a2ffd314a0d9691327acdb7b717b67776dc2bcb69499da7772dcbee94d021cfb4f4b050a724aaa10198074a784cd0583a3feb9798d7276f5da54e09b3b7884f8ed22b934574bdff99367de8207fccd948fea37f550bf9d9bf22e8a4c11759950c6bcda265c5c91197d4d2aa897f8d6541fc10de6ab94e4dd996bcccda59b48f7646d81c225a92ca2805b26980b6dfbc91d376beb8343815b2bbfaf8c5fcfc4501c8c71c8b3f56cbd98431ead06813ca2bfad058b4a4e5f152fd837035e4c6904cee74367a3f67f7d26e671bad22994ec95d07a315d0683422ba4087d461b9e72ba2dac50d288d207964d440b5fcfb8dfda7f82faa347237373152b7f9bcc8be489f3b1be47d4fbe5be2240db1b8266c730f23b6d9418a5080a26d4611cae480db7ec2618ae925dc5fc883c5e9ac4cdd96dd693d6c655bac75c3b6f5abefedd0751daada5b347bc4db4e078fd0562ad5bee4d6e0210084dbf8102e45320a4c97a0a636459ef8a82684052bc8ccd0695c4a13bbd676c1d46c6c7d4be5f288226d5ea38bc86c67fb878e9d0d8d397a7f869e57b4fd719d95684d2b3d6c6101ac283ae7890e47f4c520233a33b79c986a520456023dc13dd980ec856ef1b45be7c26bfd24240fbb6ea0afb9bd9d5cd020df48ad23c7bd40172bc37c7b0aebc4690269950684d51686cf1f45216be1b2d62a1d606922d06070436143a5c4eda2281ca37a3f9828d0364ead483de249ae8a59737b36e7ffd2b8cfa89da9f442007aa6fd13cc5bf5e6c7e11ecd0bba94adeaa4ba4af443c1ff4c278a50811ba5b3c46822ee2bca127c0a15ba853b6896c2ccc114fb3929df783718fd082f962f41fc2505bc2620fdc791c746c5d7e56cf871c373dc71af8f3c902f444ff3c0a8fe902e410a6452fb1162d60473c7b432d2e06cad4a3b149f83d7593ccc96c144b1ca0e68c9fb0a722f8d3e9ecb035ddc3ddae526ee56ee0a41de84430beef4def63d66cdd1f878038a5f7155bf3ff86141c129ce8ccb9edd5df948475c8697f7116fa72620b95622500a4f2175d60bc1cb80fad5e053ceb91d3c498b1a3de768ddf7e7e2e47ce452273c59c7a32e862cf16c540783c2e44d0ed1894c20c873d7103ed737e7b1b11767ca8b2e1fa95726db4f33f3f4b6d23c6e2aea9b6f54e01c5e851647950ff17c5f2fc59c6ea14708a131b2002b0dd60e94b331470d4d35256f81155050172da72f3692fb1105d14e45be7f342962ff6278282269a41be9a051795d42363dfc98b518fff7c815dd7cf5cc26fbba37c0c856cdd899cb6973a410b3557a581496591b58b2a7345c77176f9788f33faa1c0af6fb854ebd10356828d58b9b6d23f5e6b26852897ec4abd53852777a89a87f39d7f6cbeea1a5228093bf1fdd5a452806d8e577d544e9b0027697fe0eeb2e3af3c7b8576a6ed2470d6df3cbe26eee9bb38e4d6f73bed1da8fc3300c4df5124e223ba818ef3694e2d214c3c8513ba7d2afbbbf714309ce154407ff87746baf6ef13e839df7a91a952b8fddb8d8fa899bf8b33d4a2fbccb3692f278a276a0b7d051fca2910932239ee930bde52c3fc336b634e3608984ff96e3bfc8f480973817005feedf20a51547d1b8fcbb82f08568e62a6936ff756eb0878af633983689fffbd4ec934088e3cb81315dff1527745a4cc26c786dd524004670d1c850b381f40e902445bac6ca7bc91394ad35195097d3acce425b16a28d3de9fc49580d0cb33276e1aca27d3f6daa6566a371eeeca3909cadfb4fb665d80561006c6a086ee4bbde2212447c062e71cc74f0b7f9e5a06a80f657126dbcbe84e8531aaa395ce8dd9202806b62b3a0c0bd2a0dde366d15c871ad0dc81f3f0624a34e82451cca853098f3f6ddc991c536a3bf15b83dc1d1cefb7db513dda4ec50ac7ab3992cc932b934fcb8545da434149aea6b86f3951a078e467a3437c840804594b568ff24004587ce2f9141f8c6a7128700ec32485f8edadb1ceed9fc3c1320fce0b049d2b1d70114f4a654557b0f1ca13dc8a838065f1b9a78f1f1cfec6cc2f35e2a12fd82ff0ff3b385bb0a597fd786222877e1291335232f56b09808c17782c8c6a808c3100bdf27f6670042deb7373e7f960995784b76d974c84abc63769c625db9bfa4fa5e7547b6b93a09e8b8c67ab47e9ec7f00490c95690e32d8e195578306205f0a75606450432a324d75a73ee77de3f33ab45f48c0f301e88e91334a48786b596edcf4d9baf6d41bfa9d3b31bdc9a44c15e1610c94bb789a43bcea1be00e678b5997742e813f624b25a44785d1277c88cb0f6947077262833f744a72850a931b745afa725a0d92aaa55541de5f110d1c3cbf4f901295f674cde96aa0b7c9ba1398e0268d2b6096f27bbf0d9c5eb39d5db75044b34b1619af86d87bf17ee708889f2f1aca3bb1580a92d2aa82f9ded59a3c7d2707d388541ee1948dc16c9609ee179021453c46c0879c1be3315c95c10eefd7932cead551797ddd4eacf750995f57a54eec7625883dbfdb175a189d2040c6766d6d31ceab9807aba81173e4672ad58245a4b80111cac4112b68a819109e9ad65a8515ba6bfd10ed393dbfb849171ba8ce2a7093eadb8ee4fc6b683642a46239bca8d5205454720aa401d144b7f00af8028553551e5fb70b0cf69a7e686d3368fce6545d0a4a9aaad5f12967f60a61ec3770fd32ac6f8e11152855ecdbf0a38f2bd7f44efdf5f4d93e662f2bb96026cbffbd6dacb149df08dbc62493e6d60350bc77cb06ae5cfd436a462f2a47c8f1071cc9f925595af9347e3461b739a8018496be0eb736610feb1e0011ec1fd9f3b85f201cf215be9009049b85901b01dbc541ef32dc0a82b9abeaee35f9c0de7e0026dd91302c016a47f02a377ad0fe51104dde0b92234f09ee11f9fc48764f30c6b1a6c8e2744395800eca99f1f7f95e27b43a10c2829de23d3eb8d328a5419e57c9d9eb86bf98e9836021361f51a09bd2166576f43fb013f8aa224603309249498d371368c1f2dffe724f49bb3136f1530497ef6287f7404c6290fdbbde72e394cc4d297f8f58bf42e9bd6e0d5a31bec035f863fe1b3b01c25c5da0c1454acc9768e6cdc86af893300bfc2fd478cf4187d89379e546f506c923bbd48b1f3f6e787e3db62d52d30044c93c6eabb313d85b4e233b5ca899cf43a6043ef4d2ad03fbf7f1cba062dcb650c97d111f095b99424972b51266e2a7fbaabb643fa4b3e202536d50c9ce8541c64749a1d257782fc3b472f4aadfb3dae6396f123f036f2d6bdb8890639db522b4700bd7d1e2b2cd58ce852e1d0055d722427a60a3e00f897f6df181d0491fb9c56e9a4d943794193283b3af3dff3c7537305871cf7ea946eabe8c8aff32fe8b2a52c3bf6744f709b7b7bf06bf00c99e8710e534b1e606b836f8bd99002d4c096bb50aa90d5978483d19e208947da045f97fa875b72475d98deba58c4edaaa1ffd2dc494e365a88388403d07221cdc023731dc41e6c483c8440c2ce89745fd0013c0bd3a3df852a86b5ed29bc077ed7ed635f2a364b614ff10cb4b56e8cb37abe46bfcf11ae5753d2ed2eb3fc89556b6f4b7f9a9cb7f2f279800b71f675c46ea82c2ce4f4b16a8039e791e74fe25cbc9ac0d7774e89b497f4b8dad974e05d8e8581b9a274be704f4c42ae940c7c4aca140b482f7f7aad56b2d78ea7744db915fdbbec70a7ba4bcd4cb6fa0ce8c5203caa3b4a4940d72b695401015e3dc3f6a84666167d342ced0ba93c9c91eae4f3cec9d234e0b35b774bdba5e80a17a039649ac52a9d72baa442e6d7108801c9d0f8a472388334f4ff8cf12170568c72d6623a61ab6c7c758c047f0f26199cbfeeda2ca1f74c8c476aff211c053a6c814fcda74867b98721cb6d7ccdcfb8f708f854a63a3bd7818afdbe675b988522b1936306793a400fd9574d534082f4a7123ccf907410cbd3765b10da614a0b3a9c02886c1f0e6cd229bc1b6002c799c655d62100e3e96596e8b852081db2f4bc7d2261092e97b2227fb73a4cd6ec80a40e7d41b8e5d598ff9f9ea00ebb5f589a2a37bfd6abec6a100524418b49f2efdde26838c09972307af2f86be2739bf699d1193ca12ed5677eb86a27949b205c0c38f1950bdd673a7d6b2fb3c951c592dbc6471f05da8fb1fede884cc8b3f8c9da2d0dab98b26b34db73a34c49b5ef3d8c93b56d5f8e1701d6be4692a53c5c6436804a39d54ff8c8646709eab067d7d61ccc98a17f48ddfdb0cbc7f66a9d0c713a691b284ea5abb2c7e78d5ecd08a75fbbcbd98f1ff6e4dcbd291f8190057c11ccfcb5e2faf10085b24736f01c0d9947e241b43ca27ccd5ef22dfe93a4de31bc2d086c35fb89e31cc92a66305c32d1411e2635e75d0cc78d352c133f17f5477f0c2b450fc45848ce0d83bfb837019c5b1d57892b8878b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "6fb463679221307add196cbe96592511064fd7e76f1e5733243746aebe8f69da40d789613e123405ed06f74a53c59c77726b58fdbe8edba6c0667e5d20f26805b1a5df9ff2cac353b24576b7d179332fb67753312ff1740f0033"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "fa899d757e"}, @NL80211_FTM_RESP_ATTR_LCI={0x6d, 0x2, "a9a382d2880affbcd2ce54162a3174cf9c2cb009b5283b4398159381793ac42a7141163ddb5fd69431e6d7c3a7425dd80a9299cb47df1588a29c1bca610a3006c0894a36ee054a66d8cfb3e5bb5ff422735f7d11bd0de99b949a65d2d2fafaa18ae4d7cc6038e63436"}]}, @NL80211_ATTR_PROBE_RESP={0x571, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x7f, 0xf, [@measure_req={0x26, 0x52, {0x0, 0x7, 0x81, "727f604a1e1ab2b8f9ddc3be06386d10f4f5365d023093e2128323ee5684ad3388c5eb32cd74f61a13a7dd47337e575deb664b0dfdf81d563e50d904eb8363d6ed8c557c183afd5bef229aef69d4a6"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x3, 0x0, {0x4, 0x510, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x4, 0xc2}}]}]]}]}, 0x19a0}, 0x1, 0x0, 0x0, 0x20000890}, 0x41) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) (async) ftruncate(r3, 0xa71) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 1184.632116][ T20] usb 1-1: USB disconnect, device number 60 [ 1184.643487][ T20] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:13:24 executing program 5: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r2}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1184.687294][ T4362] FAULT_INJECTION: forcing a failure. [ 1184.687294][ T4362] name failslab, interval 1, probability 0, space 0, times 0 03:13:24 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x15, 0xfffffdef, 0x0, 0x0, 0x0) [ 1184.796717][ T4362] CPU: 1 PID: 4362 Comm: syz-executor.4 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1184.807360][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1184.817432][ T4362] Call Trace: [ 1184.820728][ T4362] [ 1184.823669][ T4362] dump_stack_lvl+0xcd/0x134 [ 1184.828287][ T4362] should_fail.cold+0x5/0xa [ 1184.832812][ T4362] should_failslab+0x5/0x10 [ 1184.837337][ T4362] kmem_cache_alloc_node+0x68/0x590 [ 1184.842585][ T4362] copy_process+0x5c4/0x7250 03:13:24 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x16, 0xfffffdef, 0x0, 0x0, 0x0) [ 1184.847198][ T4362] ? kasan_save_stack+0x1e/0x40 [ 1184.852076][ T4362] ? __kasan_kmalloc+0xa6/0xd0 [ 1184.856867][ T4362] ? kmem_cache_alloc_node_trace+0x208/0x5b0 [ 1184.862872][ T4362] ? create_io_worker+0x108/0x630 [ 1184.867916][ T4362] ? io_wqe_enqueue+0x692/0xbc0 [ 1184.872788][ T4362] ? io_queue_async_work+0x28c/0x5d0 [ 1184.878097][ T4362] ? io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1184.883584][ T4362] ? io_submit_sqes+0x7fb4/0x9100 [ 1184.888626][ T4362] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1184.894395][ T4362] ? do_syscall_64+0x35/0xb0 [ 1184.899009][ T4362] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1184.905102][ T4362] ? mark_lock.part.0+0xee/0x1910 [ 1184.910152][ T4362] ? __lock_acquire+0x1666/0x56c0 [ 1184.915200][ T4362] ? __cleanup_sighand+0xb0/0xb0 [ 1184.920165][ T4362] ? find_held_lock+0x2d/0x110 [ 1184.924963][ T4362] ? create_io_worker+0x1e3/0x630 [ 1184.930010][ T4362] ? io_wqe_dec_running+0x220/0x220 [ 1184.935230][ T4362] create_io_thread+0xb6/0xf0 [ 1184.939925][ T4362] ? copy_init_mm+0x20/0x20 03:13:24 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x17, 0xfffffdef, 0x0, 0x0, 0x0) [ 1184.944445][ T4362] ? io_wqe_dec_running+0x220/0x220 [ 1184.949663][ T4362] ? lockdep_init_map_type+0x21a/0x7f0 [ 1184.955145][ T4362] create_io_worker+0x25c/0x630 [ 1184.960016][ T4362] io_wqe_enqueue+0x692/0xbc0 [ 1184.964715][ T4362] ? create_io_worker+0x630/0x630 [ 1184.969758][ T4362] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1184.976024][ T4362] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1184.981941][ T4362] io_queue_async_work+0x28c/0x5d0 [ 1184.987074][ T4362] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 03:13:25 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x18, 0xfffffdef, 0x0, 0x0, 0x0) [ 1184.993344][ T4362] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1184.998646][ T4362] io_submit_sqes+0x7fb4/0x9100 [ 1185.003514][ T4362] ? find_held_lock+0x2d/0x110 [ 1185.008297][ T4362] ? io_apoll_task_func+0x250/0x250 [ 1185.013512][ T4362] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1185.019245][ T4362] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1185.024810][ T4362] ? io_submit_sqes+0x9100/0x9100 [ 1185.029854][ T4362] ? find_held_lock+0x2d/0x110 [ 1185.034639][ T4362] ? __context_tracking_exit+0xb8/0xe0 [ 1185.040127][ T4362] ? lock_downgrade+0x6e0/0x6e0 [ 1185.044997][ T4362] ? lock_downgrade+0x6e0/0x6e0 [ 1185.049863][ T4362] ? syscall_enter_from_user_mode+0x21/0x70 [ 1185.055774][ T4362] do_syscall_64+0x35/0xb0 [ 1185.060311][ T4362] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1185.066227][ T4362] RIP: 0033:0x7f02e414b049 [ 1185.070660][ T4362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1185.090304][ T4362] RSP: 002b:00007f02e2ac0168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1185.098738][ T4362] RAX: ffffffffffffffda RBX: 00007f02e425df60 RCX: 00007f02e414b049 [ 1185.106717][ T4362] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 1185.114799][ T4362] RBP: 00007f02e2ac01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1185.122786][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.130773][ T4362] R13: 00007ffe7e8be3df R14: 00007f02e2ac0300 R15: 0000000000022000 [ 1185.138767][ T4362] [ 1185.150809][ T4317] UDC core: couldn't find an available UDC or it's busy: -16 [ 1185.193159][ T4317] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1185.523160][ T20] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1185.593336][ T3683] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1185.599529][ T3683] cdc_ncm 4-1:1.0: bind() failure [ 1185.607562][ T3683] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1185.614823][ T3683] cdc_ncm 4-1:1.1: bind() failure 03:13:25 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x51, {0x9, 0x21, 0xe772, 0x3, 0x1, {0x22, 0xb06}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0xff, 0xbd}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x0, 0x1, 0x20, 0xfd}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a9941545f804cf9a136ca69a6cbb4eb7"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0x100}, @wireless={0xb, 0x10, 0x1, 0xe, 0x61, 0x9, 0x6, 0x3, 0x4}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x2, 0x18, {0x18, 0x22, "31f3feabdf5a30ff8061e42f393b23042a2d5d508e2f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000400)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0xe, 0x90, 0xfb, 0x7, 0x5, 0xa6}, @ssp_cap={0x24, 0x10, 0xa, 0xfc, 0x6, 0x6, 0x1e, 0x1ff, [0xc00f, 0xc0, 0x30, 0xc0c0, 0xffc000, 0x30]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x20, 0x92, 0x1, 0x20}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0xbd, 0x6, "cc62f632", "3014ee0b"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x59, 0x60, 0x3, 0x1f, 0x2, 0x7d89}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x20, 0xf, 0xf7, "3b39f9685217e91cf69f08417d8fb4394904fa0e522033722b7bb1e86e4c6c92e6f44f550b83d17641bfd6d6685f832b15eb1a20f0ced57afc5363f33fad482bfa5e5667b68f0609edcf70220781f1625ad532b9458679f23118b91fc3effbc328e87399bc701e14ac58e35dca150baf3a0c7e574cda641911905659b0216820aa34734f61f4b47d0136cae00620faf91a3a9d3580e0cd8b0365435be13b6d85a627e1daa1d8c6345055c30670f6910ac32989db2e4df62251fd15e3ad724f579122e7e1ce1af2e2ec5572039b733b8a911b5dbc0ca358141fa6bb718bb0c81405459921e5d609f962cdfa4b95cdf5e8b9aef832c8291f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xdc}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x1, [0xff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "c6d0"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000840)={0x40, 0x13, 0x6, @local}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "e4d7"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:25 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x19, 0xfffffdef, 0x0, 0x0, 0x0) [ 1185.722384][ T3683] usb 4-1: USB disconnect, device number 31 [ 1185.884015][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.053142][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1186.062265][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.071017][ T20] usb 1-1: Product: syz [ 1186.075651][ T20] usb 1-1: Manufacturer: syz [ 1186.081471][ T20] usb 1-1: SerialNumber: syz [ 1186.143096][ T3683] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1186.324955][ T4366] UDC core: couldn't find an available UDC or it's busy: -16 [ 1186.331989][ T4420] UDC core: couldn't find an available UDC or it's busy: -16 [ 1186.332447][ T4366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1186.340108][ T4420] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1186.503186][ T3683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.615918][ T4421] UDC core: couldn't find an available UDC or it's busy: -16 [ 1186.623390][ T4421] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1186.633293][ T20] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1186.639620][ T20] cdc_ncm 1-1:1.0: bind() failure [ 1186.649162][ T20] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1186.656256][ T20] cdc_ncm 1-1:1.1: bind() failure [ 1186.673235][ T3683] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1186.682393][ T3683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.690792][ T3683] usb 4-1: Product: syz [ 1186.695934][ T3683] usb 4-1: Manufacturer: syz [ 1186.700730][ T3683] usb 4-1: SerialNumber: syz [ 1186.948357][ T4417] UDC core: couldn't find an available UDC or it's busy: -16 [ 1186.956046][ T4417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:13:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x85, {0x85, 0x16, "d1df4022dba15a526f2a47b5c690e4a05d48dee90e1074e11c712de288294497e2a0f7a791d7e3babbf86ccc266a4dbc8bb79af0c868a4b1476e95b42eb6ea4cd0718cdf06ff92824549fa5c88bd375a1f4c7b41b4614155f5f86c168a28a354dfcf70bbf030c6815285a9d8d7fdae8c8957496290827afd91ddd1e76c93b4230ead57"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f00000000c0)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x5, 0xf00, 0x2, [0xc0f0]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x7, 0x5, "9a32e7cf", "92c4ce6b"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xf, 0x40, 0x0, 0x81, 0x9}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x14, 0xde, "ccac9c250ad852421591631034ac2c7a7096c01e4814890ecf41749bdc2cca03a0ae533e9071cae0fd34a63fa561a2fbc2d6ec5922968472a25f71d0d2b79a375716fb79b9d840092c5788c6b95319f03e09e6fcdde99ffc0e6c66411741f93fba593abd3dc991aedf6d95489ae29f98ffce05ec184575d29ac9a9cab296dfe35ccddf6fac47977eba16c508cf74af4f967c506186566a131388273b0426795ceb27b9afc8f3621afcc67ea288b61086acd4260adab3abd99fa9fe5e1d5f37dabb0da73882d96e16b8ce7049a04b09a7b13d00260c4b4f52215d35ac1e66"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x0, 0x10, [0xf000]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1f}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'b/'}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "8dd0"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) (async) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000a40)={0x14, &(0x7f0000000940)={0x60, 0x23, 0xa1, {0xa1, 0x23, "e1abb47f8312bc967632967256761ca3cbcbf2419be2379ff30732f0c09ef8dc2907fcc628f5fe38f943d617a96a3bcf8b1eca21e702cde69f463e0f3c7b7ef82c512d037cdf84468bbb3466e5e2dc531d683a90a81285a4a506fc4603d342b06f16cd034a4ab60fe929e2f47c28146721215906593cdc785aa0ad296645d2d68cd92e279145da8a71b8c726eaf4741a458577de6d1c1cdc15cbcf3b8de58b"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000a80)={0x0, 0xe, 0x83, "6da22114356034b663365372e543e10afed37cbf1277a42669b600ab46a9197102aa873767c700e5e14728d14117725b32850121b8670f6e85676553a42b6365157c335aa196aa26cad8681ecfb36debc906183fa13b6bfbc77950c384009a0873e56f6eb39ab2e97d2dd00428e328539b228eb257de9279ac8b2be91121a62b978bc2"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x16}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x3}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 03:13:28 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:13:28 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140002006970766c616e300000000000000000000900010073797a30000000000900030073797a3000000000"], 0x40}}, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x3, 0x17}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) sendfile(r5, r6, &(0x7f00000001c0)=0xffffffffffffe242, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r7, &(0x7f0000002bc0)={0x2020}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x1cc, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "03cafb94a48c2bc00b79ef8846d1fc415ee462860ad5b8e0aa2a0ad4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe70d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8acc}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5bcd0aaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ca1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x44b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x48}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x2) 03:13:28 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 03:13:28 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1a, 0xfffffdef, 0x0, 0x0, 0x0) [ 1187.991502][ T3684] usb 1-1: USB disconnect, device number 61 [ 1188.042679][ T4429] FAULT_INJECTION: forcing a failure. [ 1188.042679][ T4429] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.071667][ T4429] CPU: 0 PID: 4429 Comm: syz-executor.4 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1188.082124][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.092191][ T4429] Call Trace: [ 1188.095486][ T4429] [ 1188.098412][ T4429] dump_stack_lvl+0xcd/0x134 [ 1188.103011][ T4429] should_fail.cold+0x5/0xa [ 1188.107517][ T4429] should_failslab+0x5/0x10 [ 1188.112112][ T4429] kmem_cache_alloc_node_trace+0x69/0x5b0 [ 1188.117841][ T4429] create_io_worker+0x108/0x630 [ 1188.122693][ T4429] io_wqe_enqueue+0x692/0xbc0 [ 1188.127382][ T4429] ? create_io_worker+0x630/0x630 [ 1188.132413][ T4429] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1188.138664][ T4429] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1188.144564][ T4429] io_queue_async_work+0x28c/0x5d0 [ 1188.149678][ T4429] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1188.155931][ T4429] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1188.161219][ T4429] io_submit_sqes+0x7fb4/0x9100 [ 1188.166066][ T4429] ? find_held_lock+0x2d/0x110 [ 1188.170827][ T4429] ? io_apoll_task_func+0x250/0x250 [ 1188.176028][ T4429] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1188.181751][ T4429] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1188.187299][ T4429] ? io_submit_sqes+0x9100/0x9100 [ 1188.192323][ T4429] ? find_held_lock+0x2d/0x110 [ 1188.197085][ T4429] ? __context_tracking_exit+0xb8/0xe0 [ 1188.202545][ T4429] ? lock_downgrade+0x6e0/0x6e0 [ 1188.207404][ T4429] ? lock_downgrade+0x6e0/0x6e0 [ 1188.212255][ T4429] ? syscall_enter_from_user_mode+0x21/0x70 [ 1188.218146][ T4429] do_syscall_64+0x35/0xb0 [ 1188.222574][ T4429] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1188.228467][ T4429] RIP: 0033:0x7f02e414b049 [ 1188.232895][ T4429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1188.252590][ T4429] RSP: 002b:00007f02e2ac0168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1188.261001][ T4429] RAX: ffffffffffffffda RBX: 00007f02e425df60 RCX: 00007f02e414b049 [ 1188.268967][ T4429] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 1188.276933][ T4429] RBP: 00007f02e2ac01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.284898][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:13:28 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:13:28 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1b, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:28 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140002006970766c616e300000000000000000000900010073797a30000000000900030073797a3000000000"], 0x40}}, 0x0) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x3, 0x17}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) (async) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) sendfile(r5, r6, &(0x7f00000001c0)=0xffffffffffffe242, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r7, &(0x7f0000002bc0)={0x2020}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x1cc, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "03cafb94a48c2bc00b79ef8846d1fc415ee462860ad5b8e0aa2a0ad4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe70d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8acc}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5bcd0aaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ca1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x44b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x48}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x2) [ 1188.292863][ T4429] R13: 00007ffe7e8be3df R14: 00007f02e2ac0300 R15: 0000000000022000 [ 1188.300846][ T4429] [ 1188.307683][ T3683] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1188.327885][ T3683] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1188.353276][ T3683] cdc_ncm 4-1:1.0: setting rx_max = 2048 03:13:28 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:13:28 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140002006970766c616e300000000000000000000900010073797a30000000000900030073797a3000000000"], 0x40}}, 0x0) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x3, 0x17}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) (async, rerun: 32) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) (rerun: 32) sendfile(r5, r6, &(0x7f00000001c0)=0xffffffffffffe242, 0x8000) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r7, &(0x7f0000002bc0)={0x2020}, 0x2020) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x1cc, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "03cafb94a48c2bc00b79ef8846d1fc415ee462860ad5b8e0aa2a0ad4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe70d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8acc}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5bcd0aaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde2d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ca1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x44b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x48}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x2) [ 1188.526515][ T3683] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1188.557763][ T3683] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1188.760691][ T3684] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1189.159121][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.263057][T20684] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1189.373307][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1189.382394][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.391169][ T3684] usb 1-1: Product: syz [ 1189.395910][ T3684] usb 1-1: Manufacturer: syz [ 1189.400529][ T3684] usb 1-1: SerialNumber: syz [ 1189.666916][ T4435] UDC core: couldn't find an available UDC or it's busy: -16 [ 1189.667534][ T4509] UDC core: couldn't find an available UDC or it's busy: -16 [ 1189.681742][ T4435] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1189.696359][ T4509] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1189.767245][ T3684] cdc_ncm 1-1:1.0: bind() failure [ 1189.785351][ T3684] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1189.792320][ T3684] cdc_ncm 1-1:1.1: bind() failure [ 1189.821668][ T3684] usb 1-1: USB disconnect, device number 62 03:13:30 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 03:13:30 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1c, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:30 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 03:13:30 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x690, 0x370, 0x0, 0xffffffff, 0x148, 0x148, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, &(0x7f00000001c0), {[{{@ipv6={@local, @loopback, [0xff000000, 0x0, 0xffffffff, 0x7fffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'macvlan0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0xc, 0x2, 0x4, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xfffffe8b], 0x200, 0x4, 0x1}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x5, @icmp_id=0x66}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'macsec0\x00', 'gre0\x00', {0xff}, {0xff}, 0x5e, 0x20, 0x4, 0x28}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x2, 0x0, [0x1ff, 0xfca, 0x2, 0x6, 0x5, 0x400, 0x101, 0x400, 0x8, 0x3, 0x2, 0x674, 0x9, 0x5, 0x0, 0x8], 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e24, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xd, @ipv6=@loopback, @ipv4=@broadcast, @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x7b7bb9fd, [0xd3ec, 0x1], 0x2, 0x23, 0x2f11e06a2e117ffe, [@empty, @initdev={0xfe, 0x88, '\x00', 0x7a, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @empty, @mcast2, @private0, @remote, @remote, @private2], 0x3}}, @common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv4=@rand_addr=0x64010101, @ipv4=@broadcast, @port=0x4e21, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) r2 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1a28, &(0x7f0000000a40)={0x0, 0xed22, 0x8, 0x3, 0x2e2, 0x0, r3}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) flistxattr(r7, &(0x7f0000000c00)=""/28, 0x1c) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$damon_schemes(0xffffffffffffffff, &(0x7f0000000b80)={0x2, 0xa71c, 0x20, 0x20, 0x800, 0x9, 0x659f}, 0x66) syz_io_uring_submit(r6, r5, &(0x7f0000000b40)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r0, &(0x7f0000000ac0)={0x2800, 0xa}, &(0x7f0000000b00)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r8}}, 0xffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x44080, 0x102) r10 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r10, &(0x7f0000002bc0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x5, 0xb, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @alu={0x7, 0x1, 0x5, 0x6, 0x0, 0x80}, @exit, @exit]}, &(0x7f00000010c0)='GPL\x00', 0x9, 0x23, &(0x7f0000001100)=""/35, 0x41100, 0x14, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x2f, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x6, 0x0, 0x800}, 0x10, 0x0, r0, 0x0, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10, r0, r0, r0, r1]}, 0x80) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x2, 0x0, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x283}}}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:30 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x20, 0x60, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "1f13b4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba7, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0xee, 0x27}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xc9, 0x3, 0x4, 0x40, 0xa0}, 0x69, &(0x7f00000002c0)={0x5, 0xf, 0x69, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x8, 0x401}, @generic={0x5d, 0x10, 0xb, "49ca82ddfcd23031b1eeeade2f46158db1797334bb1469f25977a2720b9621bd5007c379e949b1d02f5360c83048c4bc884b98e5086b5e49fb28808a580c3487c0249a870e97909f5dbd8300583973b4e81dd3f72781088fd711"}]}, 0x4, [{0x96, &(0x7f0000000340)=@string={0x96, 0x3, "ac544a2add680184ea179f1b529d323b3cfe12de62949c06f397a1967eba7a845cf5092ef619d8e2a67f3104d76dfad9ecaff7273f9a240b54f79d14f794a15bd3e5de2bcb5636b8a92a508788a2010ba599d8ca3d1641f6ec00380c4027a6a937e9f9d168c53fb292212a5482887f0dffb41e36156d6df2e76bd03227c967d62ffaef337136105f536a7f1369f6bf77973fbb96"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x407}}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "60eace1d7371238b0d87b96a748d91a82fcbe36f615f1021852fbde7635d08f0ce33b86147ab3d2a9f0603c1b47d58c101ba856f1ab43d27bdbd5422ecec417c7590be3fa7ab9a6ce3a48ef3d01e236e8939955f5af84dedd284cb06c3d28e243d6325919cf3f5be781e5d3df6160196d30de32ceb20feea9b0b374eaa280f1f90b3b0baaeb420e57b97c5b91fafd34b08d46ebc57c4410ae934037783a2c2cc981dc3ecf3a336f977c43594861e21c29940a1121a627cb71956c7b6bcfb8785fbe007566b0c96543f837bfafed0a423e3056a3f6c953239df41d563904892"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x805e, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:30 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x51, {0x9, 0x21, 0xe772, 0x3, 0x1, {0x22, 0xb06}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0xff, 0xbd}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x0, 0x1, 0x20, 0xfd}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a9941545f804cf9a136ca69a6cbb4eb7"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0x100}, @wireless={0xb, 0x10, 0x1, 0xe, 0x61, 0x9, 0x6, 0x3, 0x4}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x2, 0x18, {0x18, 0x22, "31f3feabdf5a30ff8061e42f393b23042a2d5d508e2f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000400)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0xe, 0x90, 0xfb, 0x7, 0x5, 0xa6}, @ssp_cap={0x24, 0x10, 0xa, 0xfc, 0x6, 0x6, 0x1e, 0x1ff, [0xc00f, 0xc0, 0x30, 0xc0c0, 0xffc000, 0x30]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x20, 0x92, 0x1, 0x20}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0xbd, 0x6, "cc62f632", "3014ee0b"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x59, 0x60, 0x3, 0x1f, 0x2, 0x7d89}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x20, 0xf, 0xf7, "3b39f9685217e91cf69f08417d8fb4394904fa0e522033722b7bb1e86e4c6c92e6f44f550b83d17641bfd6d6685f832b15eb1a20f0ced57afc5363f33fad482bfa5e5667b68f0609edcf70220781f1625ad532b9458679f23118b91fc3effbc328e87399bc701e14ac58e35dca150baf3a0c7e574cda641911905659b0216820aa34734f61f4b47d0136cae00620faf91a3a9d3580e0cd8b0365435be13b6d85a627e1daa1d8c6345055c30670f6910ac32989db2e4df62251fd15e3ad724f579122e7e1ce1af2e2ec5572039b733b8a911b5dbc0ca358141fa6bb718bb0c81405459921e5d609f962cdfa4b95cdf5e8b9aef832c8291f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xdc}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x1, [0xff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "c6d0"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000840)={0x40, 0x13, 0x6, @local}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "e4d7"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x51, {0x9, 0x21, 0xe772, 0x3, 0x1, {0x22, 0xb06}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0xff, 0xbd}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x0, 0x1, 0x20, 0xfd}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a9941545f804cf9a136ca69a6cbb4eb7"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0x100}, @wireless={0xb, 0x10, 0x1, 0xe, 0x61, 0x9, 0x6, 0x3, 0x4}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}]}) (async) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x2, 0x18, {0x18, 0x22, "31f3feabdf5a30ff8061e42f393b23042a2d5d508e2f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000400)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0xe, 0x90, 0xfb, 0x7, 0x5, 0xa6}, @ssp_cap={0x24, 0x10, 0xa, 0xfc, 0x6, 0x6, 0x1e, 0x1ff, [0xc00f, 0xc0, 0x30, 0xc0c0, 0xffc000, 0x30]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x20, 0x92, 0x1, 0x20}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0xbd, 0x6, "cc62f632", "3014ee0b"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x59, 0x60, 0x3, 0x1f, 0x2, 0x7d89}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x20, 0xf, 0xf7, "3b39f9685217e91cf69f08417d8fb4394904fa0e522033722b7bb1e86e4c6c92e6f44f550b83d17641bfd6d6685f832b15eb1a20f0ced57afc5363f33fad482bfa5e5667b68f0609edcf70220781f1625ad532b9458679f23118b91fc3effbc328e87399bc701e14ac58e35dca150baf3a0c7e574cda641911905659b0216820aa34734f61f4b47d0136cae00620faf91a3a9d3580e0cd8b0365435be13b6d85a627e1daa1d8c6345055c30670f6910ac32989db2e4df62251fd15e3ad724f579122e7e1ce1af2e2ec5572039b733b8a911b5dbc0ca358141fa6bb718bb0c81405459921e5d609f962cdfa4b95cdf5e8b9aef832c8291f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xdc}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x1, [0xff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "c6d0"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000840)={0x40, 0x13, 0x6, @local}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "e4d7"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xf8}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) [ 1190.333828][ T1142] usb 4-1: USB disconnect, device number 32 [ 1190.363127][ T1142] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 1190.401869][ T25] audit: type=1804 audit(1646709210.430:334): pid=4536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2964689215/syzkaller.QQmusj/989/file0" dev="sda1" ino=1171 res=1 errno=0 [ 1190.405895][ T4541] FAULT_INJECTION: forcing a failure. [ 1190.405895][ T4541] name failslab, interval 1, probability 0, space 0, times 0 03:13:30 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1d, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:30 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x690, 0x370, 0x0, 0xffffffff, 0x148, 0x148, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, &(0x7f00000001c0), {[{{@ipv6={@local, @loopback, [0xff000000, 0x0, 0xffffffff, 0x7fffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'macvlan0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0xc, 0x2, 0x4, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xfffffe8b], 0x200, 0x4, 0x1}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x5, @icmp_id=0x66}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'macsec0\x00', 'gre0\x00', {0xff}, {0xff}, 0x5e, 0x20, 0x4, 0x28}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x2, 0x0, [0x1ff, 0xfca, 0x2, 0x6, 0x5, 0x400, 0x101, 0x400, 0x8, 0x3, 0x2, 0x674, 0x9, 0x5, 0x0, 0x8], 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e24, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xd, @ipv6=@loopback, @ipv4=@broadcast, @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x7b7bb9fd, [0xd3ec, 0x1], 0x2, 0x23, 0x2f11e06a2e117ffe, [@empty, @initdev={0xfe, 0x88, '\x00', 0x7a, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @empty, @mcast2, @private0, @remote, @remote, @private2], 0x3}}, @common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv4=@rand_addr=0x64010101, @ipv4=@broadcast, @port=0x4e21, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) (async, rerun: 32) r2 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1a28, &(0x7f0000000a40)={0x0, 0xed22, 0x8, 0x3, 0x2e2, 0x0, r3}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) flistxattr(r7, &(0x7f0000000c00)=""/28, 0x1c) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$damon_schemes(0xffffffffffffffff, &(0x7f0000000b80)={0x2, 0xa71c, 0x20, 0x20, 0x800, 0x9, 0x659f}, 0x66) (async) syz_io_uring_submit(r6, r5, &(0x7f0000000b40)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r0, &(0x7f0000000ac0)={0x2800, 0xa}, &(0x7f0000000b00)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r8}}, 0xffffffff) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x44080, 0x102) (async) r10 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r10, &(0x7f0000002bc0)={0x2020}, 0x2020) (async) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x5, 0xb, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @alu={0x7, 0x1, 0x5, 0x6, 0x0, 0x80}, @exit, @exit]}, &(0x7f00000010c0)='GPL\x00', 0x9, 0x23, &(0x7f0000001100)=""/35, 0x41100, 0x14, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x2f, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x6, 0x0, 0x800}, 0x10, 0x0, r0, 0x0, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10, r0, r0, r0, r1]}, 0x80) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x2, 0x0, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x283}}}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) [ 1190.454109][ T4543] FAULT_INJECTION: forcing a failure. [ 1190.454109][ T4543] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.503800][ T4541] CPU: 0 PID: 4541 Comm: syz-executor.4 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1190.514255][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1190.514275][ T4541] Call Trace: [ 1190.514283][ T4541] [ 1190.514291][ T4541] dump_stack_lvl+0xcd/0x134 [ 1190.514325][ T4541] should_fail.cold+0x5/0xa [ 1190.514349][ T4541] should_failslab+0x5/0x10 [ 1190.544572][ T4541] kmem_cache_alloc_node+0x68/0x590 [ 1190.549801][ T4541] alloc_vmap_area+0x164/0x1e70 [ 1190.554676][ T4541] ? free_vmap_area+0x1ac0/0x1ac0 [ 1190.559717][ T4541] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1190.565280][ T4541] ? kmem_cache_alloc_node_trace+0x3e5/0x5b0 [ 1190.571281][ T4541] __get_vm_area_node.constprop.0+0x128/0x380 [ 1190.577372][ T4541] __vmalloc_node_range+0x150/0x1060 [ 1190.582768][ T4541] ? create_io_thread+0xb6/0xf0 [ 1190.587628][ T4541] ? create_io_thread+0xb6/0xf0 [ 1190.592482][ T4541] ? lock_downgrade+0x6e0/0x6e0 [ 1190.597349][ T4541] ? vfree_atomic+0xe0/0xe0 [ 1190.601857][ T4541] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1190.607412][ T4541] ? kmem_cache_alloc_node+0x3ce/0x590 [ 1190.612886][ T4541] ? create_io_thread+0xb6/0xf0 [ 1190.617737][ T4541] copy_process+0x926/0x7250 [ 1190.622339][ T4541] ? create_io_thread+0xb6/0xf0 [ 1190.627186][ T4541] ? kasan_save_stack+0x1e/0x40 [ 1190.632038][ T4541] ? __kasan_kmalloc+0xa6/0xd0 [ 1190.636804][ T4541] ? kmem_cache_alloc_node_trace+0x208/0x5b0 [ 1190.643375][ T4541] ? create_io_worker+0x108/0x630 [ 1190.648419][ T4541] ? io_wqe_enqueue+0x692/0xbc0 [ 1190.653285][ T4541] ? io_queue_async_work+0x28c/0x5d0 [ 1190.658585][ T4541] ? io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1190.664053][ T4541] ? io_submit_sqes+0x7fb4/0x9100 [ 1190.669091][ T4541] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1190.674818][ T4541] ? do_syscall_64+0x35/0xb0 [ 1190.679454][ T4541] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1190.685528][ T4541] ? mark_lock.part.0+0xee/0x1910 [ 1190.690585][ T4541] ? __lock_acquire+0x1666/0x56c0 [ 1190.695620][ T4541] ? __cleanup_sighand+0xb0/0xb0 [ 1190.700570][ T4541] ? find_held_lock+0x2d/0x110 [ 1190.705347][ T4541] ? create_io_worker+0x1e3/0x630 [ 1190.710384][ T4541] ? io_wqe_dec_running+0x220/0x220 [ 1190.715589][ T4541] create_io_thread+0xb6/0xf0 [ 1190.720276][ T4541] ? copy_init_mm+0x20/0x20 [ 1190.724793][ T4541] ? io_wqe_dec_running+0x220/0x220 [ 1190.730006][ T4541] ? lockdep_init_map_type+0x21a/0x7f0 [ 1190.735488][ T4541] create_io_worker+0x25c/0x630 [ 1190.740364][ T4541] io_wqe_enqueue+0x692/0xbc0 [ 1190.745057][ T4541] ? create_io_worker+0x630/0x630 [ 1190.750095][ T4541] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1190.756377][ T4541] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1190.762307][ T4541] io_queue_async_work+0x28c/0x5d0 [ 1190.767443][ T4541] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1190.773837][ T4541] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1190.779140][ T4541] io_submit_sqes+0x7fb4/0x9100 [ 1190.784022][ T4541] ? find_held_lock+0x2d/0x110 [ 1190.788802][ T4541] ? io_apoll_task_func+0x250/0x250 [ 1190.794019][ T4541] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1190.799759][ T4541] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1190.805312][ T4541] ? io_submit_sqes+0x9100/0x9100 [ 1190.810341][ T4541] ? find_held_lock+0x2d/0x110 [ 1190.815115][ T4541] ? __context_tracking_exit+0xb8/0xe0 [ 1190.820587][ T4541] ? lock_downgrade+0x6e0/0x6e0 [ 1190.826067][ T4541] ? lock_downgrade+0x6e0/0x6e0 [ 1190.830948][ T4541] ? syscall_enter_from_user_mode+0x21/0x70 [ 1190.836858][ T4541] do_syscall_64+0x35/0xb0 [ 1190.841383][ T4541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1190.847290][ T4541] RIP: 0033:0x7f02e414b049 [ 1190.851712][ T4541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1190.871442][ T4541] RSP: 002b:00007f02e2ac0168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1190.879896][ T4541] RAX: ffffffffffffffda RBX: 00007f02e425df60 RCX: 00007f02e414b049 [ 1190.887878][ T4541] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 1190.895869][ T4541] RBP: 00007f02e2ac01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.903858][ T4541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.911969][ T4541] R13: 00007ffe7e8be3df R14: 00007f02e2ac0300 R15: 0000000000022000 [ 1190.919962][ T4541] [ 1190.923070][ T4543] CPU: 1 PID: 4543 Comm: syz-executor.5 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1190.933508][ T4543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1190.943570][ T4543] Call Trace: [ 1190.946845][ T4543] [ 1190.949767][ T4543] dump_stack_lvl+0xcd/0x134 [ 1190.954361][ T4543] should_fail.cold+0x5/0xa [ 1190.958862][ T4543] should_failslab+0x5/0x10 [ 1190.963363][ T4543] kmem_cache_alloc_bulk+0x45/0x480 [ 1190.968584][ T4543] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1190.974828][ T4543] ? percpu_counter_add_batch+0xbd/0x180 [ 1190.980464][ T4543] io_submit_sqes.cold+0x20b/0x43d [ 1190.985582][ T4543] ? __do_sys_io_uring_enter+0xfcf/0x1fc0 [ 1190.991299][ T4543] ? find_held_lock+0x2d/0x110 [ 1190.996065][ T4543] ? io_apoll_task_func+0x250/0x250 [ 1191.001264][ T4543] ? __do_sys_io_uring_enter+0x361/0x1fc0 [ 1191.006980][ T4543] ? lock_downgrade+0x6e0/0x6e0 [ 1191.011829][ T4543] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1191.017546][ T4543] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1191.023089][ T4543] ? io_submit_sqes+0x9100/0x9100 [ 1191.028106][ T4543] ? find_held_lock+0x2d/0x110 [ 1191.032868][ T4543] ? __context_tracking_exit+0xb8/0xe0 [ 1191.038329][ T4543] ? lock_downgrade+0x6e0/0x6e0 [ 1191.043181][ T4543] ? lock_downgrade+0x6e0/0x6e0 [ 1191.048034][ T4543] ? syscall_enter_from_user_mode+0x21/0x70 [ 1191.053925][ T4543] do_syscall_64+0x35/0xb0 [ 1191.058344][ T4543] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1191.064240][ T4543] RIP: 0033:0x7f71638ee049 [ 1191.068665][ T4543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1191.088272][ T4543] RSP: 002b:00007f7162263168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1191.096692][ T4543] RAX: ffffffffffffffda RBX: 00007f7163a00f60 RCX: 00007f71638ee049 [ 1191.104659][ T4543] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 1191.112624][ T4543] RBP: 00007f71622631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.120588][ T4543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.128550][ T4543] R13: 00007ffece425baf R14: 00007f7162263300 R15: 0000000000022000 [ 1191.136529][ T4543] [ 1191.146293][ T3684] usb 1-1: new high-speed USB device number 63 using dummy_hcd 03:13:31 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1e, 0xfffffdef, 0x0, 0x0, 0x0) [ 1191.218512][ T4541] syz-executor.4: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1191.245368][ T4541] CPU: 0 PID: 4541 Comm: syz-executor.4 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1191.255823][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1191.265900][ T4541] Call Trace: [ 1191.269199][ T4541] [ 1191.272148][ T4541] dump_stack_lvl+0xcd/0x134 [ 1191.276765][ T4541] warn_alloc.cold+0x9b/0x189 [ 1191.281466][ T4541] ? zone_watermark_ok_safe+0x290/0x290 [ 1191.287043][ T4541] ? __get_vm_area_node.constprop.0+0x2fb/0x380 [ 1191.293328][ T4541] ? lockdep_hardirqs_on+0x79/0x100 [ 1191.298547][ T4541] ? __get_vm_area_node.constprop.0+0x292/0x380 [ 1191.304818][ T4541] ? __vmalloc_node_range+0x16d/0x1060 [ 1191.310329][ T4541] __vmalloc_node_range+0x196/0x1060 [ 1191.315640][ T4541] ? create_io_thread+0xb6/0xf0 [ 1191.320507][ T4541] ? lock_downgrade+0x6e0/0x6e0 [ 1191.325382][ T4541] ? vfree_atomic+0xe0/0xe0 [ 1191.329912][ T4541] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1191.335486][ T4541] ? kmem_cache_alloc_node+0x3ce/0x590 [ 1191.340967][ T4541] ? create_io_thread+0xb6/0xf0 [ 1191.345838][ T4541] copy_process+0x926/0x7250 [ 1191.350446][ T4541] ? create_io_thread+0xb6/0xf0 [ 1191.355314][ T4541] ? kasan_save_stack+0x1e/0x40 [ 1191.360186][ T4541] ? __kasan_kmalloc+0xa6/0xd0 [ 1191.364970][ T4541] ? kmem_cache_alloc_node_trace+0x208/0x5b0 [ 1191.370973][ T4541] ? create_io_worker+0x108/0x630 [ 1191.376049][ T4541] ? io_wqe_enqueue+0x692/0xbc0 [ 1191.380932][ T4541] ? io_queue_async_work+0x28c/0x5d0 [ 1191.386241][ T4541] ? io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1191.391719][ T4541] ? io_submit_sqes+0x7fb4/0x9100 [ 1191.396764][ T4541] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1191.402505][ T4541] ? do_syscall_64+0x35/0xb0 [ 1191.407130][ T4541] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1191.413220][ T4541] ? mark_lock.part.0+0xee/0x1910 03:13:31 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x21, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:31 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x690, 0x370, 0x0, 0xffffffff, 0x148, 0x148, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, &(0x7f00000001c0), {[{{@ipv6={@local, @loopback, [0xff000000, 0x0, 0xffffffff, 0x7fffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'macvlan0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0xc, 0x2, 0x4, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xfffffe8b], 0x200, 0x4, 0x1}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x5, @icmp_id=0x66}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'macsec0\x00', 'gre0\x00', {0xff}, {0xff}, 0x5e, 0x20, 0x4, 0x28}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x2, 0x0, [0x1ff, 0xfca, 0x2, 0x6, 0x5, 0x400, 0x101, 0x400, 0x8, 0x3, 0x2, 0x674, 0x9, 0x5, 0x0, 0x8], 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e24, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xd, @ipv6=@loopback, @ipv4=@broadcast, @icmp_id=0x66, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x7b7bb9fd, [0xd3ec, 0x1], 0x2, 0x23, 0x2f11e06a2e117ffe, [@empty, @initdev={0xfe, 0x88, '\x00', 0x7a, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @empty, @mcast2, @private0, @remote, @remote, @private2], 0x3}}, @common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv4=@rand_addr=0x64010101, @ipv4=@broadcast, @port=0x4e21, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) (async) r2 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r3 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1a28, &(0x7f0000000a40)={0x0, 0xed22, 0x8, 0x3, 0x2e2, 0x0, r3}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000002c0)) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) (async) flistxattr(r7, &(0x7f0000000c00)=""/28, 0x1c) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) write$damon_schemes(0xffffffffffffffff, &(0x7f0000000b80)={0x2, 0xa71c, 0x20, 0x20, 0x800, 0x9, 0x659f}, 0x66) syz_io_uring_submit(r6, r5, &(0x7f0000000b40)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r0, &(0x7f0000000ac0)={0x2800, 0xa}, &(0x7f0000000b00)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r8}}, 0xffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x44080, 0x102) r10 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r10, &(0x7f0000002bc0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x5, 0xb, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @alu={0x7, 0x1, 0x5, 0x6, 0x0, 0x80}, @exit, @exit]}, &(0x7f00000010c0)='GPL\x00', 0x9, 0x23, &(0x7f0000001100)=""/35, 0x41100, 0x14, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x2f, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x4, 0x6, 0x0, 0x800}, 0x10, 0x0, r0, 0x0, &(0x7f0000001680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10, r0, r0, r0, r1]}, 0x80) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x2, 0x0, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x283}}}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1191.418290][ T4541] ? __lock_acquire+0x1666/0x56c0 [ 1191.423338][ T4541] ? __cleanup_sighand+0xb0/0xb0 [ 1191.428298][ T4541] ? find_held_lock+0x2d/0x110 [ 1191.433095][ T4541] ? create_io_worker+0x1e3/0x630 [ 1191.438143][ T4541] ? io_wqe_dec_running+0x220/0x220 [ 1191.443799][ T4541] create_io_thread+0xb6/0xf0 [ 1191.448497][ T4541] ? copy_init_mm+0x20/0x20 [ 1191.453019][ T4541] ? io_wqe_dec_running+0x220/0x220 [ 1191.458243][ T4541] ? lockdep_init_map_type+0x21a/0x7f0 [ 1191.463730][ T4541] create_io_worker+0x25c/0x630 03:13:31 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x22, 0xfffffdef, 0x0, 0x0, 0x0) [ 1191.468698][ T4541] io_wqe_enqueue+0x692/0xbc0 [ 1191.473403][ T4541] ? create_io_worker+0x630/0x630 [ 1191.478447][ T4541] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1191.484714][ T4541] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1191.490638][ T4541] io_queue_async_work+0x28c/0x5d0 [ 1191.495770][ T4541] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1191.502042][ T4541] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1191.507354][ T4541] io_submit_sqes+0x7fb4/0x9100 [ 1191.512232][ T4541] ? find_held_lock+0x2d/0x110 [ 1191.517018][ T4541] ? io_apoll_task_func+0x250/0x250 [ 1191.522247][ T4541] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1191.528075][ T4541] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1191.533647][ T4541] ? io_submit_sqes+0x9100/0x9100 [ 1191.538695][ T4541] ? find_held_lock+0x2d/0x110 [ 1191.543479][ T4541] ? __context_tracking_exit+0xb8/0xe0 [ 1191.548960][ T4541] ? lock_downgrade+0x6e0/0x6e0 [ 1191.553832][ T4541] ? lock_downgrade+0x6e0/0x6e0 [ 1191.558709][ T4541] ? syscall_enter_from_user_mode+0x21/0x70 [ 1191.564627][ T4541] do_syscall_64+0x35/0xb0 [ 1191.569068][ T4541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1191.574984][ T4541] RIP: 0033:0x7f02e414b049 [ 1191.579409][ T4541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1191.599067][ T4541] RSP: 002b:00007f02e2ac0168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1191.607506][ T4541] RAX: ffffffffffffffda RBX: 00007f02e425df60 RCX: 00007f02e414b049 03:13:31 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:31 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x23, 0xfffffdef, 0x0, 0x0, 0x0) [ 1191.615499][ T4541] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 1191.623577][ T4541] RBP: 00007f02e2ac01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.631579][ T4541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.639566][ T4541] R13: 00007ffe7e8be3df R14: 00007f02e2ac0300 R15: 0000000000022000 [ 1191.647560][ T4541] [ 1191.663947][ T4541] Mem-Info: [ 1191.686438][ T4541] active_anon:2497 inactive_anon:136559 isolated_anon:0 [ 1191.686438][ T4541] active_file:4743 inactive_file:7549 isolated_file:0 [ 1191.686438][ T4541] unevictable:768 dirty:36 writeback:0 [ 1191.686438][ T4541] slab_reclaimable:20857 slab_unreclaimable:114785 [ 1191.686438][ T4541] mapped:27838 shmem:3989 pagetables:913 bounce:0 [ 1191.686438][ T4541] kernel_misc_reclaimable:0 [ 1191.686438][ T4541] free:1307508 free_pcp:10075 free_cma:0 [ 1191.751730][ T4541] Node 0 active_anon:9980kB inactive_anon:545304kB active_file:18900kB inactive_file:30196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111452kB dirty:140kB writeback:0kB shmem:13480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB kernel_stack:11064kB pagetables:3744kB all_unreclaimable? no [ 1191.787866][ T4541] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 1191.859856][ T4541] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1191.896869][ T4541] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1191.902767][ T4541] Node 0 DMA32 free:1275348kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:9980kB inactive_anon:545404kB active_file:18900kB inactive_file:30196kB unevictable:1536kB writepending:140kB present:3129332kB managed:2716700kB mlocked:0kB bounce:0kB free_pcp:39172kB local_pcp:18720kB free_cma:0kB [ 1191.944688][ T4541] lowmem_reserve[]: 0 0 0 0 0 [ 1191.949551][ T4541] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1191.980085][ T4541] lowmem_reserve[]: 0 0 0 0 0 [ 1191.985356][ T4541] Node 1 Normal free:3948188kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1192.015932][ T4541] lowmem_reserve[]: 0 0 0 0 0 [ 1192.022093][ T4541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1192.043214][ T4541] Node 0 DMA32: 2517*4kB (UME) 364*8kB (UME) 1470*16kB [ 1192.043280][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.050462][ T4541] (UME) 552*32kB (UME) 51*64kB (UME) 13*128kB (UM) 5*256kB (UM) 43*512kB (M) 27*1024kB (UM) 14*2048kB (UME) 278*4096kB (UM) = 1277396kB [ 1192.095121][ T4541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1192.107010][ T4541] Node 1 Normal: 7*4kB (UME) 186*8kB (U) 130*16kB (UE) 84*32kB (UE) 51*64kB (UME) 31*128kB (UM) 8*256kB (UE) 11*512kB (UE) 1*1024kB (U) 3*2048kB (UM) 957*4096kB (M) = 3948236kB [ 1192.130440][ T4541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1192.146996][ T4541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1192.160563][ T4541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1192.163052][ T1142] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1192.173894][ T4541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1192.195601][ T4541] 16281 total pagecache pages [ 1192.200399][ T4541] 0 pages in swap cache [ 1192.210982][ T4541] Swap cache stats: add 0, delete 0, find 0/0 03:13:32 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:32 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r5, &(0x7f0000002bc0)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r6, 0x400, 0x8, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa298}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x68}}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d8e, &(0x7f00000001c0)={0x0, 0xcbeb, 0x4, 0x1, 0x287, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000002c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x3) [ 1192.224971][ T4541] Free swap = 0kB [ 1192.229054][ T4541] Total swap = 0kB [ 1192.233743][ T4541] 2097051 pages RAM [ 1192.237723][ T4541] 0 pages HighMem/MovableOnly [ 1192.242542][ T4541] 384531 pages reserved [ 1192.248187][ T4541] 0 pages cma reserved [ 1192.276383][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1192.328366][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.363072][ T3684] usb 1-1: Product: syz [ 1192.367323][ T3684] usb 1-1: Manufacturer: syz [ 1192.371928][ T3684] usb 1-1: SerialNumber: syz [ 1192.543302][ T1142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.649804][ T4538] UDC core: couldn't find an available UDC or it's busy: -16 [ 1192.659831][ T4538] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1192.713201][ T1142] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1192.722282][ T1142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.741722][ T1142] usb 4-1: Product: syz [ 1192.746293][ T1142] usb 4-1: Manufacturer: syz [ 1192.750908][ T1142] usb 4-1: SerialNumber: syz [ 1193.011442][ T4542] UDC core: couldn't find an available UDC or it's busy: -16 [ 1193.026757][ T4542] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1193.933254][ T3684] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1193.939813][ T3684] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1193.947621][ T3684] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1194.153237][ T3684] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1194.163936][ T3684] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1194.291638][ T1142] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1194.298640][ T1142] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1194.310051][ T1142] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1194.503467][ T1142] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1194.524196][ T1142] cdc_ncm 4-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1194.796238][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1195.063018][ T4686] UDC core: couldn't find an available UDC or it's busy: -16 [ 1195.075404][ T4686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1195.101713][ T32] usb 4-1: USB disconnect, device number 33 [ 1195.122744][ T32] cdc_ncm 4-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:13:35 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x20, 0x60, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "1f13b4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba7, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0xee, 0x27}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xc9, 0x3, 0x4, 0x40, 0xa0}, 0x69, &(0x7f00000002c0)={0x5, 0xf, 0x69, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x8, 0x401}, @generic={0x5d, 0x10, 0xb, "49ca82ddfcd23031b1eeeade2f46158db1797334bb1469f25977a2720b9621bd5007c379e949b1d02f5360c83048c4bc884b98e5086b5e49fb28808a580c3487c0249a870e97909f5dbd8300583973b4e81dd3f72781088fd711"}]}, 0x4, [{0x96, &(0x7f0000000340)=@string={0x96, 0x3, "ac544a2add680184ea179f1b529d323b3cfe12de62949c06f397a1967eba7a845cf5092ef619d8e2a67f3104d76dfad9ecaff7273f9a240b54f79d14f794a15bd3e5de2bcb5636b8a92a508788a2010ba599d8ca3d1641f6ec00380c4027a6a937e9f9d168c53fb292212a5482887f0dffb41e36156d6df2e76bd03227c967d62ffaef337136105f536a7f1369f6bf77973fbb96"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x407}}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "60eace1d7371238b0d87b96a748d91a82fcbe36f615f1021852fbde7635d08f0ce33b86147ab3d2a9f0603c1b47d58c101ba856f1ab43d27bdbd5422ecec417c7590be3fa7ab9a6ce3a48ef3d01e236e8939955f5af84dedd284cb06c3d28e243d6325919cf3f5be781e5d3df6160196d30de32ceb20feea9b0b374eaa280f1f90b3b0baaeb420e57b97c5b91fafd34b08d46ebc57c4410ae934037783a2c2cc981dc3ecf3a336f977c43594861e21c29940a1121a627cb71956c7b6bcfb8785fbe007566b0c96543f837bfafed0a423e3056a3f6c953239df41d563904892"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x805e, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x20, 0x60, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "1f13b4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba7, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0xee, 0x27}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xc9, 0x3, 0x4, 0x40, 0xa0}, 0x69, &(0x7f00000002c0)={0x5, 0xf, 0x69, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x8, 0x401}, @generic={0x5d, 0x10, 0xb, "49ca82ddfcd23031b1eeeade2f46158db1797334bb1469f25977a2720b9621bd5007c379e949b1d02f5360c83048c4bc884b98e5086b5e49fb28808a580c3487c0249a870e97909f5dbd8300583973b4e81dd3f72781088fd711"}]}, 0x4, [{0x96, &(0x7f0000000340)=@string={0x96, 0x3, "ac544a2add680184ea179f1b529d323b3cfe12de62949c06f397a1967eba7a845cf5092ef619d8e2a67f3104d76dfad9ecaff7273f9a240b54f79d14f794a15bd3e5de2bcb5636b8a92a508788a2010ba599d8ca3d1641f6ec00380c4027a6a937e9f9d168c53fb292212a5482887f0dffb41e36156d6df2e76bd03227c967d62ffaef337136105f536a7f1369f6bf77973fbb96"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x407}}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "60eace1d7371238b0d87b96a748d91a82fcbe36f615f1021852fbde7635d08f0ce33b86147ab3d2a9f0603c1b47d58c101ba856f1ab43d27bdbd5422ecec417c7590be3fa7ab9a6ce3a48ef3d01e236e8939955f5af84dedd284cb06c3d28e243d6325919cf3f5be781e5d3df6160196d30de32ceb20feea9b0b374eaa280f1f90b3b0baaeb420e57b97c5b91fafd34b08d46ebc57c4410ae934037783a2c2cc981dc3ecf3a336f977c43594861e21c29940a1121a627cb71956c7b6bcfb8785fbe007566b0c96543f837bfafed0a423e3056a3f6c953239df41d563904892"}}]}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x805e, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:13:35 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x24, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:35 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:35 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:35 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') read$FUSE(r5, &(0x7f0000002bc0)={0x2020}, 0x2020) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r6, 0x400, 0x8, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa298}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x68}}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4d8e, &(0x7f00000001c0)={0x0, 0xcbeb, 0x4, 0x1, 0x287, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000002c0)=0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x3) 03:13:35 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x51, {0x9, 0x21, 0xe772, 0x3, 0x1, {0x22, 0xb06}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0xff, 0xbd}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x0, 0x1, 0x20, 0xfd}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a9941545f804cf9a136ca69a6cbb4eb7"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0x100}, @wireless={0xb, 0x10, 0x1, 0xe, 0x61, 0x9, 0x6, 0x3, 0x4}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x2, 0x18, {0x18, 0x22, "31f3feabdf5a30ff8061e42f393b23042a2d5d508e2f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000400)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0xe, 0x90, 0xfb, 0x7, 0x5, 0xa6}, @ssp_cap={0x24, 0x10, 0xa, 0xfc, 0x6, 0x6, 0x1e, 0x1ff, [0xc00f, 0xc0, 0x30, 0xc0c0, 0xffc000, 0x30]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x20, 0x92, 0x1, 0x20}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0xbd, 0x6, "cc62f632", "3014ee0b"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x59, 0x60, 0x3, 0x1f, 0x2, 0x7d89}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x20, 0xf, 0xf7, "3b39f9685217e91cf69f08417d8fb4394904fa0e522033722b7bb1e86e4c6c92e6f44f550b83d17641bfd6d6685f832b15eb1a20f0ced57afc5363f33fad482bfa5e5667b68f0609edcf70220781f1625ad532b9458679f23118b91fc3effbc328e87399bc701e14ac58e35dca150baf3a0c7e574cda641911905659b0216820aa34734f61f4b47d0136cae00620faf91a3a9d3580e0cd8b0365435be13b6d85a627e1daa1d8c6345055c30670f6910ac32989db2e4df62251fd15e3ad724f579122e7e1ce1af2e2ec5572039b733b8a911b5dbc0ca358141fa6bb718bb0c81405459921e5d609f962cdfa4b95cdf5e8b9aef832c8291f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xdc}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x1, [0xff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "c6d0"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000840)={0x40, 0x13, 0x6, @local}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "e4d7"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xf8}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1195.373697][ T3653] usb 1-1: USB disconnect, device number 63 [ 1195.403052][ T3653] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:13:35 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x2, 0x0, 0x0, 0x0) 03:13:35 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x25, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:35 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x2, 0x0, 0x0, 0x0) 03:13:35 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f00000017c0)='net/dev_mcast\x00') (rerun: 64) read$FUSE(r5, &(0x7f0000002bc0)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r6, 0x400, 0x8, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa298}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x68}}, 0x40000) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4d8e, &(0x7f00000001c0)={0x0, 0xcbeb, 0x4, 0x1, 0x287, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000002c0)=0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x3) 03:13:35 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x7, 0x0, 0x0, 0x0) 03:13:35 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x7, 0x0, 0x0, 0x0) [ 1195.824025][ T32] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1195.921869][ T3653] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1196.223282][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.303327][ T3653] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.443420][ T32] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1196.460435][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.469044][ T32] usb 4-1: Product: syz [ 1196.473429][ T3653] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1196.473445][ T32] usb 4-1: Manufacturer: syz [ 1196.473467][ T32] usb 4-1: SerialNumber: syz [ 1196.482471][ T3653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.482498][ T3653] usb 1-1: Product: syz [ 1196.482517][ T3653] usb 1-1: Manufacturer: syz [ 1196.482535][ T3653] usb 1-1: SerialNumber: syz [ 1196.739143][ T4719] UDC core: couldn't find an available UDC or it's busy: -16 [ 1196.750386][ T4719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1196.758696][ T4726] UDC core: couldn't find an available UDC or it's busy: -16 [ 1196.773266][ T4726] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1196.844645][ T32] cdc_ncm 4-1:1.0: bind() failure [ 1196.860418][ T32] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1196.876173][ T32] cdc_ncm 4-1:1.1: bind() failure [ 1196.896782][ T32] usb 4-1: USB disconnect, device number 34 [ 1198.013269][ T3653] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1198.019864][ T3653] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1198.027892][ T3653] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1198.233249][ T3653] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1198.244006][ T3653] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 03:13:38 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x20, 0x60, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "1f13b4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba7, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0xee, 0x27}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xc9, 0x3, 0x4, 0x40, 0xa0}, 0x69, &(0x7f00000002c0)={0x5, 0xf, 0x69, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x8, 0x401}, @generic={0x5d, 0x10, 0xb, "49ca82ddfcd23031b1eeeade2f46158db1797334bb1469f25977a2720b9621bd5007c379e949b1d02f5360c83048c4bc884b98e5086b5e49fb28808a580c3487c0249a870e97909f5dbd8300583973b4e81dd3f72781088fd711"}]}, 0x4, [{0x96, &(0x7f0000000340)=@string={0x96, 0x3, "ac544a2add680184ea179f1b529d323b3cfe12de62949c06f397a1967eba7a845cf5092ef619d8e2a67f3104d76dfad9ecaff7273f9a240b54f79d14f794a15bd3e5de2bcb5636b8a92a508788a2010ba599d8ca3d1641f6ec00380c4027a6a937e9f9d168c53fb292212a5482887f0dffb41e36156d6df2e76bd03227c967d62ffaef337136105f536a7f1369f6bf77973fbb96"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x407}}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "60eace1d7371238b0d87b96a748d91a82fcbe36f615f1021852fbde7635d08f0ce33b86147ab3d2a9f0603c1b47d58c101ba856f1ab43d27bdbd5422ecec417c7590be3fa7ab9a6ce3a48ef3d01e236e8939955f5af84dedd284cb06c3d28e243d6325919cf3f5be781e5d3df6160196d30de32ceb20feea9b0b374eaa280f1f90b3b0baaeb420e57b97c5b91fafd34b08d46ebc57c4410ae934037783a2c2cc981dc3ecf3a336f977c43594861e21c29940a1121a627cb71956c7b6bcfb8785fbe007566b0c96543f837bfafed0a423e3056a3f6c953239df41d563904892"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x805e, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x7b, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x20, 0x60, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "1f13b4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xba7, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0xee, 0x27}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xc9, 0x3, 0x4, 0x40, 0xa0}, 0x69, &(0x7f00000002c0)={0x5, 0xf, 0x69, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x8, 0x401}, @generic={0x5d, 0x10, 0xb, "49ca82ddfcd23031b1eeeade2f46158db1797334bb1469f25977a2720b9621bd5007c379e949b1d02f5360c83048c4bc884b98e5086b5e49fb28808a580c3487c0249a870e97909f5dbd8300583973b4e81dd3f72781088fd711"}]}, 0x4, [{0x96, &(0x7f0000000340)=@string={0x96, 0x3, "ac544a2add680184ea179f1b529d323b3cfe12de62949c06f397a1967eba7a845cf5092ef619d8e2a67f3104d76dfad9ecaff7273f9a240b54f79d14f794a15bd3e5de2bcb5636b8a92a508788a2010ba599d8ca3d1641f6ec00380c4027a6a937e9f9d168c53fb292212a5482887f0dffb41e36156d6df2e76bd03227c967d62ffaef337136105f536a7f1369f6bf77973fbb96"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x407}}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "60eace1d7371238b0d87b96a748d91a82fcbe36f615f1021852fbde7635d08f0ce33b86147ab3d2a9f0603c1b47d58c101ba856f1ab43d27bdbd5422ecec417c7590be3fa7ab9a6ce3a48ef3d01e236e8939955f5af84dedd284cb06c3d28e243d6325919cf3f5be781e5d3df6160196d30de32ceb20feea9b0b374eaa280f1f90b3b0baaeb420e57b97c5b91fafd34b08d46ebc57c4410ae934037783a2c2cc981dc3ecf3a336f977c43594861e21c29940a1121a627cb71956c7b6bcfb8785fbe007566b0c96543f837bfafed0a423e3056a3f6c953239df41d563904892"}}]}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x805e, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:13:38 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x26, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:38 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x8, 0x0, 0x0, 0x0) 03:13:38 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x3d04, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r7 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, r11, &(0x7f00000002c0), 0x0, 0x400, 0x100, 0x1, {0x0, r12}}, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0xffffff00) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:13:38 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x8, 0x0, 0x0, 0x0) 03:13:38 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x1c}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1198.800361][ T4856] UDC core: couldn't find an available UDC or it's busy: -16 [ 1198.812332][ T4856] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1198.831977][ T1142] usb 1-1: USB disconnect, device number 64 [ 1198.839591][ T1142] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:13:39 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xc, 0x0, 0x0, 0x0) 03:13:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xc, 0x0, 0x0, 0x0) 03:13:39 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x27, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:39 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x70, 0x0, 0x0, 0x0) 03:13:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x70, 0x0, 0x0, 0x0) [ 1199.192991][ T20] usb 4-1: new full-speed USB device number 35 using dummy_hcd 03:13:39 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x28, 0xfffffdef, 0x0, 0x0, 0x0) [ 1199.418774][ T1142] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1199.623425][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1199.638273][ T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1199.823615][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1199.832895][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.841677][ T20] usb 4-1: Product: syz [ 1199.846653][ T1142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.858005][ T20] usb 4-1: Manufacturer: syz [ 1199.862781][ T20] usb 4-1: SerialNumber: syz [ 1200.073251][ T1142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1200.084536][ T1142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.092747][ T1142] usb 1-1: Product: syz [ 1200.104763][ T1142] usb 1-1: Manufacturer: syz [ 1200.110523][ T1142] usb 1-1: SerialNumber: syz [ 1200.119485][ T4872] UDC core: couldn't find an available UDC or it's busy: -16 [ 1200.129904][ T4872] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1200.373871][ T4878] UDC core: couldn't find an available UDC or it's busy: -16 [ 1200.381290][ T4878] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1200.490084][ T4951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1201.354360][ T4951] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1201.643259][ T1142] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1201.651975][ T1142] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1201.659896][ T1142] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1201.863154][ T1142] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1201.872068][ T1142] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1202.421250][ T4979] UDC core: couldn't find an available UDC or it's busy: -16 [ 1202.423624][ T4980] UDC core: couldn't find an available UDC or it's busy: -16 [ 1202.440383][ T4979] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1202.457181][ T4980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:13:42 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800000000000000000000d240f0100000000100000000006241a0000300905810310000000000904010000020d00000904010802020d000009058202ff030000000905030200020000fb"], 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:42 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x6cd, 0x0, 0x0, 0x0) 03:13:42 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x29, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:42 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x5d8, 0x0, 0x0, 0x0) 03:13:42 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x3d04, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r7 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, r11, &(0x7f00000002c0), 0x0, 0x400, 0x100, 0x1, {0x0, r12}}, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0xffffff00) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) syz_io_uring_setup(0x3d04, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r10) (async) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, r11, &(0x7f00000002c0), 0x0, 0x400, 0x100, 0x1, {0x0, r12}}, 0x0) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0xffffff00) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 1202.489604][ T3653] usb 1-1: USB disconnect, device number 65 [ 1202.527325][ T3653] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:13:42 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x1c}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:42 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x700, 0x0, 0x0, 0x0) 03:13:42 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2a, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:42 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x700, 0x0, 0x0, 0x0) [ 1202.663198][ T20] cdc_ncm 4-1:1.0: failed to get mac address [ 1202.700650][ T20] cdc_ncm 4-1:1.0: bind() failure [ 1202.733144][ T20] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 1202.763117][ T20] cdc_mbim: probe of 4-1:1.1 failed with error -71 03:13:42 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2b, 0xfffffdef, 0x0, 0x0, 0x0) [ 1202.785800][ T20] usbtest: probe of 4-1:1.1 failed with error -71 [ 1202.796130][ T20] usb 4-1: USB disconnect, device number 35 03:13:42 executing program 2: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x3d04, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r7 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r11 = dup(r10) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, r11, &(0x7f00000002c0), 0x0, 0x400, 0x100, 0x1, {0x0, r12}}, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0xffffff00) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) syz_io_uring_setup(0x3d04, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async) syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r10) (async) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x5, 0x0, r11, &(0x7f00000002c0), 0x0, 0x400, 0x100, 0x1, {0x0, r12}}, 0x0) (async) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0xffffff00) (async) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 03:13:42 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xc00, 0x0, 0x0, 0x0) [ 1203.123285][ T3653] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1203.236876][ T20] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1203.493238][ T3653] usb 1-1: config index 0 descriptor too short (expected 128, got 92) [ 1203.501458][ T3653] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.512377][ T3653] usb 1-1: config 0 has no interfaces? [ 1203.643470][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1203.656861][ T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1203.673299][ T3653] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1203.682586][ T3653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.691469][ T3653] usb 1-1: Product: syz [ 1203.697821][ T3653] usb 1-1: Manufacturer: syz [ 1203.702598][ T3653] usb 1-1: SerialNumber: syz [ 1203.721979][ T3653] usb 1-1: config 0 descriptor?? [ 1203.853269][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1203.862352][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.879016][ T20] usb 4-1: Product: syz [ 1203.884859][ T20] usb 4-1: Manufacturer: syz [ 1203.889485][ T20] usb 4-1: SerialNumber: syz [ 1203.968713][ T5005] UDC core: couldn't find an available UDC or it's busy: -16 [ 1203.978442][ T5005] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1204.157578][ T5032] UDC core: couldn't find an available UDC or it's busy: -16 [ 1204.161396][ T5103] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1204.171782][ T5032] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1204.514615][ T5032] raw-gadget gadget: fail, usb_ep_enable returned -22 03:13:45 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2c, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:45 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xc00, 0x0, 0x0, 0x0) 03:13:45 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x11fe, 0x0, 0x0, 0x0) 03:13:45 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) sendfile(r1, r0, &(0x7f0000000200)=0x10000, 0x800) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_enter(r5, 0x6da1, 0x6b39, 0x1, &(0x7f00000001c0)={[0x40]}, 0x8) 03:13:45 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800000000000000000000d240f0100000000100000000006241a0000300905810310000000000904010000020d00000904010802020d000009058202ff030000000905030200020000fb"], 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) [ 1205.586203][T30378] usb 1-1: USB disconnect, device number 66 03:13:45 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x1f00, 0x0, 0x0, 0x0) 03:13:45 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x1c}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x1c}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:13:45 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) sendfile(r1, r0, &(0x7f0000000200)=0x10000, 0x800) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_enter(r5, 0x6da1, 0x6b39, 0x1, &(0x7f00000001c0)={[0x40]}, 0x8) 03:13:45 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x11e8, 0x0, 0x0, 0x0) 03:13:45 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2d, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:45 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x2000, 0x0, 0x0, 0x0) 03:13:45 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x1f00, 0x0, 0x0, 0x0) [ 1205.863249][ T20] cdc_ncm 4-1:1.0: failed to get mac address [ 1205.894564][ T20] cdc_ncm 4-1:1.0: bind() failure 03:13:45 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2e, 0xfffffdef, 0x0, 0x0, 0x0) [ 1205.961845][ T20] cdc_ncm: probe of 4-1:1.1 failed with error -71 03:13:46 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x3334, 0x0, 0x0, 0x0) [ 1206.003192][ T20] cdc_mbim: probe of 4-1:1.1 failed with error -71 03:13:46 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x2000, 0x0, 0x0, 0x0) 03:13:46 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) sendfile(r1, r0, &(0x7f0000000200)=0x10000, 0x800) (async) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) (async) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_enter(r5, 0x6da1, 0x6b39, 0x1, &(0x7f00000001c0)={[0x40]}, 0x8) [ 1206.053946][ T20] usbtest: probe of 4-1:1.1 failed with error -71 [ 1206.092870][ T20] usb 4-1: USB disconnect, device number 36 [ 1206.173245][T30378] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1206.533172][ T20] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1206.604210][T30378] usb 1-1: config index 0 descriptor too short (expected 128, got 92) [ 1206.612524][T30378] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.623370][T30378] usb 1-1: config 0 has no interfaces? [ 1206.803257][T30378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1206.812424][T30378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.821751][T30378] usb 1-1: Product: syz [ 1206.826493][T30378] usb 1-1: Manufacturer: syz [ 1206.831110][T30378] usb 1-1: SerialNumber: syz [ 1206.837651][T30378] usb 1-1: config 0 descriptor?? [ 1206.975256][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1206.986525][ T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1207.084813][ T5122] UDC core: couldn't find an available UDC or it's busy: -16 [ 1207.092243][ T5122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1207.194332][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1207.207965][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.216109][ T20] usb 4-1: Product: syz [ 1207.220290][ T20] usb 4-1: Manufacturer: syz [ 1207.225088][ T20] usb 4-1: SerialNumber: syz [ 1207.474026][ T5136] UDC core: couldn't find an available UDC or it's busy: -16 [ 1207.482857][ T5136] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:13:47 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800000000000000000000d240f0100000000100000000006241a0000300905810310000000000904010000020d00000904010802020d000009058202ff030000000905030200020000fb"], 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902800000000000000000000d240f0100000000100000000006241a0000300905810310000000000904010000020d00000904010802020d000009058202ff030000000905030200020000fb"], 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:13:47 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2f, 0xfffffdef, 0x0, 0x0, 0x0) [ 1207.802163][T20684] usb 1-1: USB disconnect, device number 67 [ 1207.842722][ T5169] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1208.223064][T20684] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1208.623225][T20684] usb 1-1: config index 0 descriptor too short (expected 128, got 92) [ 1208.631429][T20684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.641932][T20684] usb 1-1: config 0 has no interfaces? [ 1208.715652][ T5169] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1208.823403][T20684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1208.832666][T20684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.841003][T20684] usb 1-1: Product: syz [ 1208.845336][T20684] usb 1-1: Manufacturer: syz [ 1208.850021][T20684] usb 1-1: SerialNumber: syz [ 1208.858495][T20684] usb 1-1: config 0 descriptor?? 03:13:49 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000000c0)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x40, 0x2, 0xde, {0xde, 0x22, "e5b8fbf767c472c71bf4fa4026476f1763e94b561b2e1b6cad78a8e6cbfcea2f546425e372156a378d67608e699a45222f6c73ddfceda9a18f6a54bd62c3ead19ae92e3061ffa32d0a54a25a5163ee15f719bf779b525d80ccfc34c36f112700cdd9a6279682cfec4a22c6fec909254abdbf45cb60ee9fa6a6e6e1af95c8fa395555b54afb19884689134a662c3ba2afef51a7a0ad48d8f2190f8dc87dd600e7c5be9893bfe0809b2872a59d1f9f4e87ba75827bb1d5eeb2eed499875d409f1f8c78297742558247deb6b4c0e13c81301d139205f91793b9d6062fd1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x40, 0x14, 0xde, "eabe7a06c1233947c664046b14eeddf3fec12af0915fff8531ce2d46d28a12dbca03e2cddea4da14c9593edcdc0f413a5203b95b4ef28f69a5fdc9d564f26f54ff4ffa20966f23de7e3cd201817340a33f85fc66bf73c9e3915b3d6387858ce384f3a62e2e3214dc899662e0081dbe70291e66698b9cd5080de382b342a3137964596bd87f5e45a2458a9c1e572e4e1e5768c89627b34f9cf068c6165409cb79290026448dc6ebdf0ada6444d29878b586b18dccb45ad9d89b2d752c880662ad3a85aad78cae72e09f6717e98e8ff731921a9c6724aec595e044485edeb0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000540)={0x20, 0x0, 0xb3, {0xb1, "162f7f75ca812d95c03644f137ce76cb4fa87a3cc0ad28dcf4be634560e318791791dcb31a68edb413ff32ec52a53b95f8be1445daa22f08f7a32f6737c1a9eea21e5e07af2bc30a3d06e685db4fb8b2a58ffb51706e2b1acaf138076ccbfd16502a69c2b43c1e70b1e0bb08761f06ae3eb0786b10eb6fb39ad4e74f5199286b2d3ec83cee9d96f2a4dcf77e91a307508dd5d41269bd85b9b841b6868c687f3f8e43cdc97f4e4b94c87c2facea2a88f174"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x1f}, &(0x7f0000000640)={0x20, 0x0, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:13:49 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x3433, 0x0, 0x0, 0x0) 03:13:49 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x3334, 0x0, 0x0, 0x0) 03:13:49 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) sendfile(r1, r0, &(0x7f0000000200)=0x10000, 0x800) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_enter(r5, 0x6da1, 0x6b39, 0x1, &(0x7f00000001c0)={[0x40]}, 0x8) 03:13:49 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x30, 0xfffffdef, 0x0, 0x0, 0x0) [ 1208.975198][ T5169] UDC core: couldn't find an available UDC or it's busy: -16 [ 1208.982747][ T5169] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1209.033194][ T20] cdc_ncm 4-1:1.0: failed to get mac address [ 1209.053112][ T20] cdc_ncm 4-1:1.0: bind() failure 03:13:49 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x3433, 0x0, 0x0, 0x0) 03:13:49 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x3f00, 0x0, 0x0, 0x0) 03:13:49 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x31, 0xfffffdef, 0x0, 0x0, 0x0) [ 1209.103187][ T20] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 1209.110269][ T5168] UDC core: couldn't find an available UDC or it's busy: -16 [ 1209.135304][ T5168] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:13:49 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x3f00, 0x0, 0x0, 0x0) [ 1209.163154][ T20] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 1209.184552][ T20] usbtest: probe of 4-1:1.1 failed with error -71 03:13:49 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x4000, 0x0, 0x0, 0x0) [ 1209.266298][ T20] usb 4-1: USB disconnect, device number 37 [ 1209.683186][ T20] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1210.073150][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.088620][ T20] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1210.255915][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1210.266581][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.274909][ T20] usb 4-1: Product: syz [ 1210.279077][ T20] usb 4-1: Manufacturer: syz [ 1210.284012][ T20] usb 4-1: SerialNumber: syz [ 1210.532169][ T5190] UDC core: couldn't find an available UDC or it's busy: -16 [ 1210.539826][ T5190] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:13:50 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406008603f08b1d9326670105240000000d240f0100000000000000000006241a0000000905810320000000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 03:13:50 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x70, 0x0, 0x0, 0x0) [ 1210.855765][T20684] usb 1-1: USB disconnect, device number 68 [ 1210.902225][ T5215] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1211.273166][T20684] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1211.534211][ T5215] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1211.633258][T20684] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 1211.640576][T20684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.660978][T20684] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.773200][ T20] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1211.779660][ T20] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1211.791669][ T20] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1211.833193][T20684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1211.842409][T20684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.850855][T20684] usb 1-1: Product: syz [ 1211.855591][T20684] usb 1-1: Manufacturer: syz [ 1211.860408][T20684] usb 1-1: SerialNumber: syz [ 1211.916299][T20684] cdc_ncm 1-1:1.0: skipping garbage [ 1211.921706][T20684] cdc_ncm 1-1:1.0: skipping garbage [ 1211.927418][T20684] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1211.934488][T20684] cdc_ncm 1-1:1.0: bind() failure [ 1211.942022][T20684] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1211.949057][T20684] cdc_ncm 1-1:1.1: bind() failure [ 1211.983236][ T20] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1211.995531][ T20] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1212.120003][ T5213] UDC core: couldn't find an available UDC or it's busy: -16 [ 1212.127675][ T5213] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1212.720374][T20684] usb 4-1: USB disconnect, device number 38 [ 1212.733700][T20684] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:13:53 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x4000, 0x0, 0x0, 0x0) 03:13:53 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x32, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x7000, 0x0, 0x0, 0x0) 03:13:53 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xc, 0x0, 0x0, 0x0) 03:13:53 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}}}]}}, 0x0) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (rerun: 32) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000000c0)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x40, 0x2, 0xde, {0xde, 0x22, "e5b8fbf767c472c71bf4fa4026476f1763e94b561b2e1b6cad78a8e6cbfcea2f546425e372156a378d67608e699a45222f6c73ddfceda9a18f6a54bd62c3ead19ae92e3061ffa32d0a54a25a5163ee15f719bf779b525d80ccfc34c36f112700cdd9a6279682cfec4a22c6fec909254abdbf45cb60ee9fa6a6e6e1af95c8fa395555b54afb19884689134a662c3ba2afef51a7a0ad48d8f2190f8dc87dd600e7c5be9893bfe0809b2872a59d1f9f4e87ba75827bb1d5eeb2eed499875d409f1f8c78297742558247deb6b4c0e13c81301d139205f91793b9d6062fd1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x40, 0x14, 0xde, "eabe7a06c1233947c664046b14eeddf3fec12af0915fff8531ce2d46d28a12dbca03e2cddea4da14c9593edcdc0f413a5203b95b4ef28f69a5fdc9d564f26f54ff4ffa20966f23de7e3cd201817340a33f85fc66bf73c9e3915b3d6387858ce384f3a62e2e3214dc899662e0081dbe70291e66698b9cd5080de382b342a3137964596bd87f5e45a2458a9c1e572e4e1e5768c89627b34f9cf068c6165409cb79290026448dc6ebdf0ada6444d29878b586b18dccb45ad9d89b2d752c880662ad3a85aad78cae72e09f6717e98e8ff731921a9c6724aec595e044485edeb0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000540)={0x20, 0x0, 0xb3, {0xb1, "162f7f75ca812d95c03644f137ce76cb4fa87a3cc0ad28dcf4be634560e318791791dcb31a68edb413ff32ec52a53b95f8be1445daa22f08f7a32f6737c1a9eea21e5e07af2bc30a3d06e685db4fb8b2a58ffb51706e2b1acaf138076ccbfd16502a69c2b43c1e70b1e0bb08761f06ae3eb0786b10eb6fb39ad4e74f5199286b2d3ec83cee9d96f2a4dcf77e91a307508dd5d41269bd85b9b841b6868c687f3f8e43cdc97f4e4b94c87c2facea2a88f174"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x1f}, &(0x7f0000000640)={0x20, 0x0, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 03:13:53 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x33, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xd805, 0x0, 0x0, 0x0) 03:13:53 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x7000, 0x0, 0x0, 0x0) 03:13:53 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000000c0)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x40, 0x2, 0xde, {0xde, 0x22, "e5b8fbf767c472c71bf4fa4026476f1763e94b561b2e1b6cad78a8e6cbfcea2f546425e372156a378d67608e699a45222f6c73ddfceda9a18f6a54bd62c3ead19ae92e3061ffa32d0a54a25a5163ee15f719bf779b525d80ccfc34c36f112700cdd9a6279682cfec4a22c6fec909254abdbf45cb60ee9fa6a6e6e1af95c8fa395555b54afb19884689134a662c3ba2afef51a7a0ad48d8f2190f8dc87dd600e7c5be9893bfe0809b2872a59d1f9f4e87ba75827bb1d5eeb2eed499875d409f1f8c78297742558247deb6b4c0e13c81301d139205f91793b9d6062fd1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x40, 0x14, 0xde, "eabe7a06c1233947c664046b14eeddf3fec12af0915fff8531ce2d46d28a12dbca03e2cddea4da14c9593edcdc0f413a5203b95b4ef28f69a5fdc9d564f26f54ff4ffa20966f23de7e3cd201817340a33f85fc66bf73c9e3915b3d6387858ce384f3a62e2e3214dc899662e0081dbe70291e66698b9cd5080de382b342a3137964596bd87f5e45a2458a9c1e572e4e1e5768c89627b34f9cf068c6165409cb79290026448dc6ebdf0ada6444d29878b586b18dccb45ad9d89b2d752c880662ad3a85aad78cae72e09f6717e98e8ff731921a9c6724aec595e044485edeb0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000540)={0x20, 0x0, 0xb3, {0xb1, "162f7f75ca812d95c03644f137ce76cb4fa87a3cc0ad28dcf4be634560e318791791dcb31a68edb413ff32ec52a53b95f8be1445daa22f08f7a32f6737c1a9eea21e5e07af2bc30a3d06e685db4fb8b2a58ffb51706e2b1acaf138076ccbfd16502a69c2b43c1e70b1e0bb08761f06ae3eb0786b10eb6fb39ad4e74f5199286b2d3ec83cee9d96f2a4dcf77e91a307508dd5d41269bd85b9b841b6868c687f3f8e43cdc97f4e4b94c87c2facea2a88f174"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x1f}, &(0x7f0000000640)={0x20, 0x0, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1213.374488][ T5294] UDC core: couldn't find an available UDC or it's busy: -16 [ 1213.426386][ T5294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:13:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xfe11, 0x0, 0x0, 0x0) [ 1213.480842][ T5294] UDC core: couldn't find an available UDC or it's busy: -16 [ 1213.564633][ T5294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1213.614180][ T5294] UDC core: couldn't find an available UDC or it's busy: -16 [ 1213.629202][ T5294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1213.652182][ T5294] UDC core: couldn't find an available UDC or it's busy: -16 [ 1213.662291][T20684] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1213.665214][ T5294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1213.691583][ T5294] UDC core: couldn't find an available UDC or it's busy: -16 [ 1213.708561][ T5294] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1213.800564][ T3684] usb 3-1: new high-speed USB device number 9 using dummy_hcd 03:13:53 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406008603f08b1d9326670105240000000d240f0100000000000000000006241a0000000905810320000000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) 03:13:53 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xcd06, 0x0, 0x0, 0x0) 03:13:53 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x34, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x400000, 0x0, 0x0, 0x0) [ 1213.853194][T20684] usb 4-1: device descriptor read/64, error 18 [ 1213.890097][ T3653] usb 1-1: USB disconnect, device number 69 03:13:54 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x35, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:54 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xe811, 0x0, 0x0, 0x0) [ 1214.003846][ T5335] UDC core: couldn't find an available UDC or it's busy: -16 [ 1214.041481][ T5335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1214.078192][ T5344] UDC core: couldn't find an available UDC or it's busy: -16 [ 1214.113419][ T5344] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1214.143909][T20684] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1214.163212][ T3684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.182357][ T3684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1214.348070][T20684] usb 4-1: device descriptor read/64, error 18 [ 1214.354548][ T3684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.368383][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.377605][ T3684] usb 3-1: Product: syz [ 1214.381780][ T3684] usb 3-1: Manufacturer: syz [ 1214.391616][ T3684] usb 3-1: SerialNumber: syz [ 1214.396535][ T3653] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1214.483229][T20684] usb usb4-port1: attempt power cycle [ 1214.647890][ T5308] UDC core: couldn't find an available UDC or it's busy: -16 [ 1214.656803][ T5308] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1214.783117][ T3653] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 1214.790734][ T3653] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.802108][ T3653] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.913158][T20684] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1214.983168][ T3653] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.992366][ T3653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.006395][ T3653] usb 1-1: Product: syz [ 1215.010582][ T3653] usb 1-1: Manufacturer: syz [ 1215.016009][T20684] usb 4-1: Invalid ep0 maxpacket: 0 [ 1215.022134][ T3653] usb 1-1: SerialNumber: syz [ 1215.022303][ T5348] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1215.067197][ T3653] cdc_ncm 1-1:1.0: skipping garbage [ 1215.072646][ T3653] cdc_ncm 1-1:1.0: skipping garbage [ 1215.078545][ T3653] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1215.085819][ T3653] cdc_ncm 1-1:1.0: bind() failure [ 1215.094188][ T3653] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1215.101094][ T3653] cdc_ncm 1-1:1.1: bind() failure [ 1215.173184][T20684] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1215.267384][ T20] usb 1-1: USB disconnect, device number 70 [ 1215.273280][T20684] usb 4-1: Invalid ep0 maxpacket: 0 [ 1215.281358][T20684] usb usb4-port1: unable to enumerate USB device [ 1215.686301][ T5348] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1215.923122][ T3684] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1215.929577][ T3684] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1215.939958][ T3684] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1216.143224][ T3684] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 1216.158128][ T3684] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 03:13:56 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000000c0)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x40, 0x2, 0xde, {0xde, 0x22, "e5b8fbf767c472c71bf4fa4026476f1763e94b561b2e1b6cad78a8e6cbfcea2f546425e372156a378d67608e699a45222f6c73ddfceda9a18f6a54bd62c3ead19ae92e3061ffa32d0a54a25a5163ee15f719bf779b525d80ccfc34c36f112700cdd9a6279682cfec4a22c6fec909254abdbf45cb60ee9fa6a6e6e1af95c8fa395555b54afb19884689134a662c3ba2afef51a7a0ad48d8f2190f8dc87dd600e7c5be9893bfe0809b2872a59d1f9f4e87ba75827bb1d5eeb2eed499875d409f1f8c78297742558247deb6b4c0e13c81301d139205f91793b9d6062fd1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x40, 0x14, 0xde, "eabe7a06c1233947c664046b14eeddf3fec12af0915fff8531ce2d46d28a12dbca03e2cddea4da14c9593edcdc0f413a5203b95b4ef28f69a5fdc9d564f26f54ff4ffa20966f23de7e3cd201817340a33f85fc66bf73c9e3915b3d6387858ce384f3a62e2e3214dc899662e0081dbe70291e66698b9cd5080de382b342a3137964596bd87f5e45a2458a9c1e572e4e1e5768c89627b34f9cf068c6165409cb79290026448dc6ebdf0ada6444d29878b586b18dccb45ad9d89b2d752c880662ad3a85aad78cae72e09f6717e98e8ff731921a9c6724aec595e044485edeb0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000540)={0x20, 0x0, 0xb3, {0xb1, "162f7f75ca812d95c03644f137ce76cb4fa87a3cc0ad28dcf4be634560e318791791dcb31a68edb413ff32ec52a53b95f8be1445daa22f08f7a32f6737c1a9eea21e5e07af2bc30a3d06e685db4fb8b2a58ffb51706e2b1acaf138076ccbfd16502a69c2b43c1e70b1e0bb08761f06ae3eb0786b10eb6fb39ad4e74f5199286b2d3ec83cee9d96f2a4dcf77e91a307508dd5d41269bd85b9b841b6868c687f3f8e43cdc97f4e4b94c87c2facea2a88f174"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x1f}, &(0x7f0000000640)={0x20, 0x0, 0x1}}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 03:13:56 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x700000, 0x0, 0x0, 0x0) 03:13:56 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x36, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:56 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x400000, 0x0, 0x0, 0x0) [ 1216.894365][ T1142] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1216.992860][ T3653] usb 3-1: USB disconnect, device number 9 [ 1217.003177][ T3653] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 1217.315099][ T1142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.326411][ T1142] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 03:13:57 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x37, 0xfffffdef, 0x0, 0x0, 0x0) 03:13:57 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406008603f08b1d9326670105240000000d240f0100000000000000000006241a0000000905810320000000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (rerun: 64) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) 03:13:57 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x1000000, 0x0, 0x0, 0x0) 03:13:57 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x700000, 0x0, 0x0, 0x0) 03:13:57 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x41, &(0x7f00000000c0)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x40, 0x2, 0xde, {0xde, 0x22, "e5b8fbf767c472c71bf4fa4026476f1763e94b561b2e1b6cad78a8e6cbfcea2f546425e372156a378d67608e699a45222f6c73ddfceda9a18f6a54bd62c3ead19ae92e3061ffa32d0a54a25a5163ee15f719bf779b525d80ccfc34c36f112700cdd9a6279682cfec4a22c6fec909254abdbf45cb60ee9fa6a6e6e1af95c8fa395555b54afb19884689134a662c3ba2afef51a7a0ad48d8f2190f8dc87dd600e7c5be9893bfe0809b2872a59d1f9f4e87ba75827bb1d5eeb2eed499875d409f1f8c78297742558247deb6b4c0e13c81301d139205f91793b9d6062fd1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x40, 0x14, 0xde, "eabe7a06c1233947c664046b14eeddf3fec12af0915fff8531ce2d46d28a12dbca03e2cddea4da14c9593edcdc0f413a5203b95b4ef28f69a5fdc9d564f26f54ff4ffa20966f23de7e3cd201817340a33f85fc66bf73c9e3915b3d6387858ce384f3a62e2e3214dc899662e0081dbe70291e66698b9cd5080de382b342a3137964596bd87f5e45a2458a9c1e572e4e1e5768c89627b34f9cf068c6165409cb79290026448dc6ebdf0ada6444d29878b586b18dccb45ad9d89b2d752c880662ad3a85aad78cae72e09f6717e98e8ff731921a9c6724aec595e044485edeb0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000540)={0x20, 0x0, 0xb3, {0xb1, "162f7f75ca812d95c03644f137ce76cb4fa87a3cc0ad28dcf4be634560e318791791dcb31a68edb413ff32ec52a53b95f8be1445daa22f08f7a32f6737c1a9eea21e5e07af2bc30a3d06e685db4fb8b2a58ffb51706e2b1acaf138076ccbfd16502a69c2b43c1e70b1e0bb08761f06ae3eb0786b10eb6fb39ad4e74f5199286b2d3ec83cee9d96f2a4dcf77e91a307508dd5d41269bd85b9b841b6868c687f3f8e43cdc97f4e4b94c87c2facea2a88f174"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x1f}, &(0x7f0000000640)={0x20, 0x0, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1217.517866][ T1142] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1217.531558][ T1142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.574764][ T5425] UDC core: couldn't find an available UDC or it's busy: -16 [ 1217.590788][ T1142] usb 4-1: Product: syz [ 1217.612779][ T1142] usb 4-1: Manufacturer: syz 03:13:57 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x1000000, 0x0, 0x0, 0x0) 03:13:57 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x38, 0xfffffdef, 0x0, 0x0, 0x0) [ 1217.618082][ T5425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1217.629886][ T1142] usb 4-1: SerialNumber: syz [ 1217.643350][ T5425] UDC core: couldn't find an available UDC or it's busy: -16 03:13:57 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x2000000, 0x0, 0x0, 0x0) [ 1217.676726][ T5425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1217.723038][ T5425] UDC core: couldn't find an available UDC or it's busy: -16 [ 1217.748069][ T5425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1217.786166][ T5425] UDC core: couldn't find an available UDC or it's busy: -16 [ 1217.841058][ T5425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1217.852232][ T5425] UDC core: couldn't find an available UDC or it's busy: -16 [ 1217.878231][ T5425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1217.907359][ T5370] UDC core: couldn't find an available UDC or it's busy: -16 [ 1217.908217][ T5444] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1217.933182][ T20] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1217.940409][ T5370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1218.083078][ T3684] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1218.243874][ T5446] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1218.303617][ T1142] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1218.310089][ T1142] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1218.317876][ T1142] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1218.363344][ T1142] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1218.375850][ T1142] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1218.443507][ T3684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.457806][ T3684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1218.623241][ T3684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1218.632332][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.640921][ T3684] usb 3-1: Product: syz [ 1218.651658][ T3684] usb 3-1: Manufacturer: syz [ 1218.657441][ T3684] usb 3-1: SerialNumber: syz [ 1218.929085][ T5439] UDC core: couldn't find an available UDC or it's busy: -16 [ 1218.946057][ T5439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1219.318047][ T5514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1219.990282][ T5514] raw-gadget gadget: fail, usb_ep_enable returned -22 03:14:00 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0xac5f}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:14:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x7000000, 0x0, 0x0, 0x0) 03:14:00 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x39, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:00 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x2000000, 0x0, 0x0, 0x0) 03:14:00 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x11, 0x59, {0x59, 0x9, "53e0f8c0b46d177160ab080cc102a54d541cc94f626689cb9ac6441b6a5a95a42e95dd6ade20da30e172b95589c1eea90f6c41a299ed2ad74c6ebda6f41dde9eb9485d3a0c27534b8ade3c7ffc085ec7d519ccc1f92786"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0x6, 0xb0, "86cf123e4e517b5a9981dc313115f869ca8ecdcb91c8a567a6a6a9e2c11e97ae01999af0f3012749099a126b1c21054651ad14c6c386c0c80f0e16405ca16c8d86c8d72f848a4593f3a651e5c5467132f180e7e8e86e75a411ef64f05b7a11203af95a06bdadb33d9cad2d00b3764eabb955bc8ed28342d144d6e68c7d7057458b1cff06290facfd2a3311fdbd6319328dd133e7543bf29498b3626d3227e1abdae1bf460d836cc07c712a9252a5a160"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x8, 0x7, 0x7, 0x1ff, 0x829, 0x8, 0x1000, 0x80000001, 0x1, 0x0, 0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) [ 1220.123881][ T1142] usb 4-1: USB disconnect, device number 43 [ 1220.137047][ T1142] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:14:00 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x7000000, 0x0, 0x0, 0x0) 03:14:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x8000000, 0x0, 0x0, 0x0) 03:14:00 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3a, 0xfffffdef, 0x0, 0x0, 0x0) [ 1220.223249][ T3684] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1220.238733][ T3684] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1220.287139][ T3684] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1220.443429][ T3684] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 1220.474588][ T3684] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 1220.493251][ T20] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1220.723344][ T1142] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1220.894204][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.103294][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.112562][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.120986][ T20] usb 1-1: Product: syz [ 1221.125756][ T20] usb 1-1: Manufacturer: syz [ 1221.130383][ T20] usb 1-1: SerialNumber: syz [ 1221.165826][ T1142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.363299][ T1142] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.372388][ T1142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.381693][ T1142] usb 4-1: Product: syz [ 1221.386900][ T1142] usb 4-1: Manufacturer: syz [ 1221.393316][ T1142] usb 4-1: SerialNumber: syz [ 1221.399243][ T5521] UDC core: couldn't find an available UDC or it's busy: -16 [ 1221.412671][ T5521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1221.645416][ T5526] UDC core: couldn't find an available UDC or it's busy: -16 [ 1221.652844][ T5526] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:14:01 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x3, 0x51, {0x9, 0x21, 0xe772, 0x3, 0x1, {0x22, 0xb06}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0xff, 0xbd}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x0, 0x1, 0x20, 0xfd}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xe, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a9941545f804cf9a136ca69a6cbb4eb7"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0x100}, @wireless={0xb, 0x10, 0x1, 0xe, 0x61, 0x9, 0x6, 0x3, 0x4}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x0, 0x2, 0x18, {0x18, 0x22, "31f3feabdf5a30ff8061e42f393b23042a2d5d508e2f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000400)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@wireless={0xb, 0x10, 0x1, 0xe, 0x90, 0xfb, 0x7, 0x5, 0xa6}, @ssp_cap={0x24, 0x10, 0xa, 0xfc, 0x6, 0x6, 0x1e, 0x1ff, [0xc00f, 0xc0, 0x30, 0xc0c0, 0xffc000, 0x30]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x20, 0x92, 0x1, 0x20}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x3, 0xbd, 0x6, "cc62f632", "3014ee0b"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x59, 0x60, 0x3, 0x1f, 0x2, 0x7d89}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x20, 0xf, 0xf7, "3b39f9685217e91cf69f08417d8fb4394904fa0e522033722b7bb1e86e4c6c92e6f44f550b83d17641bfd6d6685f832b15eb1a20f0ced57afc5363f33fad482bfa5e5667b68f0609edcf70220781f1625ad532b9458679f23118b91fc3effbc328e87399bc701e14ac58e35dca150baf3a0c7e574cda641911905659b0216820aa34734f61f4b47d0136cae00620faf91a3a9d3580e0cd8b0365435be13b6d85a627e1daa1d8c6345055c30670f6910ac32989db2e4df62251fd15e3ad724f579122e7e1ce1af2e2ec5572039b733b8a911b5dbc0ca358141fa6bb718bb0c81405459921e5d609f962cdfa4b95cdf5e8b9aef832c8291f"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xdc}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x1, [0xff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "c6d0"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000840)={0x40, 0x13, 0x6, @local}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "e4d7"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xf8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:14:01 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xc000000, 0x0, 0x0, 0x0) 03:14:01 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x8000000, 0x0, 0x0, 0x0) 03:14:01 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3b, 0xfffffdef, 0x0, 0x0, 0x0) [ 1221.687047][ T3684] usb 3-1: USB disconnect, device number 10 [ 1221.739533][ T3684] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 1222.213236][ T3684] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1222.573191][ T3684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.653145][ T20] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1222.659831][ T20] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1222.669853][ T20] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1222.743234][ T3684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1222.752435][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.760676][ T3684] usb 3-1: Product: syz [ 1222.765007][ T3684] usb 3-1: Manufacturer: syz [ 1222.769679][ T3684] usb 3-1: SerialNumber: syz [ 1222.863367][ T1142] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1222.869893][ T1142] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1222.877433][ T20] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1222.889686][ T20] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1222.899961][ T1142] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1223.024711][ T5605] UDC core: couldn't find an available UDC or it's busy: -16 [ 1223.032254][ T5605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1223.103106][ T1142] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1223.112799][ T1142] cdc_ncm 4-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1223.563436][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1224.003302][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 1224.293352][ T3684] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1224.299847][ T3684] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1224.307807][ T3684] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1224.513327][ T3684] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 1224.526203][ T3684] cdc_ncm 3-1:1.0 usb2: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 1224.780799][ T1142] usb 1-1: USB disconnect, device number 72 [ 1224.799611][ T1142] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:14:05 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0xac5f}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0xac5f}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:14:05 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xc000000, 0x0, 0x0, 0x0) 03:14:05 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x1f000000, 0x0, 0x0, 0x0) 03:14:05 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3c, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:05 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x11, 0x59, {0x59, 0x9, "53e0f8c0b46d177160ab080cc102a54d541cc94f626689cb9ac6441b6a5a95a42e95dd6ade20da30e172b95589c1eea90f6c41a299ed2ad74c6ebda6f41dde9eb9485d3a0c27534b8ade3c7ffc085ec7d519ccc1f92786"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0x6, 0xb0, "86cf123e4e517b5a9981dc313115f869ca8ecdcb91c8a567a6a6a9e2c11e97ae01999af0f3012749099a126b1c21054651ad14c6c386c0c80f0e16405ca16c8d86c8d72f848a4593f3a651e5c5467132f180e7e8e86e75a411ef64f05b7a11203af95a06bdadb33d9cad2d00b3764eabb955bc8ed28342d144d6e68c7d7057458b1cff06290facfd2a3311fdbd6319328dd133e7543bf29498b3626d3227e1abdae1bf460d836cc07c712a9252a5a160"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x8, 0x7, 0x7, 0x1ff, 0x829, 0x8, 0x1000, 0x80000001, 0x1, 0x0, 0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) [ 1225.102391][ T3653] usb 4-1: USB disconnect, device number 44 [ 1225.110082][ T3653] cdc_ncm 4-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:14:05 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x1f000000, 0x0, 0x0, 0x0) 03:14:05 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x20000000, 0x0, 0x0, 0x0) 03:14:05 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3d, 0xfffffdef, 0x0, 0x0, 0x0) [ 1225.423218][ T1142] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1225.683827][ T3653] usb 4-1: new high-speed USB device number 45 using dummy_hcd 03:14:05 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x20000000, 0x0, 0x0, 0x0) 03:14:05 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x33340000, 0x0, 0x0, 0x0) 03:14:05 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3e, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:05 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x11, 0x59, {0x59, 0x9, "53e0f8c0b46d177160ab080cc102a54d541cc94f626689cb9ac6441b6a5a95a42e95dd6ade20da30e172b95589c1eea90f6c41a299ed2ad74c6ebda6f41dde9eb9485d3a0c27534b8ade3c7ffc085ec7d519ccc1f92786"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0x6, 0xb0, "86cf123e4e517b5a9981dc313115f869ca8ecdcb91c8a567a6a6a9e2c11e97ae01999af0f3012749099a126b1c21054651ad14c6c386c0c80f0e16405ca16c8d86c8d72f848a4593f3a651e5c5467132f180e7e8e86e75a411ef64f05b7a11203af95a06bdadb33d9cad2d00b3764eabb955bc8ed28342d144d6e68c7d7057458b1cff06290facfd2a3311fdbd6319328dd133e7543bf29498b3626d3227e1abdae1bf460d836cc07c712a9252a5a160"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x8, 0x7, 0x7, 0x1ff, 0x829, 0x8, 0x1000, 0x80000001, 0x1, 0x0, 0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) [ 1225.753689][T30378] usb 3-1: USB disconnect, device number 11 [ 1225.786115][T30378] cdc_ncm 3-1:1.0 usb2: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 1225.833507][ T1142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.045298][ T3653] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.073008][ T1142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.082769][ T1142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.091257][ T1142] usb 1-1: Product: syz [ 1226.095717][ T1142] usb 1-1: Manufacturer: syz [ 1226.100557][ T1142] usb 1-1: SerialNumber: syz [ 1226.213235][ T3653] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.232839][ T3653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.241582][ T3653] usb 4-1: Product: syz [ 1226.253272][ T3653] usb 4-1: Manufacturer: syz [ 1226.258067][ T3653] usb 4-1: SerialNumber: syz [ 1226.325908][T30378] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1226.374234][ T5713] UDC core: couldn't find an available UDC or it's busy: -16 [ 1226.381660][ T5713] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1226.506355][ T5719] UDC core: couldn't find an available UDC or it's busy: -16 [ 1226.514569][ T5719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1226.763585][T30378] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.863464][ T1142] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1226.869634][ T1142] cdc_ncm 1-1:1.0: bind() failure [ 1226.885428][ T1142] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1226.892639][ T1142] cdc_ncm 1-1:1.1: bind() failure [ 1226.973150][T30378] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.982234][T30378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.002993][T30378] usb 3-1: Product: syz [ 1227.007197][T30378] usb 3-1: Manufacturer: syz [ 1227.011803][T30378] usb 3-1: SerialNumber: syz [ 1227.260276][ T5756] UDC core: couldn't find an available UDC or it's busy: -16 [ 1227.269565][ T5756] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1227.746106][ T3653] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1227.752579][ T3653] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1227.764024][ T3653] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1227.967670][ T3653] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1227.978643][ T3653] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1228.156801][ T3653] usb 1-1: USB disconnect, device number 73 03:14:08 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0xac5f}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64) 03:14:08 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x3f000000, 0x0, 0x0, 0x0) 03:14:08 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x33340000, 0x0, 0x0, 0x0) 03:14:08 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x41, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:08 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x11, 0x59, {0x59, 0x9, "53e0f8c0b46d177160ab080cc102a54d541cc94f626689cb9ac6441b6a5a95a42e95dd6ade20da30e172b95589c1eea90f6c41a299ed2ad74c6ebda6f41dde9eb9485d3a0c27534b8ade3c7ffc085ec7d519ccc1f92786"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x20, 0x6, 0xb0, "86cf123e4e517b5a9981dc313115f869ca8ecdcb91c8a567a6a6a9e2c11e97ae01999af0f3012749099a126b1c21054651ad14c6c386c0c80f0e16405ca16c8d86c8d72f848a4593f3a651e5c5467132f180e7e8e86e75a411ef64f05b7a11203af95a06bdadb33d9cad2d00b3764eabb955bc8ed28342d144d6e68c7d7057458b1cff06290facfd2a3311fdbd6319328dd133e7543bf29498b3626d3227e1abdae1bf460d836cc07c712a9252a5a160"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x8, 0x7, 0x7, 0x1ff, 0x829, 0x8, 0x1000, 0x80000001, 0x1, 0x0, 0x1, 0x2}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) [ 1228.513223][T30378] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1228.524422][T30378] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1228.533601][T30378] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1228.555518][ T20] usb 4-1: USB disconnect, device number 45 [ 1228.596263][ T20] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:14:08 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x3f000000, 0x0, 0x0, 0x0) 03:14:08 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xd8050000, 0x0, 0x0, 0x0) 03:14:08 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x42, 0xfffffdef, 0x0, 0x0, 0x0) [ 1228.733300][T30378] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 1228.758655][T30378] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 03:14:08 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xe4ffffff, 0x0, 0x0, 0x0) 03:14:08 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xcd060000, 0x0, 0x0, 0x0) 03:14:08 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x43, 0xfffffdef, 0x0, 0x0, 0x0) [ 1228.983112][ T3683] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1229.193147][ T20] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1229.363321][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.533289][ T3683] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1229.542524][ T3683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.553354][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.570157][ T3683] usb 1-1: Product: syz [ 1229.574981][ T3683] usb 1-1: Manufacturer: syz [ 1229.579841][ T3683] usb 1-1: SerialNumber: syz [ 1229.733389][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1229.748274][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.762107][ T20] usb 4-1: Product: syz [ 1229.771013][ T20] usb 4-1: Manufacturer: syz [ 1229.780166][ T20] usb 4-1: SerialNumber: syz [ 1229.828856][ T5846] UDC core: couldn't find an available UDC or it's busy: -16 [ 1229.837196][ T5846] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:14:10 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xd8050000, 0x0, 0x0, 0x0) [ 1230.024537][ T5853] UDC core: couldn't find an available UDC or it's busy: -16 [ 1230.032300][ T5853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1230.068308][ T3653] usb 3-1: USB disconnect, device number 12 [ 1230.083943][ T3653] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 1230.423208][ T3683] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1230.429668][ T3683] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1230.437532][ T3683] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1230.483263][ T3683] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1230.492331][ T3683] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1230.687844][ T3683] usb 1-1: USB disconnect, device number 74 [ 1230.694923][ T3683] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 1230.963242][ T20] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1230.970595][ T20] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1230.979849][ T20] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1231.023161][ T20] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1231.036824][ T20] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1231.933416][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready 03:14:12 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:14:12 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xfe110000, 0x0, 0x0, 0x0) 03:14:12 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xe4ffffff, 0x0, 0x0, 0x0) 03:14:12 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x44, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:12 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 1) 03:14:12 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x2, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xec}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x22}, [@dmm={0x7, 0x24, 0x14, 0x40, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xe5, 0x63, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x20, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xff, 0x3}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x9, 0x1, 0x9, 0x20, 0x1}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x16, 0xad, 0x3, 0x95}]}, 0x2, [{0x14, &(0x7f0000000240)=@string={0x14, 0x3, "a067a4f67662088a323185cf6bb1672a561a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="0004440017004409af1fd7a7e7f6d20c6b68700e7a9ae55bb2ddd64ae67697845a4309c464122c6c9cf787c6462c2884eb3d0fdc62445f674b8f42e57d947e0fbcb6000000001b04423bef16384e1340ee46c98e87375878117641ba7afe80d71371df5e3f787a8cd042730c9bd1dee2053773000000000000000000000000001b7d93d78535ab1724a72cdb97bf340045a2ca76cf98cf50602f0d3d5bd9dae9cb634e0705ffdb94f564862a1f92a0088f43b4b92dbda112e5f35d2566357b1e431a41da2b78de0eda03b90ad9e6a417b4f7b5386b13efcd15e8d0a7d965bb84589ada035ec45ee080d31095c103bab32b"], &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0x8, 0x18, "56279a71db0c16e24702a7c1ccdea520c35323fae76eca6b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x9, 0x5525, 0x9, 0x200, 0x8f, 0x5, 0x471, 0x14fa, 0x40, 0x0, 0x8900, 0x800}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000700)={0x40, 0x9, 0xc5, {0xc5, 0x22, "d28328685f665965bb4a03ef546c5685faf2455c0a725106ad9fd2c32b3a52ffd65d4228fc184ebe799ee7370b70eac419219586b4c7731716fccfad828df902bc3b2ff17a845437a1c8f7febe18329dcc38eb78afb06dd087350e6cd4af81403ba04d2bc5cb2402a056cc16557f433dce9eb584e6882663f6fe3d4f24fee774fa50f70d4be70adc1914fb6d5b3ef89d42d5350a493d396444917955aeb4285c65d4d92753c3e93ae8154bac86fd04fc4dc11f4d4fedf6e9751c958032fb58a7b40713"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x40, 0x5, 0x84, "495361a6511e11b07d22c588b79d16d44d71c25f7bc5d09549a0ef5e8c56d7b8c60ef82cc340cee2f7638e29ce37f6a48ed7af90b5cd80fa266c45247ac95e56a0a8333ca62e1881052d30f431dddf95b049c7811542e8634e42b486c72eff42569e2aca3e2dd07ee5e38aac502dd50bb989397c2b2a7ca1482e557ced3e602c135574d9"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x9, 0x80, 0x401, 0x4, 0x2, 0x2, 0x6, 0x4, 0x3f, 0xffff, 0x7, 0x80}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000a40)={0x20, 0x83, 0x2}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x290, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xc4, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x510}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x2, 0x1, 0x0, 0x20, 0x27}, 0x45, &(0x7f0000000c00)={0x5, 0xf, 0x45, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "54e5a2b6184a45bfeca5673b2a3c1a5c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x5, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xc4, 0x0, 0x2, [0xfe403f, 0x0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x8, 0xfffa}]}, 0x4, [{0x88, &(0x7f0000000c80)=@string={0x88, 0x3, "4c53fdced04a3d511896dd9d2011dd10361ce4b05c6716c4d3a3a07166fcfdacf6a02b7b3344291fbdd2b784def0f5c662550015242ff0b77786543b17f563f1a65b5c6976c5767ce0982788b9462775676e4a77c547ed8990fd2bbafd40d7dd9efa614cccebdbb75bd5163052d87e5f8dcfc6e006300282e6c4d1a65f27cd142fba4e3b2384"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xa872b681de32df62}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x438}}, {0x68, &(0x7f0000000f00)=@string={0x68, 0x3, "78bf0327f8ce5e62b07d9a66862732bee1dbd462443e647581389f22e059a224584e9fab02c90a8c210f4d79a0c4013b42fd1e52d580035f21a9a312bdf532e93fe38c11cefc9783f7a1649f74f34633662e237f94d6140f7e13b2a9e5bb5bc08969bd87c36d"}}]}) syz_usb_control_io(r3, &(0x7f0000001180)={0x2c, &(0x7f0000001000)={0x40, 0x24, 0xba, {0xba, 0x0, "011dff836dadc0154cbf5a28dae30f5dcf5b1856939d7ffabee227a729856f8ad016971c5eae5f45570a82acf3eae8b4fd1deffab63f034adb6dae8a9ed26d6516d9460fb35fac923ce9ec756df99d5c1c525c63e8eb8ccf7617665ca784100cade08313c7b63693a0fe86b047eb983c920307c6b5630e59d5e6ca88153275b310955a768b5144a747420a9adea203d691a7ef40d4275ba0c910d8389127aa736dd3bc444ccdaf8cf4d7cc74b2741fc8c79b20d175fdfa9d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f00000010c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0x7, "7ce1d750", '+*\'R'}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x2, 0x0, 0x2, 0x80, 0x8}}}, &(0x7f00000016c0)={0x84, &(0x7f00000011c0)={0x40, 0x1, 0xfd, "8fbd4aaeb070f2a1d4d5201262cee1c1bb20f159adacf2952c2c515582d1990c17e7c5d93da6a636c44b414389befd517fe6bee45415a2648c6dd2ad4790b4ddd6264b70f159c81c9363b02e7ddc7a3a040b4b97bd6efa63937fcd9ce9378ddb3aff47f57709ab8c79b3f3316ad8c91d4482ff6f762d87ca6a1bb5793389c69d410e696d8ca8738600d2e8bbba6cbebeea32052bbd1cb81c57ae1f9f20e8b7996935bce1a7b344b05a3fad197c78d08f2749c8a472a045fbaea03cde01cecc59f88ec9a5a6a2f63f64c8d04363e4715cf96f32a9d5a397b00d50765a9653a20698898cd8cf0d3183cb1fc36c5741c9a965ba2004c72d368f43e0f72b8d"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001480)={0x40, 0xb, 0x2, "3083"}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000001500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001580)={0x40, 0x19, 0x2, "24c5"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0x8a}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0x5c}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x6}}) [ 1232.173617][ T20] usb 4-1: USB disconnect, device number 46 [ 1232.201568][ T20] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:14:12 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xe8110000, 0x0, 0x0, 0x0) 03:14:12 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xffffffe4, 0x0, 0x0, 0x0) 03:14:12 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x45, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:12 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2, 0x0, 0x0) 03:14:12 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0xffffffe4, 0x0, 0x0, 0x0) 03:14:12 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x46, 0xfffffdef, 0x0, 0x0, 0x0) [ 1232.503443][ T3684] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1232.533151][T20684] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1232.743206][ T20] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1232.942833][T20684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.954234][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.968840][T20684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1232.980153][T20684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1232.990383][T20684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1233.009702][T20684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1233.113306][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.133240][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1233.149423][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.159436][ T3684] usb 1-1: Product: syz [ 1233.170947][ T3684] usb 1-1: Manufacturer: syz [ 1233.176173][T20684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1233.188187][ T3684] usb 1-1: SerialNumber: syz [ 1233.193298][T20684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.216422][T20684] usb 3-1: Product: syz [ 1233.220870][T20684] usb 3-1: Manufacturer: syz [ 1233.225972][T20684] usb 3-1: SerialNumber: syz [ 1233.293422][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1233.302507][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.311071][ T20] usb 4-1: Product: syz [ 1233.316076][ T20] usb 4-1: Manufacturer: syz [ 1233.320688][ T20] usb 4-1: SerialNumber: syz [ 1233.465147][ T6032] UDC core: couldn't find an available UDC or it's busy: -16 [ 1233.472665][ T6032] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1233.567791][ T6037] UDC core: couldn't find an available UDC or it's busy: -16 [ 1233.580637][ T6037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1233.682580][ T6030] FAULT_INJECTION: forcing a failure. [ 1233.682580][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.706933][ T6030] CPU: 0 PID: 6030 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1233.717396][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.727557][ T6030] Call Trace: [ 1233.730845][ T6030] [ 1233.733888][ T6030] dump_stack_lvl+0xcd/0x134 [ 1233.738605][ T6030] should_fail.cold+0x5/0xa [ 1233.743138][ T6030] should_failslab+0x5/0x10 [ 1233.747675][ T6030] __kmalloc+0x7b/0x4d0 [ 1233.751855][ T6030] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1233.759076][ T6030] tomoyo_realpath_from_path+0xc3/0x620 [ 1233.764648][ T6030] ? tomoyo_profile+0x42/0x50 [ 1233.769352][ T6030] tomoyo_path_number_perm+0x1d5/0x590 [ 1233.774838][ T6030] ? tomoyo_path_number_perm+0x18d/0x590 [ 1233.780498][ T6030] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1233.786331][ T6030] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1233.792349][ T6030] ? __context_tracking_exit+0xb8/0xe0 [ 1233.797837][ T6030] ? __fget_files+0x28c/0x470 [ 1233.802646][ T6030] security_file_ioctl+0x50/0xb0 [ 1233.807671][ T6030] __x64_sys_ioctl+0xb3/0x200 [ 1233.812413][ T6030] do_syscall_64+0x35/0xb0 [ 1233.816940][ T6030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1233.822856][ T6030] RIP: 0033:0x7fd05c028e07 [ 1233.827283][ T6030] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1233.846914][ T6030] RSP: 002b:00007fd05a99c0d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.855354][ T6030] RAX: ffffffffffffffda RBX: 00007fd05c13bf60 RCX: 00007fd05c028e07 [ 1233.863345][ T6030] RDX: 00007fd05a99d110 RSI: 0000000080085502 RDI: 0000000000000003 [ 1233.871351][ T6030] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1233.879343][ T6030] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1233.887333][ T6030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000022000 [ 1233.895854][ T6030] [ 1233.904032][ T6030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1234.153294][T20684] cdc_ncm 3-1:1.0: bind() failure [ 1234.173220][T20684] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1234.193237][T20684] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1234.213370][T20684] usbtest: probe of 3-1:1.1 failed with error -71 [ 1234.224315][T20684] usb 3-1: USB disconnect, device number 13 [ 1234.385322][ T20] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1234.391378][ T20] cdc_ncm 4-1:1.0: bind() failure [ 1234.399537][ T20] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1234.406480][ T20] cdc_ncm 4-1:1.1: bind() failure [ 1234.793305][ T3684] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1234.799777][ T3684] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1234.808450][ T3684] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1235.023252][ T3684] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1235.039932][ T3684] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 03:14:15 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:14:15 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2, 0x0, 0x0) 03:14:15 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x7, 0x0, 0x0) 03:14:15 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x47, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:15 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 2) [ 1235.383550][ T3684] usb 4-1: USB disconnect, device number 47 [ 1235.595970][ T6151] UDC core: couldn't find an available UDC or it's busy: -16 [ 1235.609054][ T6151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1235.713056][ T20] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1235.803304][T30378] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1235.903129][ T3684] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1236.073614][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.090768][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1236.109112][ T20] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1236.120746][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1236.139150][ T20] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1236.303248][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1236.312423][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.323220][ T3684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.328454][ T20] usb 3-1: Product: syz [ 1236.340167][ T20] usb 3-1: Manufacturer: syz [ 1236.351695][ T20] usb 3-1: SerialNumber: syz [ 1236.513298][ T3684] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1236.527010][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.543864][ T3684] usb 4-1: Product: syz [ 1236.548412][ T3684] usb 4-1: Manufacturer: syz [ 1236.561520][ T3684] usb 4-1: SerialNumber: syz [ 1236.806157][ T6149] UDC core: couldn't find an available UDC or it's busy: -16 [ 1236.813649][ T6149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1236.826664][ T6145] FAULT_INJECTION: forcing a failure. [ 1236.826664][ T6145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1236.839898][ T6145] CPU: 1 PID: 6145 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1236.850328][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.860389][ T6145] Call Trace: [ 1236.863687][ T6145] [ 1236.866607][ T6145] dump_stack_lvl+0xcd/0x134 [ 1236.871293][ T6145] should_fail.cold+0x5/0xa [ 1236.875841][ T6145] prepare_alloc_pages+0x17b/0x570 [ 1236.880952][ T6145] ? kernel_text_address+0x31/0x60 [ 1236.886181][ T6145] __alloc_pages+0x12f/0x500 [ 1236.890788][ T6145] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 1236.895433][ T3653] usb 1-1: USB disconnect, device number 75 03:14:16 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x2, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xec}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x22}, [@dmm={0x7, 0x24, 0x14, 0x40, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xe5, 0x63, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x20, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xff, 0x3}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x9, 0x1, 0x9, 0x20, 0x1}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x16, 0xad, 0x3, 0x95}]}, 0x2, [{0x14, &(0x7f0000000240)=@string={0x14, 0x3, "a067a4f67662088a323185cf6bb1672a561a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="0004440017004409af1fd7a7e7f6d20c6b68700e7a9ae55bb2ddd64ae67697845a4309c464122c6c9cf787c6462c2884eb3d0fdc62445f674b8f42e57d947e0fbcb6000000001b04423bef16384e1340ee46c98e87375878117641ba7afe80d71371df5e3f787a8cd042730c9bd1dee2053773000000000000000000000000001b7d93d78535ab1724a72cdb97bf340045a2ca76cf98cf50602f0d3d5bd9dae9cb634e0705ffdb94f564862a1f92a0088f43b4b92dbda112e5f35d2566357b1e431a41da2b78de0eda03b90ad9e6a417b4f7b5386b13efcd15e8d0a7d965bb84589ada035ec45ee080d31095c103bab32b"], &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0x8, 0x18, "56279a71db0c16e24702a7c1ccdea520c35323fae76eca6b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x9, 0x5525, 0x9, 0x200, 0x8f, 0x5, 0x471, 0x14fa, 0x40, 0x0, 0x8900, 0x800}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000700)={0x40, 0x9, 0xc5, {0xc5, 0x22, "d28328685f665965bb4a03ef546c5685faf2455c0a725106ad9fd2c32b3a52ffd65d4228fc184ebe799ee7370b70eac419219586b4c7731716fccfad828df902bc3b2ff17a845437a1c8f7febe18329dcc38eb78afb06dd087350e6cd4af81403ba04d2bc5cb2402a056cc16557f433dce9eb584e6882663f6fe3d4f24fee774fa50f70d4be70adc1914fb6d5b3ef89d42d5350a493d396444917955aeb4285c65d4d92753c3e93ae8154bac86fd04fc4dc11f4d4fedf6e9751c958032fb58a7b40713"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x40, 0x5, 0x84, "495361a6511e11b07d22c588b79d16d44d71c25f7bc5d09549a0ef5e8c56d7b8c60ef82cc340cee2f7638e29ce37f6a48ed7af90b5cd80fa266c45247ac95e56a0a8333ca62e1881052d30f431dddf95b049c7811542e8634e42b486c72eff42569e2aca3e2dd07ee5e38aac502dd50bb989397c2b2a7ca1482e557ced3e602c135574d9"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x9, 0x80, 0x401, 0x4, 0x2, 0x2, 0x6, 0x4, 0x3f, 0xffff, 0x7, 0x80}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000a40)={0x20, 0x83, 0x2}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x290, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xc4, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x510}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x2, 0x1, 0x0, 0x20, 0x27}, 0x45, &(0x7f0000000c00)={0x5, 0xf, 0x45, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "54e5a2b6184a45bfeca5673b2a3c1a5c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x5, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xc4, 0x0, 0x2, [0xfe403f, 0x0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x8, 0xfffa}]}, 0x4, [{0x88, &(0x7f0000000c80)=@string={0x88, 0x3, "4c53fdced04a3d511896dd9d2011dd10361ce4b05c6716c4d3a3a07166fcfdacf6a02b7b3344291fbdd2b784def0f5c662550015242ff0b77786543b17f563f1a65b5c6976c5767ce0982788b9462775676e4a77c547ed8990fd2bbafd40d7dd9efa614cccebdbb75bd5163052d87e5f8dcfc6e006300282e6c4d1a65f27cd142fba4e3b2384"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xa872b681de32df62}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x438}}, {0x68, &(0x7f0000000f00)=@string={0x68, 0x3, "78bf0327f8ce5e62b07d9a66862732bee1dbd462443e647581389f22e059a224584e9fab02c90a8c210f4d79a0c4013b42fd1e52d580035f21a9a312bdf532e93fe38c11cefc9783f7a1649f74f34633662e237f94d6140f7e13b2a9e5bb5bc08969bd87c36d"}}]}) syz_usb_control_io(r3, &(0x7f0000001180)={0x2c, &(0x7f0000001000)={0x40, 0x24, 0xba, {0xba, 0x0, "011dff836dadc0154cbf5a28dae30f5dcf5b1856939d7ffabee227a729856f8ad016971c5eae5f45570a82acf3eae8b4fd1deffab63f034adb6dae8a9ed26d6516d9460fb35fac923ce9ec756df99d5c1c525c63e8eb8ccf7617665ca784100cade08313c7b63693a0fe86b047eb983c920307c6b5630e59d5e6ca88153275b310955a768b5144a747420a9adea203d691a7ef40d4275ba0c910d8389127aa736dd3bc444ccdaf8cf4d7cc74b2741fc8c79b20d175fdfa9d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f00000010c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0x7, "7ce1d750", '+*\'R'}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x2, 0x0, 0x2, 0x80, 0x8}}}, &(0x7f00000016c0)={0x84, &(0x7f00000011c0)={0x40, 0x1, 0xfd, "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"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001480)={0x40, 0xb, 0x2, "3083"}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000001500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001580)={0x40, 0x19, 0x2, "24c5"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0x8a}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0x5c}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x6}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x2, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xec}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x22}, [@dmm={0x7, 0x24, 0x14, 0x40, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xe5, 0x63, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x20, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xff, 0x3}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x9, 0x1, 0x9, 0x20, 0x1}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x16, 0xad, 0x3, 0x95}]}, 0x2, [{0x14, &(0x7f0000000240)=@string={0x14, 0x3, "a067a4f67662088a323185cf6bb1672a561a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x820}}]}) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="0004440017004409af1fd7a7e7f6d20c6b68700e7a9ae55bb2ddd64ae67697845a4309c464122c6c9cf787c6462c2884eb3d0fdc62445f674b8f42e57d947e0fbcb6000000001b04423bef16384e1340ee46c98e87375878117641ba7afe80d71371df5e3f787a8cd042730c9bd1dee2053773000000000000000000000000001b7d93d78535ab1724a72cdb97bf340045a2ca76cf98cf50602f0d3d5bd9dae9cb634e0705ffdb94f564862a1f92a0088f43b4b92dbda112e5f35d2566357b1e431a41da2b78de0eda03b90ad9e6a417b4f7b5386b13efcd15e8d0a7d965bb84589ada035ec45ee080d31095c103bab32b"], &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0x8, 0x18, "56279a71db0c16e24702a7c1ccdea520c35323fae76eca6b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x9, 0x5525, 0x9, 0x200, 0x8f, 0x5, 0x471, 0x14fa, 0x40, 0x0, 0x8900, 0x800}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000700)={0x40, 0x9, 0xc5, {0xc5, 0x22, "d28328685f665965bb4a03ef546c5685faf2455c0a725106ad9fd2c32b3a52ffd65d4228fc184ebe799ee7370b70eac419219586b4c7731716fccfad828df902bc3b2ff17a845437a1c8f7febe18329dcc38eb78afb06dd087350e6cd4af81403ba04d2bc5cb2402a056cc16557f433dce9eb584e6882663f6fe3d4f24fee774fa50f70d4be70adc1914fb6d5b3ef89d42d5350a493d396444917955aeb4285c65d4d92753c3e93ae8154bac86fd04fc4dc11f4d4fedf6e9751c958032fb58a7b40713"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x40, 0x5, 0x84, "495361a6511e11b07d22c588b79d16d44d71c25f7bc5d09549a0ef5e8c56d7b8c60ef82cc340cee2f7638e29ce37f6a48ed7af90b5cd80fa266c45247ac95e56a0a8333ca62e1881052d30f431dddf95b049c7811542e8634e42b486c72eff42569e2aca3e2dd07ee5e38aac502dd50bb989397c2b2a7ca1482e557ced3e602c135574d9"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x9, 0x80, 0x401, 0x4, 0x2, 0x2, 0x6, 0x4, 0x3f, 0xffff, 0x7, 0x80}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000a40)={0x20, 0x83, 0x2}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x290, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xc4, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x510}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x2, 0x1, 0x0, 0x20, 0x27}, 0x45, &(0x7f0000000c00)={0x5, 0xf, 0x45, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "54e5a2b6184a45bfeca5673b2a3c1a5c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x5, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xc4, 0x0, 0x2, [0xfe403f, 0x0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x8, 0xfffa}]}, 0x4, [{0x88, &(0x7f0000000c80)=@string={0x88, 0x3, "4c53fdced04a3d511896dd9d2011dd10361ce4b05c6716c4d3a3a07166fcfdacf6a02b7b3344291fbdd2b784def0f5c662550015242ff0b77786543b17f563f1a65b5c6976c5767ce0982788b9462775676e4a77c547ed8990fd2bbafd40d7dd9efa614cccebdbb75bd5163052d87e5f8dcfc6e006300282e6c4d1a65f27cd142fba4e3b2384"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xa872b681de32df62}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x438}}, {0x68, &(0x7f0000000f00)=@string={0x68, 0x3, "78bf0327f8ce5e62b07d9a66862732bee1dbd462443e647581389f22e059a224584e9fab02c90a8c210f4d79a0c4013b42fd1e52d580035f21a9a312bdf532e93fe38c11cefc9783f7a1649f74f34633662e237f94d6140f7e13b2a9e5bb5bc08969bd87c36d"}}]}) (async) syz_usb_control_io(r3, &(0x7f0000001180)={0x2c, &(0x7f0000001000)={0x40, 0x24, 0xba, {0xba, 0x0, "011dff836dadc0154cbf5a28dae30f5dcf5b1856939d7ffabee227a729856f8ad016971c5eae5f45570a82acf3eae8b4fd1deffab63f034adb6dae8a9ed26d6516d9460fb35fac923ce9ec756df99d5c1c525c63e8eb8ccf7617665ca784100cade08313c7b63693a0fe86b047eb983c920307c6b5630e59d5e6ca88153275b310955a768b5144a747420a9adea203d691a7ef40d4275ba0c910d8389127aa736dd3bc444ccdaf8cf4d7cc74b2741fc8c79b20d175fdfa9d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f00000010c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0x7, "7ce1d750", '+*\'R'}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x2, 0x0, 0x2, 0x80, 0x8}}}, &(0x7f00000016c0)={0x84, &(0x7f00000011c0)={0x40, 0x1, 0xfd, "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"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001480)={0x40, 0xb, 0x2, "3083"}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000001500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001580)={0x40, 0x19, 0x2, "24c5"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0x8a}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0x5c}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x6}}) (async) 03:14:16 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x7, 0x0, 0x0) 03:14:16 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x48, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:16 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x8, 0x0, 0x0) [ 1236.897567][ T6145] ? find_held_lock+0x2d/0x110 [ 1236.908345][ T6145] cache_grow_begin+0x75/0x390 [ 1236.913135][ T6145] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1236.918625][ T6145] cache_alloc_refill+0x27f/0x380 [ 1236.923678][ T6145] __kmalloc+0x3b3/0x4d0 [ 1236.927943][ T6145] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1236.933685][ T6145] tomoyo_realpath_from_path+0xc3/0x620 [ 1236.939265][ T6145] ? tomoyo_profile+0x42/0x50 [ 1236.943968][ T6145] tomoyo_path_number_perm+0x1d5/0x590 [ 1236.949457][ T6145] ? tomoyo_path_number_perm+0x18d/0x590 03:14:17 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x49, 0xfffffdef, 0x0, 0x0, 0x0) [ 1236.955120][ T6145] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1236.960974][ T6145] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1236.966985][ T6145] ? __context_tracking_exit+0xb8/0xe0 [ 1236.972470][ T6145] ? __fget_files+0x28c/0x470 [ 1236.977169][ T6145] security_file_ioctl+0x50/0xb0 [ 1236.982131][ T6145] __x64_sys_ioctl+0xb3/0x200 [ 1236.986825][ T6145] do_syscall_64+0x35/0xb0 [ 1236.991265][ T6145] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1236.997358][ T6145] RIP: 0033:0x7fd05c028e07 [ 1237.001784][ T6145] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1237.021584][ T6145] RSP: 002b:00007fd05a99c0d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.030116][ T6145] RAX: ffffffffffffffda RBX: 00007fd05c13bf60 RCX: 00007fd05c028e07 [ 1237.038108][ T6145] RDX: 00007fd05a99d110 RSI: 0000000080085502 RDI: 0000000000000003 [ 1237.046100][ T6145] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 03:14:17 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4a, 0xfffffdef, 0x0, 0x0, 0x0) [ 1237.054091][ T6145] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1237.062082][ T6145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000022000 [ 1237.070080][ T6145] [ 1237.074006][ T3653] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:14:17 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xc, 0x0, 0x0) [ 1237.453394][ T20] cdc_ncm 3-1:1.0: bind() failure [ 1237.483272][ T20] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1237.503675][ T20] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1237.533156][ T20] usbtest: probe of 3-1:1.1 failed with error -71 [ 1237.558013][ T20] usb 3-1: USB disconnect, device number 14 [ 1237.593324][ T3684] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1237.599474][ T3653] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1237.607394][ T3684] cdc_ncm 4-1:1.0: bind() failure [ 1237.632180][ T3684] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1237.646427][ T3684] cdc_ncm 4-1:1.1: bind() failure [ 1238.023468][ T3653] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.203228][ T3653] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1238.212319][ T3653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.230110][ T3653] usb 1-1: Product: syz [ 1238.236307][ T3653] usb 1-1: Manufacturer: syz [ 1238.241084][ T3653] usb 1-1: SerialNumber: syz [ 1238.506165][ T6198] UDC core: couldn't find an available UDC or it's busy: -16 [ 1238.515362][ T6198] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1238.535703][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.542039][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 03:14:18 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 03:14:18 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x8, 0x0, 0x0) 03:14:18 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4b, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:18 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x70, 0x0, 0x0) 03:14:18 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 3) [ 1238.616032][ T20] usb 4-1: USB disconnect, device number 48 [ 1238.714396][ T6300] UDC core: couldn't find an available UDC or it's busy: -16 [ 1238.743110][ T6300] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1238.963162][T20684] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1239.063113][ T20] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1239.343342][T20684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.354623][T20684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1239.364850][T20684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1239.375064][T20684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1239.385314][T20684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1239.423180][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.593236][T20684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1239.593338][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1239.611606][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.613734][T20684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.619775][ T20] usb 4-1: Product: syz [ 1239.632499][ T20] usb 4-1: Manufacturer: syz [ 1239.636552][T20684] usb 3-1: Product: syz [ 1239.638807][ T20] usb 4-1: SerialNumber: syz [ 1239.641588][T20684] usb 3-1: Manufacturer: syz [ 1239.651218][T20684] usb 3-1: SerialNumber: syz [ 1239.743366][ T3653] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1239.750020][ T3653] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1239.758943][ T3653] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1239.943487][ T20] cdc_ncm 4-1:1.0: bind() failure [ 1239.951902][ T20] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1239.959201][ T20] cdc_ncm 4-1:1.1: bind() failure [ 1239.963133][ T3653] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1239.970552][ T20] usb 4-1: USB disconnect, device number 49 [ 1239.993586][ T3653] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1240.106182][ T6294] FAULT_INJECTION: forcing a failure. [ 1240.106182][ T6294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.126357][ T6294] CPU: 0 PID: 6294 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1240.136821][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.146986][ T6294] Call Trace: [ 1240.150279][ T6294] [ 1240.153226][ T6294] dump_stack_lvl+0xcd/0x134 [ 1240.157847][ T6294] should_fail.cold+0x5/0xa [ 1240.162375][ T6294] _copy_from_user+0x2c/0x180 [ 1240.167087][ T6294] raw_ioctl+0xf1c/0x2690 [ 1240.171520][ T6294] ? __fget_files+0x28c/0x470 [ 1240.176300][ T6294] ? raw_open+0x4c0/0x4c0 [ 1240.180639][ T6294] ? security_file_ioctl+0x5c/0xb0 [ 1240.185753][ T6294] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1240.192009][ T6294] ? raw_open+0x4c0/0x4c0 [ 1240.196336][ T6294] __x64_sys_ioctl+0x193/0x200 [ 1240.201103][ T6294] do_syscall_64+0x35/0xb0 [ 1240.205524][ T6294] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1240.211601][ T6294] RIP: 0033:0x7fd05c028e07 [ 1240.216126][ T6294] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1240.235734][ T6294] RSP: 002b:00007fd05a99c0d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.244150][ T6294] RAX: ffffffffffffffda RBX: 00007fd05c13bf60 RCX: 00007fd05c028e07 [ 1240.252121][ T6294] RDX: 00007fd05a99d110 RSI: 0000000080085502 RDI: 0000000000000003 [ 1240.260094][ T6294] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1240.268061][ T6294] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1240.276037][ T6294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000022000 [ 1240.284005][ T6294] [ 1240.333346][T20684] cdc_ncm 3-1:1.0: bind() failure [ 1240.349178][T20684] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1240.364452][T20684] cdc_ncm 3-1:1.1: bind() failure [ 1240.384655][T20684] usb 3-1: USB disconnect, device number 15 [ 1240.640245][ T6334] UDC core: couldn't find an available UDC or it's busy: -16 [ 1240.657994][ T6334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1240.686474][ T6334] UDC core: couldn't find an available UDC or it's busy: -16 [ 1240.707742][ T6334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:14:20 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x2, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xec}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x22}, [@dmm={0x7, 0x24, 0x14, 0x40, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xe5, 0x63, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x20, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xff, 0x3}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x9, 0x1, 0x9, 0x20, 0x1}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x16, 0xad, 0x3, 0x95}]}, 0x2, [{0x14, &(0x7f0000000240)=@string={0x14, 0x3, "a067a4f67662088a323185cf6bb1672a561a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="0004440017004409af1fd7a7e7f6d20c6b68700e7a9ae55bb2ddd64ae67697845a4309c464122c6c9cf787c6462c2884eb3d0fdc62445f674b8f42e57d947e0fbcb6000000001b04423bef16384e1340ee46c98e87375878117641ba7afe80d71371df5e3f787a8cd042730c9bd1dee2053773000000000000000000000000001b7d93d78535ab1724a72cdb97bf340045a2ca76cf98cf50602f0d3d5bd9dae9cb634e0705ffdb94f564862a1f92a0088f43b4b92dbda112e5f35d2566357b1e431a41da2b78de0eda03b90ad9e6a417b4f7b5386b13efcd15e8d0a7d965bb84589ada035ec45ee080d31095c103bab32b"], &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0x8, 0x18, "56279a71db0c16e24702a7c1ccdea520c35323fae76eca6b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x9, 0x5525, 0x9, 0x200, 0x8f, 0x5, 0x471, 0x14fa, 0x40, 0x0, 0x8900, 0x800}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000700)={0x40, 0x9, 0xc5, {0xc5, 0x22, "d28328685f665965bb4a03ef546c5685faf2455c0a725106ad9fd2c32b3a52ffd65d4228fc184ebe799ee7370b70eac419219586b4c7731716fccfad828df902bc3b2ff17a845437a1c8f7febe18329dcc38eb78afb06dd087350e6cd4af81403ba04d2bc5cb2402a056cc16557f433dce9eb584e6882663f6fe3d4f24fee774fa50f70d4be70adc1914fb6d5b3ef89d42d5350a493d396444917955aeb4285c65d4d92753c3e93ae8154bac86fd04fc4dc11f4d4fedf6e9751c958032fb58a7b40713"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000880)={0x40, 0x5, 0x84, "495361a6511e11b07d22c588b79d16d44d71c25f7bc5d09549a0ef5e8c56d7b8c60ef82cc340cee2f7638e29ce37f6a48ed7af90b5cd80fa266c45247ac95e56a0a8333ca62e1881052d30f431dddf95b049c7811542e8634e42b486c72eff42569e2aca3e2dd07ee5e38aac502dd50bb989397c2b2a7ca1482e557ced3e602c135574d9"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x9, 0x80, 0x401, 0x4, 0x2, 0x2, 0x6, 0x4, 0x3f, 0xffff, 0x7, 0x80}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000a40)={0x20, 0x83, 0x2}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x290, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xc4, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x510}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0x1, 0x3}}]}}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x2, 0x1, 0x0, 0x20, 0x27}, 0x45, &(0x7f0000000c00)={0x5, 0xf, 0x45, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "54e5a2b6184a45bfeca5673b2a3c1a5c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x5, 0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0xc4, 0x0, 0x2, [0xfe403f, 0x0, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x8, 0xfffa}]}, 0x4, [{0x88, &(0x7f0000000c80)=@string={0x88, 0x3, "4c53fdced04a3d511896dd9d2011dd10361ce4b05c6716c4d3a3a07166fcfdacf6a02b7b3344291fbdd2b784def0f5c662550015242ff0b77786543b17f563f1a65b5c6976c5767ce0982788b9462775676e4a77c547ed8990fd2bbafd40d7dd9efa614cccebdbb75bd5163052d87e5f8dcfc6e006300282e6c4d1a65f27cd142fba4e3b2384"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xa872b681de32df62}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x438}}, {0x68, &(0x7f0000000f00)=@string={0x68, 0x3, "78bf0327f8ce5e62b07d9a66862732bee1dbd462443e647581389f22e059a224584e9fab02c90a8c210f4d79a0c4013b42fd1e52d580035f21a9a312bdf532e93fe38c11cefc9783f7a1649f74f34633662e237f94d6140f7e13b2a9e5bb5bc08969bd87c36d"}}]}) syz_usb_control_io(r3, &(0x7f0000001180)={0x2c, &(0x7f0000001000)={0x40, 0x24, 0xba, {0xba, 0x0, "011dff836dadc0154cbf5a28dae30f5dcf5b1856939d7ffabee227a729856f8ad016971c5eae5f45570a82acf3eae8b4fd1deffab63f034adb6dae8a9ed26d6516d9460fb35fac923ce9ec756df99d5c1c525c63e8eb8ccf7617665ca784100cade08313c7b63693a0fe86b047eb983c920307c6b5630e59d5e6ca88153275b310955a768b5144a747420a9adea203d691a7ef40d4275ba0c910d8389127aa736dd3bc444ccdaf8cf4d7cc74b2741fc8c79b20d175fdfa9d"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f00000010c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0x7, "7ce1d750", '+*\'R'}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x2, 0x0, 0x2, 0x80, 0x8}}}, &(0x7f00000016c0)={0x84, &(0x7f00000011c0)={0x40, 0x1, 0xfd, "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"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001480)={0x40, 0xb, 0x2, "3083"}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000001500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001540)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001580)={0x40, 0x19, 0x2, "24c5"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0x8a}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0x5c}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x6}}) 03:14:20 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x5d8, 0x0, 0x0) 03:14:20 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xc, 0x0, 0x0) 03:14:20 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4c, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:20 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a5c90e7d6ebfe03b7c79f4b513695e310043d009b250102030109025d00010000000009040000000cc91900052406000005240000000d240f01000000000000000000052401000006241a000000120100000000000000000000000000000000052406000005240000"], 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x40, 0x21, 0x6c, {0x6c, 0x9, "712a0777a3f3494084c3a052216b49fe35dbc596e0f903f255bd15e91ce9a4ef99afc2ae8c69acbaca45bc971f0a9341d3166103b5fbcf072113e8cd1c70ec0e3de59ffa6ab0197d3b257261f15d6d36d8209af14b63cf89d5fcb669c1dc92640eb18e7f65ba26d0114d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x40, 0x15, 0x52, "589d619656d71bfeed6e91659d73a9b057310672b5ffce7b933c56005ab06921240ab06d33470c2e9dac771e8dc87d9e4c7c9d6f07d14a24dc9aef5512c310ed629604d8d6f79d9449b712fc1c349dba9e32"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x6, 0x0, 0x29, 0x4, 0x8, 0x1ff, 0x2, 0xd6, 0xcf73, 0x7d, 0x9, 0x200}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x20}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x8001}, &(0x7f0000000a40)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000240)={0x40, 0x24, 0xfa, {0xfa, 0x8, "1bbe281de09b6e4207104e05963ae8e3c9766058b87745bf738b0de4a23d72a35ba24b6e39cba3149524243a47f842ab09cd4270076e36365a6db2488ae0d98e6db8af14235d3e7f5bf15aee948d92c8e915be6f7247b902ad6c9ec895b3f64a2a9b195bf9ee4c69bf430805fb7790bb405d88ba68f3af4c3f84dc54a5b0ac1409fba23d0fc43d284ca4dcaf1391bde7edab31b3b1c4e9c8e0854401b60babb7e8871b16b03ed401dc7901be20d459cfce4010f1dc0e7fb70193229711b676ac9ed1c4084e09e0c57f0705aefa06bb19106101dfe8fbf8ffbf798dfbe859b9e8b85a43df58830a3665638a22cf6a174b9852cd434e34b6a5"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000700), &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x9c, 0x1, {0x22, 0xfcd}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x0, 0x16, 0xfc, "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"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000740)={0x20, 0x1, 0x100, "4f4fd27924839a951799a7faa8757854dba9bf469c5e11b8bb995f9ee501e11abd65603ee794edc4bb2e98bd19ebb07aa88208887fd4f6d2c32722f7ae876fbd4c9b475681a3d9b8bd45a6baebba78f884a94451f4a8b241e8e31e3f9131086c694ff82277d69646554658d58d5c8d6decf027e5ae2e366eb813ab8052eb6e59d2d360e35443e841a01ceee6dbcab5c4ce5d08931c32224427dc9eaa5975c94de98e94a06c971ed01f9527a930172b8000000000000000de6759f20c5290aa6af5e05e36352b8bc27828c06f1ab53973e29b0d60f3714a02b9022b45fff611d3042dd0e8d8b7294b2b5273db343a749c37f60652c41af1b2aecc11d6ee7b9d2d"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_usb_connect(0x0, 0x10de, &(0x7f0000001080)={{0x12, 0x1, 0x450, 0x99, 0xfc, 0x88, 0xff, 0xfe9, 0xdb78, 0xee8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10cc, 0x4, 0xff, 0x9, 0x50, 0x6, [{{0x9, 0x4, 0xe3, 0x7f, 0xf, 0x3d, 0x32, 0x14, 0x7f, [@generic={0xc6, 0x3, "6d471e13cf95de9f6509cbf85de70f075a09dc7534f9b9dca0d78030440bf899bd3abb2502b34cfc647204495b5e87f5688529e2a7cf33442978e2568f59aa4be3fb30acf4cfc190855ad10b54aeb48d0c9e17816a9014090d66ee888ab2b4980c66e2bb4570938f4f43e0757b5a0c3ac11213a6743904433b23f70138799d37e73400d20bc0f815d16fea0bbe85674c3161673d07f010fef0d73411910150fc18a19396e3c90c1c539238e621f45a2fb1373e58d263ce7f6f8ab4aee93af1292c3652f2"}, @hid_hid={0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0xbbc}}], [{{0x9, 0x5, 0xd, 0x10, 0x1ff, 0x80, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8000}, @generic={0x4, 0x5, "a380"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x81, 0x9, 0xf8, [@generic={0x21, 0xb, "8345edf744f46b786a9d9a0e2134c73ccc3a4c52c87d2ee378e325dfe87322"}, @generic={0x77, 0xf, "36c7735d6c370946a309f7e297f0a1427aeb0214c3d45a708ac0a2c956b6d4b16fd4ad541e249fef0b5ab24029bc516cc842ad842299c2eb63d49a0f5c9c505aac12c2a4c4bb12ba6eb698808d82c4df03c3f581491f6957422c415a5034fddad7b1e5deb0021eaa8c081312de9cb3f473c736cff3"}]}}, {{0x9, 0x5, 0x8, 0x6, 0x400, 0x81, 0x4, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3502}, @generic={0x61, 0x11, "9c13ed4068ab1e193ee53b703480d9f3f0e02f3fb258eb3660a5d7fb231f2ccfcecc4568eb17eb2d49d6debeb0355591824ea3b0e478586452e6770ae12c34045d1b6c9f551dc0da15f2803d2fbb5da81b13d6f87266e2f9352e603098285d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x1, 0x10, [@generic={0xa, 0xc, "ea389bfbc8a51b7c"}, @generic={0xa1, 0x23, "dda8754b25db0c60abce0aa677572a0246e7c36ef7403a10fdb6935dc5de90476f7c7e4835365474e8cd12b0d5296b851de482c9a87179db1468315a57ab44d1afe7441c2f446ee2f5cf3f5e875dc609f011097c429a99580f0349d0217af769ca252a17fecd66434cc0f9a8a2817dbcbeabc725f3a63b3a0ca41a00d11a1993c864a88d32110974b7402fb8779cbe1beefd3a4cf58b958aaea273e2e6d0cd"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xca, 0xff, 0x9, [@generic={0x6c, 0x3, "2289e4469600d746bfe50489b3e6f4ef6b084eee89cad532dd85ff62344d2b8956c2839c39c5f58d7e028585abfc0f36a486cfa7b32fb284160e60f9193d001829ab1efea2afa2965c7527d413c4592a755ba280be180513ed1a6022e5ddd865b1712b3d25c08beecd50"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x80, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9ec}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xff, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x80, 0x47, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0xc1, 0x7ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xd8, 0x2, 0x4, [@generic={0xbf, 0x1, "1fe80a667e3b79126252740ba7bfad42f10d0fa4fe52fe40b603be2b931955c34660ad6f556042697952ec84e182701c21c2335e875757a970833c03fe916002a943f95a454eec8b0e96565b456db6e991b8ab16b54263905e454a681935ae9841bdb4a7755066efec934282da3b5a156a98637bf845ccb19f67a6009151e0b9077b7e608e9cae9c4d8a4c79ece6108c966debe6a99907f964a9ccfa128f782aa396a9d16df44693793f31125f8513055546a8cd266689da8929d42660"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0xff, 0x80, [@generic={0x20, 0xe, "3535f30e95b733c0d3d32242d4d95df0bec9f2767c49d785349f131829e5"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x3f, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0xc, 0x7cf, 0x0, 0xff, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0xc4f}, @generic={0xae, 0x24, "a8c1839e94eae6a8928f386dbe755de78bb5a228d6a4f39d32790652ef53eacfec1579244fc609e5c3e50aa7e9467556d5c6128cbdef2be7085e6feadf1faeba726a95dcb8f73dfe20c452d9ab76c9a222a29c63f29884c1b8888dca3963155e18c07c716e474998cce76b2d969fc74b1576229933cc5d07b72d26dffc72f33607156babb3358d609e8357441c4665ce4d1da6778e16b4525d67c4362871e41ab13016f071467b3bc9134c90"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x1, 0x2, 0x0, 0x4f, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xff}]}}]}}, {{0x9, 0x4, 0xfa, 0x6, 0xb, 0xab, 0x8d, 0x20, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d9aebf"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x6df, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x4f, 0x80}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x50, 0x24, 0x13, 0x70, "ba5aab2e565a07a0804a8c0684d0ba3ce6ac835f4230e7d5a079c8689a4558292744e4611911a2e53add7c4fe38067248ede8105fbde1f171789f659c3220475f8977df1d10b65f020ca31a1"}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x5, [0xdf, 0x533, 0xdfaa]}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x1, 0x20, 0x2, [@generic={0x72, 0xf, "049a784125ccc88de55883704f99dc82fcb28cf4fe2563a00bae469c229f73e5af4d1aedd80244cfb55f18df42ae412947b6c8c92a69d8fc642702f9e16df563a5d60d3b2beed6c7eb88aa9788eab3b986d1c000473382f67fe4fcaeed935b58dc4ab130e93fa90ed8b1b7ed6846f195"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x20}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3f7, 0x7, 0xd, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x9, 0x40}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x40, 0x7, [@generic={0x45, 0x9, "26d011364a6d71f0c4f9dd5c8523f4348c889c536bcc1a20afb3c0252431c8fb8f86c6347a367e62e954bd14c1bef5bb9636e9b694700892ea94b9fb430112f7919166"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x6, 0x73, [@generic={0xfb, 0xc, "38a4aa369e10712b3ee9b8345475e15883e3d06dfa02782f3f6eb6be0c2e800009885f9e60e0365c5ab9f3ef530a1fcced1582e0721e393b10077ae29c00bf7fa6befc895fa32d24108126b28b0caef9c719b58fc9bea12f786b3d43ec936a565059fdb11e711d7268b690d3f581612ed4e859347d90b5fbd7d420b7cafab1a1d2ba64ff63ec95fe68420ddd01da17dc4d177e72152e9f7fb4f61a5aa53fdce29829f1022d9036a06ebfac9432fcfa66efea5d7e67346a91562cfc8102b9e707f9b1f78fdb834aa73e3dc7ef7c31ff488c522dba79e8c1ef9d042b4c5c6a7e43bdd86a81e6ccabaa7f7b44209549d745bbed5d4521bd35b192"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1f, 0x8, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0xe2c70d41cc3a5fc5, 0x10, 0x400, 0x3, 0x15, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x80}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x1, 0x1f, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4, 0x8, 0x1, [@generic={0xcc, 0x21, "2659f2a3d1bc63da8c6260aa1a795061eba5d0b0fddeda6c3320a23416ead17a91b28e8d07399b3f9949e36916f1c23a2efa3fdb1d8a28704cfff89a915e924b2542a10f15c602d99af7e7d56345ed2d039e5de3b2cd03f4872d7714e00ace777c454b99a593f96b4af72b78ea59a643761f9b26c280ebe0ec1b1528abde2896375ec3539f479c4e7968cdc711b080804aec238ca582d68fed1daf774f4269dd222d1b00fe947c54d0a7b7a40c3542557dcb0dc2912638fd5413c899c7d59aac68a6b35e13c6d2360468"}, @generic={0x51, 0x3, "b852310887c5f4d115c77697c757be4344a6350573aebe4f3b76734f4c085fab6d57b407f88e0dee3aca75a9c1e3e2b98f9509ef2e164b36ad4733a997b4b7045bccbaad097b59ff778f4a992d477b"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3f}, @generic={0x2a, 0x23, "9652e3f25950fbc862f68bdc5f081343c08a894abb9cdb9471eb4fe7c98f19e8ae9bec4d16852205"}]}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x7, 0x2, 0x6, 0x0, 0x6, [@hid_hid={0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xbae}}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0xff, 0x5, [@generic={0xa0, 0x23, "626231e7affb29c98fb2d8ac3fc2bc950465ba080c1be6d7d4479760e2a5de25377a69a827f0e504366690c1d81900767d058326145d0fd828c2171dc8a19dd92be3887cd4541a9685fa400dd6c181f60d3f8157ce532a0380e1fd87698c65ec4bc661d4e0de351a2e9f8e10fb33e2a11521628b2a16bd863109fc78bcae2d22e242d7d75e02e26a4ab3d10849551f0bba24c27b86ab56e3c42906b8908f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x81, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0xbe50ca4003cfb026, 0x1e, 0x10, 0x5e, 0x0, 0x7, [@generic={0x3b, 0x3d, "8978c5dd1b6c596d01c46afe28a47e785a928e24bf00ed752c4c865e0b0f6d32811abd9c6621c06b2405657b6d12552ae0f76a59c227638190"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1fa}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x1f, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa5, 0xfe01}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x2, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}, @generic={0x9f, 0x23, "b22a32f17c73a04476c4ddf963f18502cd5a7c10e29d9970aadd7f9f438aa0238704b0de56caca0bb682311341ec952dc2f873ccf1bdd04dfd68fc57b3295f0b3fda3631f5b9edf7a73cfd5e265c1e6d737e79d7d7ed62dd31981db57ed4768cec43ea1a7d7df497974ba549c50319307cdbf36933bc4f46772496e38b71360d518b88fdfb3ff6cb9dd2a0b84d52f7689e49bf8e101928942f9175d848"}]}}]}}, {{0x9, 0x4, 0x24, 0x6, 0x8, 0x2, 0x2, 0x2, 0xb1, [@generic={0xf8, 0x1, "25de6e717a3362237e744d6667b82c28b99e84e074dad5a0d840c7ad426d12ddd58da34271cec519b026d5299338b7d632c7c09f9f227c6a137175e43f4f96bb1ffa1540a374835d1e72ad675b70c9b39ca25fbc4907516e611296a8eacd718751bc036834cf898be8d9c843be30d3da2fec8b086e6954db067d27ac5a550b577f9ff574068eb76c280eb817da96dd6e0b248c0a46d731cfe12bef3c27ab33a433ba23ec1f4bbb75b8b8eb422d736cef032474c0e840055037989112f30e04563e82e37005aaa1cf2abd6d72f2a33f75f9f329e59bbe49530bbfbbd572a77f57d7ab2ed066ca114cda92fbe62f9d756d2d30b6bc4c2a"}], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x1, 0x80, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x6, 0x51, 0x20, [@generic={0x46, 0x8, "add433816468cd93c754348a87b1aa894ef4564e110733342cebb907f69ab5d6742117098b0429b5bb893dd18eaa0a0c5d53cecd727d3b070309a7abeb730dc782dfacfa"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x7, 0x3, [@generic={0xde, 0x5, "ea2f6b65703132ca41274d9716fd7c6acafaafa9d87411c4a2d60d632837a9f9006e65a9744d5a8f0ee7556ae08512a97ca11165d15d05dea1f8bea954c69334300455fe814b6d42b0563b98be2430328a3f3bb34b91e372b1fffe3d5cf9a53a8ee5d4311d81706c7cf6b9eea00837813889db22c7522c097d303d4122b8bb35dbd592df2a8958641f4e67e387e642e02dbcedb7b06a480e2f693124b1df73fbda2d271ad36f437ab692e6cfa5b5508ae51c768964dcd2cdfdf2f14adc90ac7ce848f641a69207ddc382207dbf8e729864c17faef7a3405e778cb27d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xaf, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x1f, 0xfc00}]}}, {{0x9, 0x5, 0x9bf6ee1dbd2e7a99, 0x2, 0x20, 0x6, 0x8, 0x2, [@generic={0x4d, 0x10, "c9e3eb07fde7ba0b223c124317c9108a378ca120be83499f4bb22629c821c02bd3f8ec4fb340bcaab05c8d7c813b3ed03db842afe7ecaa8f1df3377a2129ffa2836330915909835b2c51aa"}, @generic={0xbb, 0x2, "864dbd9871175709a22e5ba566c914a6a21b4b78c60e81d7268a22f4f53ded4269fab65aba9b40dc1144e6894b5355c6ccef49305981f235b5c69dbab0accf12dbc820098eb7638d3245bf6f633ee9826d5208937c91128ee67375052e4bead0a93001e12fc3efd9c178f798a98de35783bc09cde6d436986a01913f93f210690d0d4a439366df2ecf61bf66e7401faa4cd9d76720241406edef5e09a495f0d9bdd2149d70db196f8240dd6043363f6d2f128918c6a64480be"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0xff, 0x2, [@generic={0x2d, 0x3, "453e7d748d6119111ab08ffe863b2b8f046371e84705e66df5fc5fa48eb5bae823d3b6ee6fcc0d55153f9f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x1, 0x9, 0x8, [@generic={0x9c, 0xb, "0764cb44acb172c918fcd9e1e413005f2a78286e6f8d348382b9a6f99aa190219ee7ea4f9a23a7a93f03e3f379d132192018156424b3c8cf9fe3dc6d704e5e0f80d7bd5296dbc8d2199f71a87437a1b35be2f6b6261b254719026b00712633ad241c7f09e1ba14d1937de62b32fe811b62399b4894e070a024354b5b1c5a3dba0976e2a3f06b9775f02cf4110a6af19704aaea804635aa1733f5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x6, 0x40, 0x31, [@generic={0xf1, 0x11, "37d8ee1a63e238e53d76d421fa99dda5299ba50f8864180bef9a5ae8359387f0a33aa7b207bebeeb568618785251e21a734993a263be4f5223a51e26cc08ac9c211c48cfa6899a00703ae8c32781948042a39c8164f421b004a669fed74a7b815478cbf2d3bdc5dc8c3d0226eb4ccbedabc56244a0de2ef6fd9b540bd0dbd4487bbe7b2d385a6beaea5ba37bf1268499a2ccb38f831d32cdd0fa2c44b413b2f7426b41097ce2f2366233c482645be974c2d72fb5b0ccf09ab48774e3958cb36121a8ff867d63ddf32cc9c7ed2ee9242d7f7c10eedb3b40a5f20e24d4fa44b20ffc42930e2a8c2ed43cc34132cab5cf"}]}}]}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002180)={0xa, 0x6, 0xc37b880e9e2a87d1, 0x9, 0x7, 0x1f, 0x20, 0x7}, 0xb0, &(0x7f00000021c0)={0x5, 0xf, 0xb0, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x3, 0x80, 0x4}, @generic={0xa0, 0x10, 0xa, "2acf2362864c1b17fb19825599522507cfacd2a800f24c3b2696729c665e7bd9313b3c9c9ea8c22d91e9e15241c6eef604f7169c7f73347f8975d8b5368ea4db3065766d1978858aea28fd269693f02de964e77964014c352ea7b1de3f44143e2a1fb1dbcf3dff64acdd5cce661285f9d05f1271535c5a0cf37da8004615aeaccc7786ccb34f4c02c0d09939164b3d69fbebd112ebb7ad55e0179a825b"}]}, 0x4, [{0xf9, &(0x7f0000002280)=@string={0xf9, 0x3, "b269af3471a5303f3d34676578daec9aa3dd425103a860cf15022ddbc7ef5a96aa04e10694064a92ed76d2613e182dfcb830e81b802ecd000be551a1d26ec60804d0138666298985f29b7d6647be0ef11df068e5c155321086e21486f9d3444ceb3ac98f40a9c12dba8a44e12d444d03bd3dc56985005572eda3503230cb316a51e230640b582ac0f15bd1fae56c7c6ce2eea35d66ad84180259a492a8096a4e8ab8ff3dc287a22e94ff823e3b40fc4dad4613a31385fb2510c14d182771708c0068dd5822fd3ad510afb68abf9592a2eaa3af8c02dcf0e9df82bab2dd73a595c15711328a51098fd2b3d021eaf7278bf2b4050dba36ec"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000002580)={0x14, &(0x7f00000024c0)={0x0, 0x21, 0x79, {0x79, 0xf, "bb856c97a90da70b245b2620db24dfdf9554e16a099c13faa0b43a664cc62466323662580a795b237cc8aa3f023fe18ea2a7f434b54c812eaba3873a1ba5de0f5297475a8e814148030a90fa31599edeba4e4d4fbb492d3126f835ec3222f288874ce23f4b29f3d55802dc3f9bce37b9d6ccdba0d0df51"}}, &(0x7f0000002540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000027c0)={0x44, &(0x7f00000025c0)={0x20, 0x6, 0x34, "af34922fbb0e9e7d7aaa147320f61d4334005b2a944894ad71770e3263f1d0cf3e894c71ba94c6d23c2048a8a8e26abb3141ca46"}, &(0x7f0000002600)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000002640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002680)={0x20, 0x80, 0x1c, {0xfffa, 0x3, 0x8, 0x7, 0x8000, 0x3, 0xffe1, 0x4a0, 0xff, 0x101, 0x80, 0x800}}, &(0x7f00000026c0)={0x20, 0x85, 0x4}, &(0x7f0000002700)={0x20, 0x83, 0x2}, &(0x7f0000002740)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000002780)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x20, 0x4, 0xe3, {0xe3, 0x8, "23fca8fdfb8285c07da0cf5e734ef8c1b3cedadfa03cafaf43496f8ae088409413bd20722cf609e3814119080cee3b626790dc128b1a174b131a18d54abbbc80ce6f4649b3ef98c0eaf93842211ae95d98263bc554736f3b487afc23685ed429eb43bbeb795215b0f5c9a5dcef799b9261016b47ba45f650399aa92751050c5f460358a3e8f9efbe4db659a18efad7b5ec14c4503abea627fca13db6afe7e7c1be423388ca349495502797e9e4a65f5a46356c8e88fcb5d27ef4f683ef3eb6fb298654afa6cd894835f6121cc7e71e134a854e8395f956a1e6dc396b34d49349a2"}}, &(0x7f0000000c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000002840)=ANY=[@ANYBLOB="200a8f000000f154a739d1ac499478400e27122773e5335ba685f50fad62d0e75ff802f0b4f84b6bc2b63e2a9daff0226d6868db75bab31a7b6ace5d758922da43f0c33d399790b66a8bc24222dda34e3bad3cc1a9d32ba264e8c3874f07a15e62056fa8088912485ce44c68c4137bb0b96d9c34b7e73d6aef384ff14714ebe182bd84281cd568618426cdaa056cbc5592018adeba2e88c2b2ee1a279278404e6bc54413be695cc931d7900616ab3fb1281456538b5cb3974f81bbdece9f59cf455bd35d3c91d896ae35edc57de3beb2a910288c000000000000000000"], &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xb21a, 0x7, 0x8001, 0xffff, 0x0, 0x9, 0x8, 0x9, 0x7, 0xffff, 0x4, 0x1000}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0xdf2}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) [ 1240.731449][ T3683] usb 1-1: USB disconnect, device number 76 [ 1240.748006][ T3683] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM 03:14:20 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x700, 0x0, 0x0) 03:14:20 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 4) 03:14:20 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x70, 0x0, 0x0) 03:14:20 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4d, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:21 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xc00, 0x0, 0x0) 03:14:21 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x6cd, 0x0, 0x0) [ 1240.956715][ T6367] UDC core: couldn't find an available UDC or it's busy: -16 [ 1240.995501][ T6367] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1241.052149][ T6376] UDC core: couldn't find an available UDC or it's busy: -16 [ 1241.053131][ T3758] usb 4-1: new high-speed USB device number 50 using dummy_hcd 03:14:21 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x11fe, 0x0, 0x0) [ 1241.103855][ T6376] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1241.233032][ T20] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1241.323130][ T3683] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1241.502049][ T3758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.603262][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.614819][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1241.636603][ T20] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1241.646636][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1241.673194][ T20] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1241.703586][ T3683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.723434][ T3758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1241.740984][ T3758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.751712][ T3758] usb 4-1: Product: syz [ 1241.763272][ T3758] usb 4-1: Manufacturer: syz [ 1241.769739][ T3758] usb 4-1: SerialNumber: syz [ 1241.844828][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1241.854365][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.862467][ T20] usb 3-1: Product: syz [ 1241.867206][ T20] usb 3-1: Manufacturer: syz [ 1241.871901][ T20] usb 3-1: SerialNumber: syz [ 1241.877024][ T3683] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1241.887122][ T3683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.901223][ T3683] usb 1-1: Product: syz [ 1241.915397][ T3683] usb 1-1: Manufacturer: syz [ 1241.925687][ T3683] usb 1-1: SerialNumber: syz [ 1242.036052][ T6355] UDC core: couldn't find an available UDC or it's busy: -16 [ 1242.054105][ T6355] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1242.228645][ T3683] cdc_ncm 1-1:1.0: bind() failure [ 1242.241599][ T3683] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1242.256536][ T3683] cdc_ncm 1-1:1.1: bind() failure [ 1242.272647][ T3683] usb 1-1: USB disconnect, device number 77 [ 1242.336770][ T6366] FAULT_INJECTION: forcing a failure. [ 1242.336770][ T6366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1242.359189][ T6366] CPU: 1 PID: 6366 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1242.369651][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.379732][ T6366] Call Trace: [ 1242.383028][ T6366] [ 1242.385968][ T6366] dump_stack_lvl+0xcd/0x134 [ 1242.390580][ T6366] should_fail.cold+0x5/0xa [ 1242.395111][ T6366] _copy_to_user+0x2c/0x150 [ 1242.399645][ T6366] raw_ioctl+0x10c3/0x2690 [ 1242.404088][ T6366] ? __fget_files+0x28c/0x470 [ 1242.408781][ T6366] ? raw_open+0x4c0/0x4c0 [ 1242.413136][ T6366] ? security_file_ioctl+0x5c/0xb0 [ 1242.418273][ T6366] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1242.424544][ T6366] ? raw_open+0x4c0/0x4c0 [ 1242.428904][ T6366] __x64_sys_ioctl+0x193/0x200 [ 1242.433690][ T6366] do_syscall_64+0x35/0xb0 [ 1242.438133][ T6366] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1242.444057][ T6366] RIP: 0033:0x7fd05c028e07 [ 1242.448485][ T6366] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1242.468115][ T6366] RSP: 002b:00007fd05a99c0d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1242.476563][ T6366] RAX: ffffffffffffffda RBX: 00007fd05c13bf60 RCX: 00007fd05c028e07 [ 1242.484642][ T6366] RDX: 00007fd05a99d110 RSI: 0000000080085502 RDI: 0000000000000003 [ 1242.492641][ T6366] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1242.500603][ T6366] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1242.508718][ T6366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000022000 [ 1242.516781][ T6366] [ 1242.553216][ T20] cdc_ncm 3-1:1.0: bind() failure [ 1242.561706][ T20] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1242.568922][ T20] cdc_ncm 3-1:1.1: bind() failure [ 1242.577359][ T20] usb 3-1: USB disconnect, device number 16 03:14:22 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000000000000000624e41a0000000905810320000000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0xb9, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x2, 0x1, 0x81, 0x10, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b9e83747aa85"}, {0x5, 0x24, 0x0, 0xfb}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x401, 0x5}, {0x6, 0x24, 0x1a, 0x1000, 0x18}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x9, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2f, 0xff, 0x1, 0xf4}, @mbim_extended={0x8, 0x24, 0x1c, 0xa5, 0x20, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xac, 0x1, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x80, 0x1, [0x7a, 0x5, 0x40, 0x2, 0x40, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x20, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x3f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x2, 0x2, 0xff, 0x2}, 0x73, &(0x7f0000000240)={0x5, 0xf, 0x73, 0x6, [@generic={0x3e, 0x10, 0xa, "4a192680e0761b24ed0c3ce334e7ff962f5e49eae550db0c1a358f58f915e79114e47b7ff26ff14b537c6c5409ff6c4e3fc011efe44b2f7de5a4e9"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x51022d8f4d9c1be4, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x400, 0x1e00, 0x1, [0x3f3f, 0xc00f, 0x1bf, 0x3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0xa, 0xf800}]}, 0x3, [{0x9d, &(0x7f00000003c0)=@string={0x9d, 0x3, "5d0ab56ccac15b74014344769a3af84d4bd77a03414d8a1446a333023f565ad511bea2cabc36c40b674037f458a1b9d25d2669f5b1a41a8f6b1313c7cb7148113450ab118b886c4546fc3e717d264da70d59c5036dd7027f98ff1312e581764abf49dfeb5bbd16e4c9bb79e2938752625580124b635ea48caf0f305bca5cb8048426f2f689e34af74a93c4ab6bcf545ae996c159f319c3cb66de32"}}, {0x86, &(0x7f0000000480)=@string={0x86, 0x3, "159cadb6af5fa06c6f75e29cc15f08b671f9c540ebc5fc17fa8b30ecb1cf411b5183a00af666c99c10c65b3324619dd89ca0db3141c873345107cd071a421a55519054df516aca5102885a9d97f4f914ef3fe2172b1940c9e41ee7430846d74067321f8265145f646b77750ddc46624be9077b24f6baaeabb4c2fe8add7cbe50180dc65a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x78}}]}) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a0011043d009b250102030109025d00010000000009040000000cc91904052406000005240000000d240e010000000000fdff0000052401000006241a00000012240700000000000000000000000000000d240f0100"/111], 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:14:22 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4e, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:22 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x700, 0x0, 0x0) 03:14:22 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1f00, 0x0, 0x0) [ 1242.973252][ T3758] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1242.979364][ T3758] cdc_ncm 4-1:1.0: bind() failure [ 1242.990856][ T3758] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1242.997974][ T3758] cdc_ncm 4-1:1.1: bind() failure [ 1243.183101][T20684] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1243.585933][T20684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.596117][T20684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1243.605300][T20684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1243.783360][T20684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1243.797064][T20684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.811201][T20684] usb 1-1: Product: syz [ 1243.820205][T20684] usb 1-1: Manufacturer: syz [ 1243.830849][T20684] usb 1-1: SerialNumber: syz [ 1243.886125][T20684] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1243.897702][T20684] cdc_ncm 1-1:1.0: bind() failure 03:14:24 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a5c90e7d6ebfe03b7c79f4b513695e310043d009b250102030109025d00010000000009040000000cc91900052406000005240000000d240f01000000000000000000052401000006241a000000120100000000000000000000000000000000052406000005240000"], 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x40, 0x21, 0x6c, {0x6c, 0x9, "712a0777a3f3494084c3a052216b49fe35dbc596e0f903f255bd15e91ce9a4ef99afc2ae8c69acbaca45bc971f0a9341d3166103b5fbcf072113e8cd1c70ec0e3de59ffa6ab0197d3b257261f15d6d36d8209af14b63cf89d5fcb669c1dc92640eb18e7f65ba26d0114d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x40, 0x15, 0x52, "589d619656d71bfeed6e91659d73a9b057310672b5ffce7b933c56005ab06921240ab06d33470c2e9dac771e8dc87d9e4c7c9d6f07d14a24dc9aef5512c310ed629604d8d6f79d9449b712fc1c349dba9e32"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x6, 0x0, 0x29, 0x4, 0x8, 0x1ff, 0x2, 0xd6, 0xcf73, 0x7d, 0x9, 0x200}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x20}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x8001}, &(0x7f0000000a40)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000240)={0x40, 0x24, 0xfa, {0xfa, 0x8, "1bbe281de09b6e4207104e05963ae8e3c9766058b87745bf738b0de4a23d72a35ba24b6e39cba3149524243a47f842ab09cd4270076e36365a6db2488ae0d98e6db8af14235d3e7f5bf15aee948d92c8e915be6f7247b902ad6c9ec895b3f64a2a9b195bf9ee4c69bf430805fb7790bb405d88ba68f3af4c3f84dc54a5b0ac1409fba23d0fc43d284ca4dcaf1391bde7edab31b3b1c4e9c8e0854401b60babb7e8871b16b03ed401dc7901be20d459cfce4010f1dc0e7fb70193229711b676ac9ed1c4084e09e0c57f0705aefa06bb19106101dfe8fbf8ffbf798dfbe859b9e8b85a43df58830a3665638a22cf6a174b9852cd434e34b6a5"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000700), &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x9c, 0x1, {0x22, 0xfcd}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x0, 0x16, 0xfc, "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"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000740)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_usb_connect(0x0, 0x10de, &(0x7f0000001080)={{0x12, 0x1, 0x450, 0x99, 0xfc, 0x88, 0xff, 0xfe9, 0xdb78, 0xee8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10cc, 0x4, 0xff, 0x9, 0x50, 0x6, [{{0x9, 0x4, 0xe3, 0x7f, 0xf, 0x3d, 0x32, 0x14, 0x7f, [@generic={0xc6, 0x3, "6d471e13cf95de9f6509cbf85de70f075a09dc7534f9b9dca0d78030440bf899bd3abb2502b34cfc647204495b5e87f5688529e2a7cf33442978e2568f59aa4be3fb30acf4cfc190855ad10b54aeb48d0c9e17816a9014090d66ee888ab2b4980c66e2bb4570938f4f43e0757b5a0c3ac11213a6743904433b23f70138799d37e73400d20bc0f815d16fea0bbe85674c3161673d07f010fef0d73411910150fc18a19396e3c90c1c539238e621f45a2fb1373e58d263ce7f6f8ab4aee93af1292c3652f2"}, @hid_hid={0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0xbbc}}], [{{0x9, 0x5, 0xd, 0x10, 0x1ff, 0x80, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8000}, @generic={0x4, 0x5, "a380"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x81, 0x9, 0xf8, [@generic={0x21, 0xb, "8345edf744f46b786a9d9a0e2134c73ccc3a4c52c87d2ee378e325dfe87322"}, @generic={0x77, 0xf, "36c7735d6c370946a309f7e297f0a1427aeb0214c3d45a708ac0a2c956b6d4b16fd4ad541e249fef0b5ab24029bc516cc842ad842299c2eb63d49a0f5c9c505aac12c2a4c4bb12ba6eb698808d82c4df03c3f581491f6957422c415a5034fddad7b1e5deb0021eaa8c081312de9cb3f473c736cff3"}]}}, {{0x9, 0x5, 0x8, 0x6, 0x400, 0x81, 0x4, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3502}, @generic={0x61, 0x11, "9c13ed4068ab1e193ee53b703480d9f3f0e02f3fb258eb3660a5d7fb231f2ccfcecc4568eb17eb2d49d6debeb0355591824ea3b0e478586452e6770ae12c34045d1b6c9f551dc0da15f2803d2fbb5da81b13d6f87266e2f9352e603098285d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x1, 0x10, [@generic={0xa, 0xc, "ea389bfbc8a51b7c"}, @generic={0xa1, 0x23, "dda8754b25db0c60abce0aa677572a0246e7c36ef7403a10fdb6935dc5de90476f7c7e4835365474e8cd12b0d5296b851de482c9a87179db1468315a57ab44d1afe7441c2f446ee2f5cf3f5e875dc609f011097c429a99580f0349d0217af769ca252a17fecd66434cc0f9a8a2817dbcbeabc725f3a63b3a0ca41a00d11a1993c864a88d32110974b7402fb8779cbe1beefd3a4cf58b958aaea273e2e6d0cd"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xca, 0xff, 0x9, [@generic={0x6c, 0x3, "2289e4469600d746bfe50489b3e6f4ef6b084eee89cad532dd85ff62344d2b8956c2839c39c5f58d7e028585abfc0f36a486cfa7b32fb284160e60f9193d001829ab1efea2afa2965c7527d413c4592a755ba280be180513ed1a6022e5ddd865b1712b3d25c08beecd50"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x80, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9ec}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xff, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x80, 0x47, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0xc1, 0x7ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xd8, 0x2, 0x4, [@generic={0xbf, 0x1, "1fe80a667e3b79126252740ba7bfad42f10d0fa4fe52fe40b603be2b931955c34660ad6f556042697952ec84e182701c21c2335e875757a970833c03fe916002a943f95a454eec8b0e96565b456db6e991b8ab16b54263905e454a681935ae9841bdb4a7755066efec934282da3b5a156a98637bf845ccb19f67a6009151e0b9077b7e608e9cae9c4d8a4c79ece6108c966debe6a99907f964a9ccfa128f782aa396a9d16df44693793f31125f8513055546a8cd266689da8929d42660"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0xff, 0x80, [@generic={0x20, 0xe, "3535f30e95b733c0d3d32242d4d95df0bec9f2767c49d785349f131829e5"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x3f, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0xc, 0x7cf, 0x0, 0xff, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0xc4f}, @generic={0xae, 0x24, "a8c1839e94eae6a8928f386dbe755de78bb5a228d6a4f39d32790652ef53eacfec1579244fc609e5c3e50aa7e9467556d5c6128cbdef2be7085e6feadf1faeba726a95dcb8f73dfe20c452d9ab76c9a222a29c63f29884c1b8888dca3963155e18c07c716e474998cce76b2d969fc74b1576229933cc5d07b72d26dffc72f33607156babb3358d609e8357441c4665ce4d1da6778e16b4525d67c4362871e41ab13016f071467b3bc9134c90"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x1, 0x2, 0x0, 0x4f, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xff}]}}]}}, {{0x9, 0x4, 0xfa, 0x6, 0xb, 0xab, 0x8d, 0x20, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d9aebf"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x6df, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x4f, 0x80}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x50, 0x24, 0x13, 0x70, "ba5aab2e565a07a0804a8c0684d0ba3ce6ac835f4230e7d5a079c8689a4558292744e4611911a2e53add7c4fe38067248ede8105fbde1f171789f659c3220475f8977df1d10b65f020ca31a1"}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x5, [0xdf, 0x533, 0xdfaa]}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x1, 0x20, 0x2, [@generic={0x72, 0xf, "049a784125ccc88de55883704f99dc82fcb28cf4fe2563a00bae469c229f73e5af4d1aedd80244cfb55f18df42ae412947b6c8c92a69d8fc642702f9e16df563a5d60d3b2beed6c7eb88aa9788eab3b986d1c000473382f67fe4fcaeed935b58dc4ab130e93fa90ed8b1b7ed6846f195"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x20}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3f7, 0x7, 0xd, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x9, 0x40}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x40, 0x7, [@generic={0x45, 0x9, "26d011364a6d71f0c4f9dd5c8523f4348c889c536bcc1a20afb3c0252431c8fb8f86c6347a367e62e954bd14c1bef5bb9636e9b694700892ea94b9fb430112f7919166"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x6, 0x73, [@generic={0xfb, 0xc, "38a4aa369e10712b3ee9b8345475e15883e3d06dfa02782f3f6eb6be0c2e800009885f9e60e0365c5ab9f3ef530a1fcced1582e0721e393b10077ae29c00bf7fa6befc895fa32d24108126b28b0caef9c719b58fc9bea12f786b3d43ec936a565059fdb11e711d7268b690d3f581612ed4e859347d90b5fbd7d420b7cafab1a1d2ba64ff63ec95fe68420ddd01da17dc4d177e72152e9f7fb4f61a5aa53fdce29829f1022d9036a06ebfac9432fcfa66efea5d7e67346a91562cfc8102b9e707f9b1f78fdb834aa73e3dc7ef7c31ff488c522dba79e8c1ef9d042b4c5c6a7e43bdd86a81e6ccabaa7f7b44209549d745bbed5d4521bd35b192"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1f, 0x8, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0xe2c70d41cc3a5fc5, 0x10, 0x400, 0x3, 0x15, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x80}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x1, 0x1f, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4, 0x8, 0x1, [@generic={0xcc, 0x21, "2659f2a3d1bc63da8c6260aa1a795061eba5d0b0fddeda6c3320a23416ead17a91b28e8d07399b3f9949e36916f1c23a2efa3fdb1d8a28704cfff89a915e924b2542a10f15c602d99af7e7d56345ed2d039e5de3b2cd03f4872d7714e00ace777c454b99a593f96b4af72b78ea59a643761f9b26c280ebe0ec1b1528abde2896375ec3539f479c4e7968cdc711b080804aec238ca582d68fed1daf774f4269dd222d1b00fe947c54d0a7b7a40c3542557dcb0dc2912638fd5413c899c7d59aac68a6b35e13c6d2360468"}, @generic={0x51, 0x3, "b852310887c5f4d115c77697c757be4344a6350573aebe4f3b76734f4c085fab6d57b407f88e0dee3aca75a9c1e3e2b98f9509ef2e164b36ad4733a997b4b7045bccbaad097b59ff778f4a992d477b"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3f}, @generic={0x2a, 0x23, "9652e3f25950fbc862f68bdc5f081343c08a894abb9cdb9471eb4fe7c98f19e8ae9bec4d16852205"}]}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x7, 0x2, 0x6, 0x0, 0x6, [@hid_hid={0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xbae}}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0xff, 0x5, [@generic={0xa0, 0x23, "626231e7affb29c98fb2d8ac3fc2bc950465ba080c1be6d7d4479760e2a5de25377a69a827f0e504366690c1d81900767d058326145d0fd828c2171dc8a19dd92be3887cd4541a9685fa400dd6c181f60d3f8157ce532a0380e1fd87698c65ec4bc661d4e0de351a2e9f8e10fb33e2a11521628b2a16bd863109fc78bcae2d22e242d7d75e02e26a4ab3d10849551f0bba24c27b86ab56e3c42906b8908f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x81, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0xbe50ca4003cfb026, 0x1e, 0x10, 0x5e, 0x0, 0x7, [@generic={0x3b, 0x3d, "8978c5dd1b6c596d01c46afe28a47e785a928e24bf00ed752c4c865e0b0f6d32811abd9c6621c06b2405657b6d12552ae0f76a59c227638190"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1fa}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x1f, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa5, 0xfe01}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x2, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}, @generic={0x9f, 0x23, "b22a32f17c73a04476c4ddf963f18502cd5a7c10e29d9970aadd7f9f438aa0238704b0de56caca0bb682311341ec952dc2f873ccf1bdd04dfd68fc57b3295f0b3fda3631f5b9edf7a73cfd5e265c1e6d737e79d7d7ed62dd31981db57ed4768cec43ea1a7d7df497974ba549c50319307cdbf36933bc4f46772496e38b71360d518b88fdfb3ff6cb9dd2a0b84d52f7689e49bf8e101928942f9175d848"}]}}]}}, {{0x9, 0x4, 0x24, 0x6, 0x8, 0x2, 0x2, 0x2, 0xb1, [@generic={0xf8, 0x1, "25de6e717a3362237e744d6667b82c28b99e84e074dad5a0d840c7ad426d12ddd58da34271cec519b026d5299338b7d632c7c09f9f227c6a137175e43f4f96bb1ffa1540a374835d1e72ad675b70c9b39ca25fbc4907516e611296a8eacd718751bc036834cf898be8d9c843be30d3da2fec8b086e6954db067d27ac5a550b577f9ff574068eb76c280eb817da96dd6e0b248c0a46d731cfe12bef3c27ab33a433ba23ec1f4bbb75b8b8eb422d736cef032474c0e840055037989112f30e04563e82e37005aaa1cf2abd6d72f2a33f75f9f329e59bbe49530bbfbbd572a77f57d7ab2ed066ca114cda92fbe62f9d756d2d30b6bc4c2a"}], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x1, 0x80, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x6, 0x51, 0x20, [@generic={0x46, 0x8, "add433816468cd93c754348a87b1aa894ef4564e110733342cebb907f69ab5d6742117098b0429b5bb893dd18eaa0a0c5d53cecd727d3b070309a7abeb730dc782dfacfa"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x7, 0x3, [@generic={0xde, 0x5, "ea2f6b65703132ca41274d9716fd7c6acafaafa9d87411c4a2d60d632837a9f9006e65a9744d5a8f0ee7556ae08512a97ca11165d15d05dea1f8bea954c69334300455fe814b6d42b0563b98be2430328a3f3bb34b91e372b1fffe3d5cf9a53a8ee5d4311d81706c7cf6b9eea00837813889db22c7522c097d303d4122b8bb35dbd592df2a8958641f4e67e387e642e02dbcedb7b06a480e2f693124b1df73fbda2d271ad36f437ab692e6cfa5b5508ae51c768964dcd2cdfdf2f14adc90ac7ce848f641a69207ddc382207dbf8e729864c17faef7a3405e778cb27d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xaf, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x1f, 0xfc00}]}}, {{0x9, 0x5, 0x9bf6ee1dbd2e7a99, 0x2, 0x20, 0x6, 0x8, 0x2, [@generic={0x4d, 0x10, "c9e3eb07fde7ba0b223c124317c9108a378ca120be83499f4bb22629c821c02bd3f8ec4fb340bcaab05c8d7c813b3ed03db842afe7ecaa8f1df3377a2129ffa2836330915909835b2c51aa"}, @generic={0xbb, 0x2, "864dbd9871175709a22e5ba566c914a6a21b4b78c60e81d7268a22f4f53ded4269fab65aba9b40dc1144e6894b5355c6ccef49305981f235b5c69dbab0accf12dbc820098eb7638d3245bf6f633ee9826d5208937c91128ee67375052e4bead0a93001e12fc3efd9c178f798a98de35783bc09cde6d436986a01913f93f210690d0d4a439366df2ecf61bf66e7401faa4cd9d76720241406edef5e09a495f0d9bdd2149d70db196f8240dd6043363f6d2f128918c6a64480be"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0xff, 0x2, [@generic={0x2d, 0x3, "453e7d748d6119111ab08ffe863b2b8f046371e84705e66df5fc5fa48eb5bae823d3b6ee6fcc0d55153f9f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x1, 0x9, 0x8, [@generic={0x9c, 0xb, "0764cb44acb172c918fcd9e1e413005f2a78286e6f8d348382b9a6f99aa190219ee7ea4f9a23a7a93f03e3f379d132192018156424b3c8cf9fe3dc6d704e5e0f80d7bd5296dbc8d2199f71a87437a1b35be2f6b6261b254719026b00712633ad241c7f09e1ba14d1937de62b32fe811b62399b4894e070a024354b5b1c5a3dba0976e2a3f06b9775f02cf4110a6af19704aaea804635aa1733f5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x6, 0x40, 0x31, [@generic={0xf1, 0x11, "37d8ee1a63e238e53d76d421fa99dda5299ba50f8864180bef9a5ae8359387f0a33aa7b207bebeeb568618785251e21a734993a263be4f5223a51e26cc08ac9c211c48cfa6899a00703ae8c32781948042a39c8164f421b004a669fed74a7b815478cbf2d3bdc5dc8c3d0226eb4ccbedabc56244a0de2ef6fd9b540bd0dbd4487bbe7b2d385a6beaea5ba37bf1268499a2ccb38f831d32cdd0fa2c44b413b2f7426b41097ce2f2366233c482645be974c2d72fb5b0ccf09ab48774e3958cb36121a8ff867d63ddf32cc9c7ed2ee9242d7f7c10eedb3b40a5f20e24d4fa44b20ffc42930e2a8c2ed43cc34132cab5cf"}]}}]}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002180)={0xa, 0x6, 0xc37b880e9e2a87d1, 0x9, 0x7, 0x1f, 0x20, 0x7}, 0xb0, &(0x7f00000021c0)={0x5, 0xf, 0xb0, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x3, 0x80, 0x4}, @generic={0xa0, 0x10, 0xa, "2acf2362864c1b17fb19825599522507cfacd2a800f24c3b2696729c665e7bd9313b3c9c9ea8c22d91e9e15241c6eef604f7169c7f73347f8975d8b5368ea4db3065766d1978858aea28fd269693f02de964e77964014c352ea7b1de3f44143e2a1fb1dbcf3dff64acdd5cce661285f9d05f1271535c5a0cf37da8004615aeaccc7786ccb34f4c02c0d09939164b3d69fbebd112ebb7ad55e0179a825b"}]}, 0x4, [{0xf9, &(0x7f0000002280)=@string={0xf9, 0x3, "b269af3471a5303f3d34676578daec9aa3dd425103a860cf15022ddbc7ef5a96aa04e10694064a92ed76d2613e182dfcb830e81b802ecd000be551a1d26ec60804d0138666298985f29b7d6647be0ef11df068e5c155321086e21486f9d3444ceb3ac98f40a9c12dba8a44e12d444d03bd3dc56985005572eda3503230cb316a51e230640b582ac0f15bd1fae56c7c6ce2eea35d66ad84180259a492a8096a4e8ab8ff3dc287a22e94ff823e3b40fc4dad4613a31385fb2510c14d182771708c0068dd5822fd3ad510afb68abf9592a2eaa3af8c02dcf0e9df82bab2dd73a595c15711328a51098fd2b3d021eaf7278bf2b4050dba36ec"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000002580)={0x14, &(0x7f00000024c0)={0x0, 0x21, 0x79, {0x79, 0xf, "bb856c97a90da70b245b2620db24dfdf9554e16a099c13faa0b43a664cc62466323662580a795b237cc8aa3f023fe18ea2a7f434b54c812eaba3873a1ba5de0f5297475a8e814148030a90fa31599edeba4e4d4fbb492d3126f835ec3222f288874ce23f4b29f3d55802dc3f9bce37b9d6ccdba0d0df51"}}, &(0x7f0000002540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000027c0)={0x44, &(0x7f00000025c0)={0x20, 0x6, 0x34, "af34922fbb0e9e7d7aaa147320f61d4334005b2a944894ad71770e3263f1d0cf3e894c71ba94c6d23c2048a8a8e26abb3141ca46"}, &(0x7f0000002600)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000002640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002680)={0x20, 0x80, 0x1c, {0xfffa, 0x3, 0x8, 0x7, 0x8000, 0x3, 0xffe1, 0x4a0, 0xff, 0x101, 0x80, 0x800}}, &(0x7f00000026c0)={0x20, 0x85, 0x4}, &(0x7f0000002700)={0x20, 0x83, 0x2}, &(0x7f0000002740)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000002780)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x20, 0x4, 0xe3, {0xe3, 0x8, "23fca8fdfb8285c07da0cf5e734ef8c1b3cedadfa03cafaf43496f8ae088409413bd20722cf609e3814119080cee3b626790dc128b1a174b131a18d54abbbc80ce6f4649b3ef98c0eaf93842211ae95d98263bc554736f3b487afc23685ed429eb43bbeb795215b0f5c9a5dcef799b9261016b47ba45f650399aa92751050c5f460358a3e8f9efbe4db659a18efad7b5ec14c4503abea627fca13db6afe7e7c1be423388ca349495502797e9e4a65f5a46356c8e88fcb5d27ef4f683ef3eb6fb298654afa6cd894835f6121cc7e71e134a854e8395f956a1e6dc396b34d49349a2"}}, &(0x7f0000000c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000002840)=ANY=[@ANYBLOB="200a8f000000f154a739d1ac499478400e27122773e5335ba685f50fad62d0e75ff802f0b4f84b6bc2b63e2a9daff0226d6868db75bab31a7b6ace5d758922da43f0c33d399790b66a8bc24222dda34e3bad3cc1a9d32ba264e8c3874f07a15e62056fa8088912485ce44c68c4137bb0b96d9c34b7e73d6aef384ff14714ebe182bd84281cd568618426cdaa056cbc5592018adeba2e88c2b2ee1a279278404e6bc54413be695cc931d7900616ab3fb1281456538b5cb3974f81bbdece9f59cf455bd35d3c91d896ae35edc57de3beb2a910288c000000000000000000"], &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xb21a, 0x7, 0x8001, 0xffff, 0x0, 0x9, 0x8, 0x9, 0x7, 0xffff, 0x4, 0x1000}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0xdf2}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a5c90e7d6ebfe03b7c79f4b513695e310043d009b250102030109025d00010000000009040000000cc91900052406000005240000000d240f01000000000000000000052401000006241a000000120100000000000000000000000000000000052406000005240000"], 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x40, 0x21, 0x6c, {0x6c, 0x9, "712a0777a3f3494084c3a052216b49fe35dbc596e0f903f255bd15e91ce9a4ef99afc2ae8c69acbaca45bc971f0a9341d3166103b5fbcf072113e8cd1c70ec0e3de59ffa6ab0197d3b257261f15d6d36d8209af14b63cf89d5fcb669c1dc92640eb18e7f65ba26d0114d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x40, 0x15, 0x52, "589d619656d71bfeed6e91659d73a9b057310672b5ffce7b933c56005ab06921240ab06d33470c2e9dac771e8dc87d9e4c7c9d6f07d14a24dc9aef5512c310ed629604d8d6f79d9449b712fc1c349dba9e32"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x6, 0x0, 0x29, 0x4, 0x8, 0x1ff, 0x2, 0xd6, 0xcf73, 0x7d, 0x9, 0x200}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x20}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x8001}, &(0x7f0000000a40)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000240)={0x40, 0x24, 0xfa, {0xfa, 0x8, "1bbe281de09b6e4207104e05963ae8e3c9766058b87745bf738b0de4a23d72a35ba24b6e39cba3149524243a47f842ab09cd4270076e36365a6db2488ae0d98e6db8af14235d3e7f5bf15aee948d92c8e915be6f7247b902ad6c9ec895b3f64a2a9b195bf9ee4c69bf430805fb7790bb405d88ba68f3af4c3f84dc54a5b0ac1409fba23d0fc43d284ca4dcaf1391bde7edab31b3b1c4e9c8e0854401b60babb7e8871b16b03ed401dc7901be20d459cfce4010f1dc0e7fb70193229711b676ac9ed1c4084e09e0c57f0705aefa06bb19106101dfe8fbf8ffbf798dfbe859b9e8b85a43df58830a3665638a22cf6a174b9852cd434e34b6a5"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000700), &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x9c, 0x1, {0x22, 0xfcd}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x0, 0x16, 0xfc, "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"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000740)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect(0x0, 0x10de, &(0x7f0000001080)={{0x12, 0x1, 0x450, 0x99, 0xfc, 0x88, 0xff, 0xfe9, 0xdb78, 0xee8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10cc, 0x4, 0xff, 0x9, 0x50, 0x6, [{{0x9, 0x4, 0xe3, 0x7f, 0xf, 0x3d, 0x32, 0x14, 0x7f, [@generic={0xc6, 0x3, "6d471e13cf95de9f6509cbf85de70f075a09dc7534f9b9dca0d78030440bf899bd3abb2502b34cfc647204495b5e87f5688529e2a7cf33442978e2568f59aa4be3fb30acf4cfc190855ad10b54aeb48d0c9e17816a9014090d66ee888ab2b4980c66e2bb4570938f4f43e0757b5a0c3ac11213a6743904433b23f70138799d37e73400d20bc0f815d16fea0bbe85674c3161673d07f010fef0d73411910150fc18a19396e3c90c1c539238e621f45a2fb1373e58d263ce7f6f8ab4aee93af1292c3652f2"}, @hid_hid={0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0xbbc}}], [{{0x9, 0x5, 0xd, 0x10, 0x1ff, 0x80, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8000}, @generic={0x4, 0x5, "a380"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x81, 0x9, 0xf8, [@generic={0x21, 0xb, "8345edf744f46b786a9d9a0e2134c73ccc3a4c52c87d2ee378e325dfe87322"}, @generic={0x77, 0xf, "36c7735d6c370946a309f7e297f0a1427aeb0214c3d45a708ac0a2c956b6d4b16fd4ad541e249fef0b5ab24029bc516cc842ad842299c2eb63d49a0f5c9c505aac12c2a4c4bb12ba6eb698808d82c4df03c3f581491f6957422c415a5034fddad7b1e5deb0021eaa8c081312de9cb3f473c736cff3"}]}}, {{0x9, 0x5, 0x8, 0x6, 0x400, 0x81, 0x4, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3502}, @generic={0x61, 0x11, "9c13ed4068ab1e193ee53b703480d9f3f0e02f3fb258eb3660a5d7fb231f2ccfcecc4568eb17eb2d49d6debeb0355591824ea3b0e478586452e6770ae12c34045d1b6c9f551dc0da15f2803d2fbb5da81b13d6f87266e2f9352e603098285d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x1, 0x10, [@generic={0xa, 0xc, "ea389bfbc8a51b7c"}, @generic={0xa1, 0x23, "dda8754b25db0c60abce0aa677572a0246e7c36ef7403a10fdb6935dc5de90476f7c7e4835365474e8cd12b0d5296b851de482c9a87179db1468315a57ab44d1afe7441c2f446ee2f5cf3f5e875dc609f011097c429a99580f0349d0217af769ca252a17fecd66434cc0f9a8a2817dbcbeabc725f3a63b3a0ca41a00d11a1993c864a88d32110974b7402fb8779cbe1beefd3a4cf58b958aaea273e2e6d0cd"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xca, 0xff, 0x9, [@generic={0x6c, 0x3, "2289e4469600d746bfe50489b3e6f4ef6b084eee89cad532dd85ff62344d2b8956c2839c39c5f58d7e028585abfc0f36a486cfa7b32fb284160e60f9193d001829ab1efea2afa2965c7527d413c4592a755ba280be180513ed1a6022e5ddd865b1712b3d25c08beecd50"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x80, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9ec}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xff, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x80, 0x47, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0xc1, 0x7ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xd8, 0x2, 0x4, [@generic={0xbf, 0x1, "1fe80a667e3b79126252740ba7bfad42f10d0fa4fe52fe40b603be2b931955c34660ad6f556042697952ec84e182701c21c2335e875757a970833c03fe916002a943f95a454eec8b0e96565b456db6e991b8ab16b54263905e454a681935ae9841bdb4a7755066efec934282da3b5a156a98637bf845ccb19f67a6009151e0b9077b7e608e9cae9c4d8a4c79ece6108c966debe6a99907f964a9ccfa128f782aa396a9d16df44693793f31125f8513055546a8cd266689da8929d42660"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0xff, 0x80, [@generic={0x20, 0xe, "3535f30e95b733c0d3d32242d4d95df0bec9f2767c49d785349f131829e5"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x3f, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0xc, 0x7cf, 0x0, 0xff, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0xc4f}, @generic={0xae, 0x24, "a8c1839e94eae6a8928f386dbe755de78bb5a228d6a4f39d32790652ef53eacfec1579244fc609e5c3e50aa7e9467556d5c6128cbdef2be7085e6feadf1faeba726a95dcb8f73dfe20c452d9ab76c9a222a29c63f29884c1b8888dca3963155e18c07c716e474998cce76b2d969fc74b1576229933cc5d07b72d26dffc72f33607156babb3358d609e8357441c4665ce4d1da6778e16b4525d67c4362871e41ab13016f071467b3bc9134c90"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x1, 0x2, 0x0, 0x4f, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xff}]}}]}}, {{0x9, 0x4, 0xfa, 0x6, 0xb, 0xab, 0x8d, 0x20, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d9aebf"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x6df, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x4f, 0x80}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x50, 0x24, 0x13, 0x70, "ba5aab2e565a07a0804a8c0684d0ba3ce6ac835f4230e7d5a079c8689a4558292744e4611911a2e53add7c4fe38067248ede8105fbde1f171789f659c3220475f8977df1d10b65f020ca31a1"}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x5, [0xdf, 0x533, 0xdfaa]}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x1, 0x20, 0x2, [@generic={0x72, 0xf, "049a784125ccc88de55883704f99dc82fcb28cf4fe2563a00bae469c229f73e5af4d1aedd80244cfb55f18df42ae412947b6c8c92a69d8fc642702f9e16df563a5d60d3b2beed6c7eb88aa9788eab3b986d1c000473382f67fe4fcaeed935b58dc4ab130e93fa90ed8b1b7ed6846f195"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x20}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3f7, 0x7, 0xd, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x9, 0x40}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x40, 0x7, [@generic={0x45, 0x9, "26d011364a6d71f0c4f9dd5c8523f4348c889c536bcc1a20afb3c0252431c8fb8f86c6347a367e62e954bd14c1bef5bb9636e9b694700892ea94b9fb430112f7919166"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x6, 0x73, [@generic={0xfb, 0xc, "38a4aa369e10712b3ee9b8345475e15883e3d06dfa02782f3f6eb6be0c2e800009885f9e60e0365c5ab9f3ef530a1fcced1582e0721e393b10077ae29c00bf7fa6befc895fa32d24108126b28b0caef9c719b58fc9bea12f786b3d43ec936a565059fdb11e711d7268b690d3f581612ed4e859347d90b5fbd7d420b7cafab1a1d2ba64ff63ec95fe68420ddd01da17dc4d177e72152e9f7fb4f61a5aa53fdce29829f1022d9036a06ebfac9432fcfa66efea5d7e67346a91562cfc8102b9e707f9b1f78fdb834aa73e3dc7ef7c31ff488c522dba79e8c1ef9d042b4c5c6a7e43bdd86a81e6ccabaa7f7b44209549d745bbed5d4521bd35b192"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1f, 0x8, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0xe2c70d41cc3a5fc5, 0x10, 0x400, 0x3, 0x15, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x80}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x1, 0x1f, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4, 0x8, 0x1, [@generic={0xcc, 0x21, "2659f2a3d1bc63da8c6260aa1a795061eba5d0b0fddeda6c3320a23416ead17a91b28e8d07399b3f9949e36916f1c23a2efa3fdb1d8a28704cfff89a915e924b2542a10f15c602d99af7e7d56345ed2d039e5de3b2cd03f4872d7714e00ace777c454b99a593f96b4af72b78ea59a643761f9b26c280ebe0ec1b1528abde2896375ec3539f479c4e7968cdc711b080804aec238ca582d68fed1daf774f4269dd222d1b00fe947c54d0a7b7a40c3542557dcb0dc2912638fd5413c899c7d59aac68a6b35e13c6d2360468"}, @generic={0x51, 0x3, "b852310887c5f4d115c77697c757be4344a6350573aebe4f3b76734f4c085fab6d57b407f88e0dee3aca75a9c1e3e2b98f9509ef2e164b36ad4733a997b4b7045bccbaad097b59ff778f4a992d477b"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3f}, @generic={0x2a, 0x23, "9652e3f25950fbc862f68bdc5f081343c08a894abb9cdb9471eb4fe7c98f19e8ae9bec4d16852205"}]}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x7, 0x2, 0x6, 0x0, 0x6, [@hid_hid={0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xbae}}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0xff, 0x5, [@generic={0xa0, 0x23, "626231e7affb29c98fb2d8ac3fc2bc950465ba080c1be6d7d4479760e2a5de25377a69a827f0e504366690c1d81900767d058326145d0fd828c2171dc8a19dd92be3887cd4541a9685fa400dd6c181f60d3f8157ce532a0380e1fd87698c65ec4bc661d4e0de351a2e9f8e10fb33e2a11521628b2a16bd863109fc78bcae2d22e242d7d75e02e26a4ab3d10849551f0bba24c27b86ab56e3c42906b8908f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x81, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0xbe50ca4003cfb026, 0x1e, 0x10, 0x5e, 0x0, 0x7, [@generic={0x3b, 0x3d, "8978c5dd1b6c596d01c46afe28a47e785a928e24bf00ed752c4c865e0b0f6d32811abd9c6621c06b2405657b6d12552ae0f76a59c227638190"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1fa}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x1f, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa5, 0xfe01}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x2, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}, @generic={0x9f, 0x23, "b22a32f17c73a04476c4ddf963f18502cd5a7c10e29d9970aadd7f9f438aa0238704b0de56caca0bb682311341ec952dc2f873ccf1bdd04dfd68fc57b3295f0b3fda3631f5b9edf7a73cfd5e265c1e6d737e79d7d7ed62dd31981db57ed4768cec43ea1a7d7df497974ba549c50319307cdbf36933bc4f46772496e38b71360d518b88fdfb3ff6cb9dd2a0b84d52f7689e49bf8e101928942f9175d848"}]}}]}}, {{0x9, 0x4, 0x24, 0x6, 0x8, 0x2, 0x2, 0x2, 0xb1, [@generic={0xf8, 0x1, "25de6e717a3362237e744d6667b82c28b99e84e074dad5a0d840c7ad426d12ddd58da34271cec519b026d5299338b7d632c7c09f9f227c6a137175e43f4f96bb1ffa1540a374835d1e72ad675b70c9b39ca25fbc4907516e611296a8eacd718751bc036834cf898be8d9c843be30d3da2fec8b086e6954db067d27ac5a550b577f9ff574068eb76c280eb817da96dd6e0b248c0a46d731cfe12bef3c27ab33a433ba23ec1f4bbb75b8b8eb422d736cef032474c0e840055037989112f30e04563e82e37005aaa1cf2abd6d72f2a33f75f9f329e59bbe49530bbfbbd572a77f57d7ab2ed066ca114cda92fbe62f9d756d2d30b6bc4c2a"}], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x1, 0x80, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x6, 0x51, 0x20, [@generic={0x46, 0x8, "add433816468cd93c754348a87b1aa894ef4564e110733342cebb907f69ab5d6742117098b0429b5bb893dd18eaa0a0c5d53cecd727d3b070309a7abeb730dc782dfacfa"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x7, 0x3, [@generic={0xde, 0x5, "ea2f6b65703132ca41274d9716fd7c6acafaafa9d87411c4a2d60d632837a9f9006e65a9744d5a8f0ee7556ae08512a97ca11165d15d05dea1f8bea954c69334300455fe814b6d42b0563b98be2430328a3f3bb34b91e372b1fffe3d5cf9a53a8ee5d4311d81706c7cf6b9eea00837813889db22c7522c097d303d4122b8bb35dbd592df2a8958641f4e67e387e642e02dbcedb7b06a480e2f693124b1df73fbda2d271ad36f437ab692e6cfa5b5508ae51c768964dcd2cdfdf2f14adc90ac7ce848f641a69207ddc382207dbf8e729864c17faef7a3405e778cb27d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xaf, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x1f, 0xfc00}]}}, {{0x9, 0x5, 0x9bf6ee1dbd2e7a99, 0x2, 0x20, 0x6, 0x8, 0x2, [@generic={0x4d, 0x10, "c9e3eb07fde7ba0b223c124317c9108a378ca120be83499f4bb22629c821c02bd3f8ec4fb340bcaab05c8d7c813b3ed03db842afe7ecaa8f1df3377a2129ffa2836330915909835b2c51aa"}, @generic={0xbb, 0x2, "864dbd9871175709a22e5ba566c914a6a21b4b78c60e81d7268a22f4f53ded4269fab65aba9b40dc1144e6894b5355c6ccef49305981f235b5c69dbab0accf12dbc820098eb7638d3245bf6f633ee9826d5208937c91128ee67375052e4bead0a93001e12fc3efd9c178f798a98de35783bc09cde6d436986a01913f93f210690d0d4a439366df2ecf61bf66e7401faa4cd9d76720241406edef5e09a495f0d9bdd2149d70db196f8240dd6043363f6d2f128918c6a64480be"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0xff, 0x2, [@generic={0x2d, 0x3, "453e7d748d6119111ab08ffe863b2b8f046371e84705e66df5fc5fa48eb5bae823d3b6ee6fcc0d55153f9f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x1, 0x9, 0x8, [@generic={0x9c, 0xb, "0764cb44acb172c918fcd9e1e413005f2a78286e6f8d348382b9a6f99aa190219ee7ea4f9a23a7a93f03e3f379d132192018156424b3c8cf9fe3dc6d704e5e0f80d7bd5296dbc8d2199f71a87437a1b35be2f6b6261b254719026b00712633ad241c7f09e1ba14d1937de62b32fe811b62399b4894e070a024354b5b1c5a3dba0976e2a3f06b9775f02cf4110a6af19704aaea804635aa1733f5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x6, 0x40, 0x31, [@generic={0xf1, 0x11, "37d8ee1a63e238e53d76d421fa99dda5299ba50f8864180bef9a5ae8359387f0a33aa7b207bebeeb568618785251e21a734993a263be4f5223a51e26cc08ac9c211c48cfa6899a00703ae8c32781948042a39c8164f421b004a669fed74a7b815478cbf2d3bdc5dc8c3d0226eb4ccbedabc56244a0de2ef6fd9b540bd0dbd4487bbe7b2d385a6beaea5ba37bf1268499a2ccb38f831d32cdd0fa2c44b413b2f7426b41097ce2f2366233c482645be974c2d72fb5b0ccf09ab48774e3958cb36121a8ff867d63ddf32cc9c7ed2ee9242d7f7c10eedb3b40a5f20e24d4fa44b20ffc42930e2a8c2ed43cc34132cab5cf"}]}}]}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002180)={0xa, 0x6, 0xc37b880e9e2a87d1, 0x9, 0x7, 0x1f, 0x20, 0x7}, 0xb0, &(0x7f00000021c0)={0x5, 0xf, 0xb0, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x3, 0x80, 0x4}, @generic={0xa0, 0x10, 0xa, "2acf2362864c1b17fb19825599522507cfacd2a800f24c3b2696729c665e7bd9313b3c9c9ea8c22d91e9e15241c6eef604f7169c7f73347f8975d8b5368ea4db3065766d1978858aea28fd269693f02de964e77964014c352ea7b1de3f44143e2a1fb1dbcf3dff64acdd5cce661285f9d05f1271535c5a0cf37da8004615aeaccc7786ccb34f4c02c0d09939164b3d69fbebd112ebb7ad55e0179a825b"}]}, 0x4, [{0xf9, &(0x7f0000002280)=@string={0xf9, 0x3, "b269af3471a5303f3d34676578daec9aa3dd425103a860cf15022ddbc7ef5a96aa04e10694064a92ed76d2613e182dfcb830e81b802ecd000be551a1d26ec60804d0138666298985f29b7d6647be0ef11df068e5c155321086e21486f9d3444ceb3ac98f40a9c12dba8a44e12d444d03bd3dc56985005572eda3503230cb316a51e230640b582ac0f15bd1fae56c7c6ce2eea35d66ad84180259a492a8096a4e8ab8ff3dc287a22e94ff823e3b40fc4dad4613a31385fb2510c14d182771708c0068dd5822fd3ad510afb68abf9592a2eaa3af8c02dcf0e9df82bab2dd73a595c15711328a51098fd2b3d021eaf7278bf2b4050dba36ec"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x1c09}}]}) (async) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000002580)={0x14, &(0x7f00000024c0)={0x0, 0x21, 0x79, {0x79, 0xf, "bb856c97a90da70b245b2620db24dfdf9554e16a099c13faa0b43a664cc62466323662580a795b237cc8aa3f023fe18ea2a7f434b54c812eaba3873a1ba5de0f5297475a8e814148030a90fa31599edeba4e4d4fbb492d3126f835ec3222f288874ce23f4b29f3d55802dc3f9bce37b9d6ccdba0d0df51"}}, &(0x7f0000002540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000027c0)={0x44, &(0x7f00000025c0)={0x20, 0x6, 0x34, "af34922fbb0e9e7d7aaa147320f61d4334005b2a944894ad71770e3263f1d0cf3e894c71ba94c6d23c2048a8a8e26abb3141ca46"}, &(0x7f0000002600)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000002640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002680)={0x20, 0x80, 0x1c, {0xfffa, 0x3, 0x8, 0x7, 0x8000, 0x3, 0xffe1, 0x4a0, 0xff, 0x101, 0x80, 0x800}}, &(0x7f00000026c0)={0x20, 0x85, 0x4}, &(0x7f0000002700)={0x20, 0x83, 0x2}, &(0x7f0000002740)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000002780)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) (async) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x20, 0x4, 0xe3, {0xe3, 0x8, "23fca8fdfb8285c07da0cf5e734ef8c1b3cedadfa03cafaf43496f8ae088409413bd20722cf609e3814119080cee3b626790dc128b1a174b131a18d54abbbc80ce6f4649b3ef98c0eaf93842211ae95d98263bc554736f3b487afc23685ed429eb43bbeb795215b0f5c9a5dcef799b9261016b47ba45f650399aa92751050c5f460358a3e8f9efbe4db659a18efad7b5ec14c4503abea627fca13db6afe7e7c1be423388ca349495502797e9e4a65f5a46356c8e88fcb5d27ef4f683ef3eb6fb298654afa6cd894835f6121cc7e71e134a854e8395f956a1e6dc396b34d49349a2"}}, &(0x7f0000000c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000002840)=ANY=[@ANYBLOB="200a8f000000f154a739d1ac499478400e27122773e5335ba685f50fad62d0e75ff802f0b4f84b6bc2b63e2a9daff0226d6868db75bab31a7b6ace5d758922da43f0c33d399790b66a8bc24222dda34e3bad3cc1a9d32ba264e8c3874f07a15e62056fa8088912485ce44c68c4137bb0b96d9c34b7e73d6aef384ff14714ebe182bd84281cd568618426cdaa056cbc5592018adeba2e88c2b2ee1a279278404e6bc54413be695cc931d7900616ab3fb1281456538b5cb3974f81bbdece9f59cf455bd35d3c91d896ae35edc57de3beb2a910288c000000000000000000"], &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xb21a, 0x7, 0x8001, 0xffff, 0x0, 0x9, 0x8, 0x9, 0x7, 0xffff, 0x4, 0x1000}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0xdf2}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) (async) 03:14:24 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 5) 03:14:24 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4f, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:24 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xc00, 0x0, 0x0) 03:14:24 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000, 0x0, 0x0) 03:14:24 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3334, 0x0, 0x0) 03:14:24 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x50, 0xfffffdef, 0x0, 0x0, 0x0) [ 1244.040879][ T20] usb 4-1: USB disconnect, device number 50 03:14:24 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x11e8, 0x0, 0x0) [ 1244.098512][ T6447] UDC core: couldn't find an available UDC or it's busy: -16 [ 1244.122153][ T6447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1244.165414][ T6447] UDC core: couldn't find an available UDC or it's busy: -16 [ 1244.202881][ T6447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1244.288502][T20684] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1244.462996][ T20] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1244.685895][T20684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.705964][T20684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1244.720797][T20684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1244.733300][T20684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1244.749433][T20684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1244.827649][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.947847][T20684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1244.966333][T20684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.991987][T20684] usb 3-1: Product: syz [ 1245.003357][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1245.008391][T20684] usb 3-1: Manufacturer: syz [ 1245.012426][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.012458][ T20] usb 4-1: Product: syz [ 1245.012478][ T20] usb 4-1: Manufacturer: syz [ 1245.012497][ T20] usb 4-1: SerialNumber: syz [ 1245.029329][T20684] usb 3-1: SerialNumber: syz [ 1245.334771][ T6459] UDC core: couldn't find an available UDC or it's busy: -16 [ 1245.342179][ T6459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1245.506223][ T6456] FAULT_INJECTION: forcing a failure. [ 1245.506223][ T6456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.519622][ T6456] CPU: 0 PID: 6456 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1245.530154][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1245.540204][ T6456] Call Trace: [ 1245.543480][ T6456] [ 1245.546422][ T6456] dump_stack_lvl+0xcd/0x134 [ 1245.551045][ T6456] should_fail.cold+0x5/0xa [ 1245.555541][ T6456] _copy_to_user+0x2c/0x150 [ 1245.560048][ T6456] raw_ioctl+0x10c3/0x2690 [ 1245.564463][ T6456] ? __fget_files+0x28c/0x470 [ 1245.569151][ T6456] ? raw_open+0x4c0/0x4c0 [ 1245.573647][ T6456] ? security_file_ioctl+0x5c/0xb0 [ 1245.578772][ T6456] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1245.585019][ T6456] ? raw_open+0x4c0/0x4c0 [ 1245.589361][ T6456] __x64_sys_ioctl+0x193/0x200 [ 1245.594122][ T6456] do_syscall_64+0x35/0xb0 [ 1245.598567][ T6456] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1245.604461][ T6456] RIP: 0033:0x7fd05c028e07 [ 1245.608890][ T6456] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1245.628492][ T6456] RSP: 002b:00007fd05a99c0d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.636905][ T6456] RAX: ffffffffffffffda RBX: 00007fd05c13bf60 RCX: 00007fd05c028e07 [ 1245.644878][ T6456] RDX: 00007fd05a99d110 RSI: 0000000080085502 RDI: 0000000000000003 [ 1245.652864][ T6456] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1245.660830][ T6456] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1245.668815][ T6456] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000022000 [ 1245.676791][ T6456] [ 1245.723164][T20684] cdc_ncm 3-1:1.0: bind() failure [ 1245.730908][T20684] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1245.738599][T20684] cdc_ncm 3-1:1.1: bind() failure [ 1245.763219][T20684] usb 3-1: USB disconnect, device number 17 03:14:25 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000000000000000624e41a0000000905810320000000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0xb9, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x2, 0x1, 0x81, 0x10, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b9e83747aa85"}, {0x5, 0x24, 0x0, 0xfb}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x401, 0x5}, {0x6, 0x24, 0x1a, 0x1000, 0x18}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x9, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2f, 0xff, 0x1, 0xf4}, @mbim_extended={0x8, 0x24, 0x1c, 0xa5, 0x20, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xac, 0x1, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x80, 0x1, [0x7a, 0x5, 0x40, 0x2, 0x40, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x20, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x3f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x2, 0x2, 0xff, 0x2}, 0x73, &(0x7f0000000240)={0x5, 0xf, 0x73, 0x6, [@generic={0x3e, 0x10, 0xa, "4a192680e0761b24ed0c3ce334e7ff962f5e49eae550db0c1a358f58f915e79114e47b7ff26ff14b537c6c5409ff6c4e3fc011efe44b2f7de5a4e9"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x51022d8f4d9c1be4, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x400, 0x1e00, 0x1, [0x3f3f, 0xc00f, 0x1bf, 0x3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0xa, 0xf800}]}, 0x3, [{0x9d, &(0x7f00000003c0)=@string={0x9d, 0x3, "5d0ab56ccac15b74014344769a3af84d4bd77a03414d8a1446a333023f565ad511bea2cabc36c40b674037f458a1b9d25d2669f5b1a41a8f6b1313c7cb7148113450ab118b886c4546fc3e717d264da70d59c5036dd7027f98ff1312e581764abf49dfeb5bbd16e4c9bb79e2938752625580124b635ea48caf0f305bca5cb8048426f2f689e34af74a93c4ab6bcf545ae996c159f319c3cb66de32"}}, {0x86, &(0x7f0000000480)=@string={0x86, 0x3, "159cadb6af5fa06c6f75e29cc15f08b671f9c540ebc5fc17fa8b30ecb1cf411b5183a00af666c99c10c65b3324619dd89ca0db3141c873345107cd071a421a55519054df516aca5102885a9d97f4f914ef3fe2172b1940c9e41ee7430846d74067321f8265145f646b77750ddc46624be9077b24f6baaeabb4c2fe8add7cbe50180dc65a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x78}}]}) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a0011043d009b250102030109025d00010000000009040000000cc91904052406000005240000000d240e010000000000fdff0000052401000006241a00000012240700000000000000000000000000000d240f0100"/111], 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000000000000000624e41a0000000905810320000000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0xb9, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x2, 0x1, 0x81, 0x10, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b9e83747aa85"}, {0x5, 0x24, 0x0, 0xfb}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x401, 0x5}, {0x6, 0x24, 0x1a, 0x1000, 0x18}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x9, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2f, 0xff, 0x1, 0xf4}, @mbim_extended={0x8, 0x24, 0x1c, 0xa5, 0x20, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xac, 0x1, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x80, 0x1, [0x7a, 0x5, 0x40, 0x2, 0x40, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x20, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x3f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x2, 0x2, 0xff, 0x2}, 0x73, &(0x7f0000000240)={0x5, 0xf, 0x73, 0x6, [@generic={0x3e, 0x10, 0xa, "4a192680e0761b24ed0c3ce334e7ff962f5e49eae550db0c1a358f58f915e79114e47b7ff26ff14b537c6c5409ff6c4e3fc011efe44b2f7de5a4e9"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x51022d8f4d9c1be4, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x400, 0x1e00, 0x1, [0x3f3f, 0xc00f, 0x1bf, 0x3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0xa, 0xf800}]}, 0x3, [{0x9d, &(0x7f00000003c0)=@string={0x9d, 0x3, "5d0ab56ccac15b74014344769a3af84d4bd77a03414d8a1446a333023f565ad511bea2cabc36c40b674037f458a1b9d25d2669f5b1a41a8f6b1313c7cb7148113450ab118b886c4546fc3e717d264da70d59c5036dd7027f98ff1312e581764abf49dfeb5bbd16e4c9bb79e2938752625580124b635ea48caf0f305bca5cb8048426f2f689e34af74a93c4ab6bcf545ae996c159f319c3cb66de32"}}, {0x86, &(0x7f0000000480)=@string={0x86, 0x3, "159cadb6af5fa06c6f75e29cc15f08b671f9c540ebc5fc17fa8b30ecb1cf411b5183a00af666c99c10c65b3324619dd89ca0db3141c873345107cd071a421a55519054df516aca5102885a9d97f4f914ef3fe2172b1940c9e41ee7430846d74067321f8265145f646b77750ddc46624be9077b24f6baaeabb4c2fe8add7cbe50180dc65a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x78}}]}) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a0011043d009b250102030109025d00010000000009040000000cc91904052406000005240000000d240e010000000000fdff0000052401000006241a00000012240700000000000000000000000000000d240f0100"/111], 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:14:25 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3433, 0x0, 0x0) 03:14:25 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1f00, 0x0, 0x0) 03:14:25 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x51, 0xfffffdef, 0x0, 0x0, 0x0) [ 1245.900698][ T3758] usb 1-1: USB disconnect, device number 78 [ 1246.153194][ T20] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1246.159430][ T20] cdc_ncm 4-1:1.0: bind() failure [ 1246.169227][ T20] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1246.176260][ T20] cdc_ncm 4-1:1.1: bind() failure [ 1246.373481][ T3758] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1246.793179][ T3758] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.805400][ T3758] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1246.814690][ T3758] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1246.984717][ T3758] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.998254][ T3758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.006928][ T3758] usb 1-1: Product: syz [ 1247.011827][ T3758] usb 1-1: Manufacturer: syz [ 1247.017063][ T3758] usb 1-1: SerialNumber: syz [ 1247.065669][ T3758] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1247.072643][ T3758] cdc_ncm 1-1:1.0: bind() failure 03:14:27 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x52, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:27 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000, 0x0, 0x0) 03:14:27 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3f00, 0x0, 0x0) 03:14:27 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a5c90e7d6ebfe03b7c79f4b513695e310043d009b250102030109025d00010000000009040000000cc91900052406000005240000000d240f01000000000000000000052401000006241a000000120100000000000000000000000000000000052406000005240000"], 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x40, 0x21, 0x6c, {0x6c, 0x9, "712a0777a3f3494084c3a052216b49fe35dbc596e0f903f255bd15e91ce9a4ef99afc2ae8c69acbaca45bc971f0a9341d3166103b5fbcf072113e8cd1c70ec0e3de59ffa6ab0197d3b257261f15d6d36d8209af14b63cf89d5fcb669c1dc92640eb18e7f65ba26d0114d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x40, 0x15, 0x52, "589d619656d71bfeed6e91659d73a9b057310672b5ffce7b933c56005ab06921240ab06d33470c2e9dac771e8dc87d9e4c7c9d6f07d14a24dc9aef5512c310ed629604d8d6f79d9449b712fc1c349dba9e32"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x6, 0x0, 0x29, 0x4, 0x8, 0x1ff, 0x2, 0xd6, 0xcf73, 0x7d, 0x9, 0x200}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x20}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x8001}, &(0x7f0000000a40)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000240)={0x40, 0x24, 0xfa, {0xfa, 0x8, "1bbe281de09b6e4207104e05963ae8e3c9766058b87745bf738b0de4a23d72a35ba24b6e39cba3149524243a47f842ab09cd4270076e36365a6db2488ae0d98e6db8af14235d3e7f5bf15aee948d92c8e915be6f7247b902ad6c9ec895b3f64a2a9b195bf9ee4c69bf430805fb7790bb405d88ba68f3af4c3f84dc54a5b0ac1409fba23d0fc43d284ca4dcaf1391bde7edab31b3b1c4e9c8e0854401b60babb7e8871b16b03ed401dc7901be20d459cfce4010f1dc0e7fb70193229711b676ac9ed1c4084e09e0c57f0705aefa06bb19106101dfe8fbf8ffbf798dfbe859b9e8b85a43df58830a3665638a22cf6a174b9852cd434e34b6a5"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000700), &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x9c, 0x1, {0x22, 0xfcd}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x0, 0x16, 0xfc, "d63e13c659a5fff2d6cdd78077edf41185132057d885314afc99d279055c65aa4b5907ab18fd50470407866f4f2d502f21b41bdc790d1f0636994eb330e13d9e03e7af3644c4b47f58d64f2d96607240f046d56a297ac216d18eb55a7ec64bc990cbe36af2e15b3c36393ff92fe170d3f26876b97204ce875d7a9c7808dc9991845691f55b35e6882574cd7a09c66cfb7697c9a925be57e7b206d87c62f4a242fe1ba13311761ae8eb7e70803e14bd25157312423dd7ab1950806e914b934a2f2e580a357b78f4ca959e4fd0e8a1f17830f898b47e33c06570233cb9976235671407774446a0f1caf20d4bf7adc31acccd29d65104e2c423986679ce"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000740)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r3 = syz_usb_connect(0x0, 0x10de, &(0x7f0000001080)={{0x12, 0x1, 0x450, 0x99, 0xfc, 0x88, 0xff, 0xfe9, 0xdb78, 0xee8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10cc, 0x4, 0xff, 0x9, 0x50, 0x6, [{{0x9, 0x4, 0xe3, 0x7f, 0xf, 0x3d, 0x32, 0x14, 0x7f, [@generic={0xc6, 0x3, "6d471e13cf95de9f6509cbf85de70f075a09dc7534f9b9dca0d78030440bf899bd3abb2502b34cfc647204495b5e87f5688529e2a7cf33442978e2568f59aa4be3fb30acf4cfc190855ad10b54aeb48d0c9e17816a9014090d66ee888ab2b4980c66e2bb4570938f4f43e0757b5a0c3ac11213a6743904433b23f70138799d37e73400d20bc0f815d16fea0bbe85674c3161673d07f010fef0d73411910150fc18a19396e3c90c1c539238e621f45a2fb1373e58d263ce7f6f8ab4aee93af1292c3652f2"}, @hid_hid={0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0xbbc}}], [{{0x9, 0x5, 0xd, 0x10, 0x1ff, 0x80, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8000}, @generic={0x4, 0x5, "a380"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x81, 0x9, 0xf8, [@generic={0x21, 0xb, "8345edf744f46b786a9d9a0e2134c73ccc3a4c52c87d2ee378e325dfe87322"}, @generic={0x77, 0xf, "36c7735d6c370946a309f7e297f0a1427aeb0214c3d45a708ac0a2c956b6d4b16fd4ad541e249fef0b5ab24029bc516cc842ad842299c2eb63d49a0f5c9c505aac12c2a4c4bb12ba6eb698808d82c4df03c3f581491f6957422c415a5034fddad7b1e5deb0021eaa8c081312de9cb3f473c736cff3"}]}}, {{0x9, 0x5, 0x8, 0x6, 0x400, 0x81, 0x4, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3502}, @generic={0x61, 0x11, "9c13ed4068ab1e193ee53b703480d9f3f0e02f3fb258eb3660a5d7fb231f2ccfcecc4568eb17eb2d49d6debeb0355591824ea3b0e478586452e6770ae12c34045d1b6c9f551dc0da15f2803d2fbb5da81b13d6f87266e2f9352e603098285d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x1, 0x10, [@generic={0xa, 0xc, "ea389bfbc8a51b7c"}, @generic={0xa1, 0x23, "dda8754b25db0c60abce0aa677572a0246e7c36ef7403a10fdb6935dc5de90476f7c7e4835365474e8cd12b0d5296b851de482c9a87179db1468315a57ab44d1afe7441c2f446ee2f5cf3f5e875dc609f011097c429a99580f0349d0217af769ca252a17fecd66434cc0f9a8a2817dbcbeabc725f3a63b3a0ca41a00d11a1993c864a88d32110974b7402fb8779cbe1beefd3a4cf58b958aaea273e2e6d0cd"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xca, 0xff, 0x9, [@generic={0x6c, 0x3, "2289e4469600d746bfe50489b3e6f4ef6b084eee89cad532dd85ff62344d2b8956c2839c39c5f58d7e028585abfc0f36a486cfa7b32fb284160e60f9193d001829ab1efea2afa2965c7527d413c4592a755ba280be180513ed1a6022e5ddd865b1712b3d25c08beecd50"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x80, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9ec}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xff, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x80, 0x47, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0xc1, 0x7ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xd8, 0x2, 0x4, [@generic={0xbf, 0x1, "1fe80a667e3b79126252740ba7bfad42f10d0fa4fe52fe40b603be2b931955c34660ad6f556042697952ec84e182701c21c2335e875757a970833c03fe916002a943f95a454eec8b0e96565b456db6e991b8ab16b54263905e454a681935ae9841bdb4a7755066efec934282da3b5a156a98637bf845ccb19f67a6009151e0b9077b7e608e9cae9c4d8a4c79ece6108c966debe6a99907f964a9ccfa128f782aa396a9d16df44693793f31125f8513055546a8cd266689da8929d42660"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0xff, 0x80, [@generic={0x20, 0xe, "3535f30e95b733c0d3d32242d4d95df0bec9f2767c49d785349f131829e5"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x3f, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0xc, 0x7cf, 0x0, 0xff, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0xc4f}, @generic={0xae, 0x24, "a8c1839e94eae6a8928f386dbe755de78bb5a228d6a4f39d32790652ef53eacfec1579244fc609e5c3e50aa7e9467556d5c6128cbdef2be7085e6feadf1faeba726a95dcb8f73dfe20c452d9ab76c9a222a29c63f29884c1b8888dca3963155e18c07c716e474998cce76b2d969fc74b1576229933cc5d07b72d26dffc72f33607156babb3358d609e8357441c4665ce4d1da6778e16b4525d67c4362871e41ab13016f071467b3bc9134c90"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x1, 0x2, 0x0, 0x4f, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xff}]}}]}}, {{0x9, 0x4, 0xfa, 0x6, 0xb, 0xab, 0x8d, 0x20, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d9aebf"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x6df, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x4f, 0x80}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x50, 0x24, 0x13, 0x70, "ba5aab2e565a07a0804a8c0684d0ba3ce6ac835f4230e7d5a079c8689a4558292744e4611911a2e53add7c4fe38067248ede8105fbde1f171789f659c3220475f8977df1d10b65f020ca31a1"}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x5, [0xdf, 0x533, 0xdfaa]}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x1, 0x20, 0x2, [@generic={0x72, 0xf, "049a784125ccc88de55883704f99dc82fcb28cf4fe2563a00bae469c229f73e5af4d1aedd80244cfb55f18df42ae412947b6c8c92a69d8fc642702f9e16df563a5d60d3b2beed6c7eb88aa9788eab3b986d1c000473382f67fe4fcaeed935b58dc4ab130e93fa90ed8b1b7ed6846f195"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x20}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3f7, 0x7, 0xd, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x9, 0x40}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x40, 0x7, [@generic={0x45, 0x9, "26d011364a6d71f0c4f9dd5c8523f4348c889c536bcc1a20afb3c0252431c8fb8f86c6347a367e62e954bd14c1bef5bb9636e9b694700892ea94b9fb430112f7919166"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x6, 0x73, [@generic={0xfb, 0xc, "38a4aa369e10712b3ee9b8345475e15883e3d06dfa02782f3f6eb6be0c2e800009885f9e60e0365c5ab9f3ef530a1fcced1582e0721e393b10077ae29c00bf7fa6befc895fa32d24108126b28b0caef9c719b58fc9bea12f786b3d43ec936a565059fdb11e711d7268b690d3f581612ed4e859347d90b5fbd7d420b7cafab1a1d2ba64ff63ec95fe68420ddd01da17dc4d177e72152e9f7fb4f61a5aa53fdce29829f1022d9036a06ebfac9432fcfa66efea5d7e67346a91562cfc8102b9e707f9b1f78fdb834aa73e3dc7ef7c31ff488c522dba79e8c1ef9d042b4c5c6a7e43bdd86a81e6ccabaa7f7b44209549d745bbed5d4521bd35b192"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1f, 0x8, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0xe2c70d41cc3a5fc5, 0x10, 0x400, 0x3, 0x15, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x80}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x1, 0x1f, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4, 0x8, 0x1, [@generic={0xcc, 0x21, "2659f2a3d1bc63da8c6260aa1a795061eba5d0b0fddeda6c3320a23416ead17a91b28e8d07399b3f9949e36916f1c23a2efa3fdb1d8a28704cfff89a915e924b2542a10f15c602d99af7e7d56345ed2d039e5de3b2cd03f4872d7714e00ace777c454b99a593f96b4af72b78ea59a643761f9b26c280ebe0ec1b1528abde2896375ec3539f479c4e7968cdc711b080804aec238ca582d68fed1daf774f4269dd222d1b00fe947c54d0a7b7a40c3542557dcb0dc2912638fd5413c899c7d59aac68a6b35e13c6d2360468"}, @generic={0x51, 0x3, "b852310887c5f4d115c77697c757be4344a6350573aebe4f3b76734f4c085fab6d57b407f88e0dee3aca75a9c1e3e2b98f9509ef2e164b36ad4733a997b4b7045bccbaad097b59ff778f4a992d477b"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3f}, @generic={0x2a, 0x23, "9652e3f25950fbc862f68bdc5f081343c08a894abb9cdb9471eb4fe7c98f19e8ae9bec4d16852205"}]}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x7, 0x2, 0x6, 0x0, 0x6, [@hid_hid={0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xbae}}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0xff, 0x5, [@generic={0xa0, 0x23, "626231e7affb29c98fb2d8ac3fc2bc950465ba080c1be6d7d4479760e2a5de25377a69a827f0e504366690c1d81900767d058326145d0fd828c2171dc8a19dd92be3887cd4541a9685fa400dd6c181f60d3f8157ce532a0380e1fd87698c65ec4bc661d4e0de351a2e9f8e10fb33e2a11521628b2a16bd863109fc78bcae2d22e242d7d75e02e26a4ab3d10849551f0bba24c27b86ab56e3c42906b8908f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x81, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0xbe50ca4003cfb026, 0x1e, 0x10, 0x5e, 0x0, 0x7, [@generic={0x3b, 0x3d, "8978c5dd1b6c596d01c46afe28a47e785a928e24bf00ed752c4c865e0b0f6d32811abd9c6621c06b2405657b6d12552ae0f76a59c227638190"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1fa}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x1f, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa5, 0xfe01}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x2, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}, @generic={0x9f, 0x23, "b22a32f17c73a04476c4ddf963f18502cd5a7c10e29d9970aadd7f9f438aa0238704b0de56caca0bb682311341ec952dc2f873ccf1bdd04dfd68fc57b3295f0b3fda3631f5b9edf7a73cfd5e265c1e6d737e79d7d7ed62dd31981db57ed4768cec43ea1a7d7df497974ba549c50319307cdbf36933bc4f46772496e38b71360d518b88fdfb3ff6cb9dd2a0b84d52f7689e49bf8e101928942f9175d848"}]}}]}}, {{0x9, 0x4, 0x24, 0x6, 0x8, 0x2, 0x2, 0x2, 0xb1, [@generic={0xf8, 0x1, "25de6e717a3362237e744d6667b82c28b99e84e074dad5a0d840c7ad426d12ddd58da34271cec519b026d5299338b7d632c7c09f9f227c6a137175e43f4f96bb1ffa1540a374835d1e72ad675b70c9b39ca25fbc4907516e611296a8eacd718751bc036834cf898be8d9c843be30d3da2fec8b086e6954db067d27ac5a550b577f9ff574068eb76c280eb817da96dd6e0b248c0a46d731cfe12bef3c27ab33a433ba23ec1f4bbb75b8b8eb422d736cef032474c0e840055037989112f30e04563e82e37005aaa1cf2abd6d72f2a33f75f9f329e59bbe49530bbfbbd572a77f57d7ab2ed066ca114cda92fbe62f9d756d2d30b6bc4c2a"}], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x1, 0x80, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x6, 0x51, 0x20, [@generic={0x46, 0x8, "add433816468cd93c754348a87b1aa894ef4564e110733342cebb907f69ab5d6742117098b0429b5bb893dd18eaa0a0c5d53cecd727d3b070309a7abeb730dc782dfacfa"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x7, 0x3, [@generic={0xde, 0x5, "ea2f6b65703132ca41274d9716fd7c6acafaafa9d87411c4a2d60d632837a9f9006e65a9744d5a8f0ee7556ae08512a97ca11165d15d05dea1f8bea954c69334300455fe814b6d42b0563b98be2430328a3f3bb34b91e372b1fffe3d5cf9a53a8ee5d4311d81706c7cf6b9eea00837813889db22c7522c097d303d4122b8bb35dbd592df2a8958641f4e67e387e642e02dbcedb7b06a480e2f693124b1df73fbda2d271ad36f437ab692e6cfa5b5508ae51c768964dcd2cdfdf2f14adc90ac7ce848f641a69207ddc382207dbf8e729864c17faef7a3405e778cb27d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xaf, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x1f, 0xfc00}]}}, {{0x9, 0x5, 0x9bf6ee1dbd2e7a99, 0x2, 0x20, 0x6, 0x8, 0x2, [@generic={0x4d, 0x10, "c9e3eb07fde7ba0b223c124317c9108a378ca120be83499f4bb22629c821c02bd3f8ec4fb340bcaab05c8d7c813b3ed03db842afe7ecaa8f1df3377a2129ffa2836330915909835b2c51aa"}, @generic={0xbb, 0x2, "864dbd9871175709a22e5ba566c914a6a21b4b78c60e81d7268a22f4f53ded4269fab65aba9b40dc1144e6894b5355c6ccef49305981f235b5c69dbab0accf12dbc820098eb7638d3245bf6f633ee9826d5208937c91128ee67375052e4bead0a93001e12fc3efd9c178f798a98de35783bc09cde6d436986a01913f93f210690d0d4a439366df2ecf61bf66e7401faa4cd9d76720241406edef5e09a495f0d9bdd2149d70db196f8240dd6043363f6d2f128918c6a64480be"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0xff, 0x2, [@generic={0x2d, 0x3, "453e7d748d6119111ab08ffe863b2b8f046371e84705e66df5fc5fa48eb5bae823d3b6ee6fcc0d55153f9f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x1, 0x9, 0x8, [@generic={0x9c, 0xb, "0764cb44acb172c918fcd9e1e413005f2a78286e6f8d348382b9a6f99aa190219ee7ea4f9a23a7a93f03e3f379d132192018156424b3c8cf9fe3dc6d704e5e0f80d7bd5296dbc8d2199f71a87437a1b35be2f6b6261b254719026b00712633ad241c7f09e1ba14d1937de62b32fe811b62399b4894e070a024354b5b1c5a3dba0976e2a3f06b9775f02cf4110a6af19704aaea804635aa1733f5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x6, 0x40, 0x31, [@generic={0xf1, 0x11, "37d8ee1a63e238e53d76d421fa99dda5299ba50f8864180bef9a5ae8359387f0a33aa7b207bebeeb568618785251e21a734993a263be4f5223a51e26cc08ac9c211c48cfa6899a00703ae8c32781948042a39c8164f421b004a669fed74a7b815478cbf2d3bdc5dc8c3d0226eb4ccbedabc56244a0de2ef6fd9b540bd0dbd4487bbe7b2d385a6beaea5ba37bf1268499a2ccb38f831d32cdd0fa2c44b413b2f7426b41097ce2f2366233c482645be974c2d72fb5b0ccf09ab48774e3958cb36121a8ff867d63ddf32cc9c7ed2ee9242d7f7c10eedb3b40a5f20e24d4fa44b20ffc42930e2a8c2ed43cc34132cab5cf"}]}}]}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002180)={0xa, 0x6, 0xc37b880e9e2a87d1, 0x9, 0x7, 0x1f, 0x20, 0x7}, 0xb0, &(0x7f00000021c0)={0x5, 0xf, 0xb0, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x3, 0x80, 0x4}, @generic={0xa0, 0x10, 0xa, "2acf2362864c1b17fb19825599522507cfacd2a800f24c3b2696729c665e7bd9313b3c9c9ea8c22d91e9e15241c6eef604f7169c7f73347f8975d8b5368ea4db3065766d1978858aea28fd269693f02de964e77964014c352ea7b1de3f44143e2a1fb1dbcf3dff64acdd5cce661285f9d05f1271535c5a0cf37da8004615aeaccc7786ccb34f4c02c0d09939164b3d69fbebd112ebb7ad55e0179a825b"}]}, 0x4, [{0xf9, &(0x7f0000002280)=@string={0xf9, 0x3, "b269af3471a5303f3d34676578daec9aa3dd425103a860cf15022ddbc7ef5a96aa04e10694064a92ed76d2613e182dfcb830e81b802ecd000be551a1d26ec60804d0138666298985f29b7d6647be0ef11df068e5c155321086e21486f9d3444ceb3ac98f40a9c12dba8a44e12d444d03bd3dc56985005572eda3503230cb316a51e230640b582ac0f15bd1fae56c7c6ce2eea35d66ad84180259a492a8096a4e8ab8ff3dc287a22e94ff823e3b40fc4dad4613a31385fb2510c14d182771708c0068dd5822fd3ad510afb68abf9592a2eaa3af8c02dcf0e9df82bab2dd73a595c15711328a51098fd2b3d021eaf7278bf2b4050dba36ec"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000002580)={0x14, &(0x7f00000024c0)={0x0, 0x21, 0x79, {0x79, 0xf, "bb856c97a90da70b245b2620db24dfdf9554e16a099c13faa0b43a664cc62466323662580a795b237cc8aa3f023fe18ea2a7f434b54c812eaba3873a1ba5de0f5297475a8e814148030a90fa31599edeba4e4d4fbb492d3126f835ec3222f288874ce23f4b29f3d55802dc3f9bce37b9d6ccdba0d0df51"}}, &(0x7f0000002540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000027c0)={0x44, &(0x7f00000025c0)={0x20, 0x6, 0x34, "af34922fbb0e9e7d7aaa147320f61d4334005b2a944894ad71770e3263f1d0cf3e894c71ba94c6d23c2048a8a8e26abb3141ca46"}, &(0x7f0000002600)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000002640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002680)={0x20, 0x80, 0x1c, {0xfffa, 0x3, 0x8, 0x7, 0x8000, 0x3, 0xffe1, 0x4a0, 0xff, 0x101, 0x80, 0x800}}, &(0x7f00000026c0)={0x20, 0x85, 0x4}, &(0x7f0000002700)={0x20, 0x83, 0x2}, &(0x7f0000002740)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000002780)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x20, 0x4, 0xe3, {0xe3, 0x8, "23fca8fdfb8285c07da0cf5e734ef8c1b3cedadfa03cafaf43496f8ae088409413bd20722cf609e3814119080cee3b626790dc128b1a174b131a18d54abbbc80ce6f4649b3ef98c0eaf93842211ae95d98263bc554736f3b487afc23685ed429eb43bbeb795215b0f5c9a5dcef799b9261016b47ba45f650399aa92751050c5f460358a3e8f9efbe4db659a18efad7b5ec14c4503abea627fca13db6afe7e7c1be423388ca349495502797e9e4a65f5a46356c8e88fcb5d27ef4f683ef3eb6fb298654afa6cd894835f6121cc7e71e134a854e8395f956a1e6dc396b34d49349a2"}}, &(0x7f0000000c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000002840)=ANY=[@ANYBLOB="200a8f000000f154a739d1ac499478400e27122773e5335ba685f50fad62d0e75ff802f0b4f84b6bc2b63e2a9daff0226d6868db75bab31a7b6ace5d758922da43f0c33d399790b66a8bc24222dda34e3bad3cc1a9d32ba264e8c3874f07a15e62056fa8088912485ce44c68c4137bb0b96d9c34b7e73d6aef384ff14714ebe182bd84281cd568618426cdaa056cbc5592018adeba2e88c2b2ee1a279278404e6bc54413be695cc931d7900616ab3fb1281456538b5cb3974f81bbdece9f59cf455bd35d3c91d896ae35edc57de3beb2a910288c000000000000000000"], &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xb21a, 0x7, 0x8001, 0xffff, 0x0, 0x9, 0x8, 0x9, 0x7, 0xffff, 0x4, 0x1000}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0xdf2}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a5c90e7d6ebfe03b7c79f4b513695e310043d009b250102030109025d00010000000009040000000cc91900052406000005240000000d240f01000000000000000000052401000006241a000000120100000000000000000000000000000000052406000005240000"], 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x40, 0x21, 0x6c, {0x6c, 0x9, "712a0777a3f3494084c3a052216b49fe35dbc596e0f903f255bd15e91ce9a4ef99afc2ae8c69acbaca45bc971f0a9341d3166103b5fbcf072113e8cd1c70ec0e3de59ffa6ab0197d3b257261f15d6d36d8209af14b63cf89d5fcb669c1dc92640eb18e7f65ba26d0114d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x40, 0x15, 0x52, "589d619656d71bfeed6e91659d73a9b057310672b5ffce7b933c56005ab06921240ab06d33470c2e9dac771e8dc87d9e4c7c9d6f07d14a24dc9aef5512c310ed629604d8d6f79d9449b712fc1c349dba9e32"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x6, 0x0, 0x29, 0x4, 0x8, 0x1ff, 0x2, 0xd6, 0xcf73, 0x7d, 0x9, 0x200}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x20}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x8001}, &(0x7f0000000a40)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000240)={0x40, 0x24, 0xfa, {0xfa, 0x8, "1bbe281de09b6e4207104e05963ae8e3c9766058b87745bf738b0de4a23d72a35ba24b6e39cba3149524243a47f842ab09cd4270076e36365a6db2488ae0d98e6db8af14235d3e7f5bf15aee948d92c8e915be6f7247b902ad6c9ec895b3f64a2a9b195bf9ee4c69bf430805fb7790bb405d88ba68f3af4c3f84dc54a5b0ac1409fba23d0fc43d284ca4dcaf1391bde7edab31b3b1c4e9c8e0854401b60babb7e8871b16b03ed401dc7901be20d459cfce4010f1dc0e7fb70193229711b676ac9ed1c4084e09e0c57f0705aefa06bb19106101dfe8fbf8ffbf798dfbe859b9e8b85a43df58830a3665638a22cf6a174b9852cd434e34b6a5"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000700), &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f, 0x9c, 0x1, {0x22, 0xfcd}}}}, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x0, 0x16, 0xfc, "d63e13c659a5fff2d6cdd78077edf41185132057d885314afc99d279055c65aa4b5907ab18fd50470407866f4f2d502f21b41bdc790d1f0636994eb330e13d9e03e7af3644c4b47f58d64f2d96607240f046d56a297ac216d18eb55a7ec64bc990cbe36af2e15b3c36393ff92fe170d3f26876b97204ce875d7a9c7808dc9991845691f55b35e6882574cd7a09c66cfb7697c9a925be57e7b206d87c62f4a242fe1ba13311761ae8eb7e70803e14bd25157312423dd7ab1950806e914b934a2f2e580a357b78f4ca959e4fd0e8a1f17830f898b47e33c06570233cb9976235671407774446a0f1caf20d4bf7adc31acccd29d65104e2c423986679ce"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000740)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x8}}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect(0x0, 0x10de, &(0x7f0000001080)={{0x12, 0x1, 0x450, 0x99, 0xfc, 0x88, 0xff, 0xfe9, 0xdb78, 0xee8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10cc, 0x4, 0xff, 0x9, 0x50, 0x6, [{{0x9, 0x4, 0xe3, 0x7f, 0xf, 0x3d, 0x32, 0x14, 0x7f, [@generic={0xc6, 0x3, "6d471e13cf95de9f6509cbf85de70f075a09dc7534f9b9dca0d78030440bf899bd3abb2502b34cfc647204495b5e87f5688529e2a7cf33442978e2568f59aa4be3fb30acf4cfc190855ad10b54aeb48d0c9e17816a9014090d66ee888ab2b4980c66e2bb4570938f4f43e0757b5a0c3ac11213a6743904433b23f70138799d37e73400d20bc0f815d16fea0bbe85674c3161673d07f010fef0d73411910150fc18a19396e3c90c1c539238e621f45a2fb1373e58d263ce7f6f8ab4aee93af1292c3652f2"}, @hid_hid={0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0xbbc}}], [{{0x9, 0x5, 0xd, 0x10, 0x1ff, 0x80, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x8000}, @generic={0x4, 0x5, "a380"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x81, 0x9, 0xf8, [@generic={0x21, 0xb, "8345edf744f46b786a9d9a0e2134c73ccc3a4c52c87d2ee378e325dfe87322"}, @generic={0x77, 0xf, "36c7735d6c370946a309f7e297f0a1427aeb0214c3d45a708ac0a2c956b6d4b16fd4ad541e249fef0b5ab24029bc516cc842ad842299c2eb63d49a0f5c9c505aac12c2a4c4bb12ba6eb698808d82c4df03c3f581491f6957422c415a5034fddad7b1e5deb0021eaa8c081312de9cb3f473c736cff3"}]}}, {{0x9, 0x5, 0x8, 0x6, 0x400, 0x81, 0x4, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3502}, @generic={0x61, 0x11, "9c13ed4068ab1e193ee53b703480d9f3f0e02f3fb258eb3660a5d7fb231f2ccfcecc4568eb17eb2d49d6debeb0355591824ea3b0e478586452e6770ae12c34045d1b6c9f551dc0da15f2803d2fbb5da81b13d6f87266e2f9352e603098285d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x1, 0x10, [@generic={0xa, 0xc, "ea389bfbc8a51b7c"}, @generic={0xa1, 0x23, "dda8754b25db0c60abce0aa677572a0246e7c36ef7403a10fdb6935dc5de90476f7c7e4835365474e8cd12b0d5296b851de482c9a87179db1468315a57ab44d1afe7441c2f446ee2f5cf3f5e875dc609f011097c429a99580f0349d0217af769ca252a17fecd66434cc0f9a8a2817dbcbeabc725f3a63b3a0ca41a00d11a1993c864a88d32110974b7402fb8779cbe1beefd3a4cf58b958aaea273e2e6d0cd"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0xca, 0xff, 0x9, [@generic={0x6c, 0x3, "2289e4469600d746bfe50489b3e6f4ef6b084eee89cad532dd85ff62344d2b8956c2839c39c5f58d7e028585abfc0f36a486cfa7b32fb284160e60f9193d001829ab1efea2afa2965c7527d413c4592a755ba280be180513ed1a6022e5ddd865b1712b3d25c08beecd50"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x80, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9ec}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xff, 0x7f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x80, 0x47, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0xc1, 0x7ff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xd8, 0x2, 0x4, [@generic={0xbf, 0x1, "1fe80a667e3b79126252740ba7bfad42f10d0fa4fe52fe40b603be2b931955c34660ad6f556042697952ec84e182701c21c2335e875757a970833c03fe916002a943f95a454eec8b0e96565b456db6e991b8ab16b54263905e454a681935ae9841bdb4a7755066efec934282da3b5a156a98637bf845ccb19f67a6009151e0b9077b7e608e9cae9c4d8a4c79ece6108c966debe6a99907f964a9ccfa128f782aa396a9d16df44693793f31125f8513055546a8cd266689da8929d42660"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0xff, 0x80, [@generic={0x20, 0xe, "3535f30e95b733c0d3d32242d4d95df0bec9f2767c49d785349f131829e5"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x3f, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0xc, 0x7cf, 0x0, 0xff, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0xc4f}, @generic={0xae, 0x24, "a8c1839e94eae6a8928f386dbe755de78bb5a228d6a4f39d32790652ef53eacfec1579244fc609e5c3e50aa7e9467556d5c6128cbdef2be7085e6feadf1faeba726a95dcb8f73dfe20c452d9ab76c9a222a29c63f29884c1b8888dca3963155e18c07c716e474998cce76b2d969fc74b1576229933cc5d07b72d26dffc72f33607156babb3358d609e8357441c4665ce4d1da6778e16b4525d67c4362871e41ab13016f071467b3bc9134c90"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x40, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x1, 0x2, 0x0, 0x4f, 0x3f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xff}]}}]}}, {{0x9, 0x4, 0xfa, 0x6, 0xb, 0xab, 0x8d, 0x20, 0x0, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d9aebf"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x6df, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x4f, 0x80}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x50, 0x24, 0x13, 0x70, "ba5aab2e565a07a0804a8c0684d0ba3ce6ac835f4230e7d5a079c8689a4558292744e4611911a2e53add7c4fe38067248ede8105fbde1f171789f659c3220475f8977df1d10b65f020ca31a1"}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x6, 0x5, [0xdf, 0x533, 0xdfaa]}]}], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x1, 0x20, 0x2, [@generic={0x72, 0xf, "049a784125ccc88de55883704f99dc82fcb28cf4fe2563a00bae469c229f73e5af4d1aedd80244cfb55f18df42ae412947b6c8c92a69d8fc642702f9e16df563a5d60d3b2beed6c7eb88aa9788eab3b986d1c000473382f67fe4fcaeed935b58dc4ab130e93fa90ed8b1b7ed6846f195"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x7f, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x20}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3f7, 0x7, 0xd, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x9, 0x40}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x1, 0x40, 0x7, [@generic={0x45, 0x9, "26d011364a6d71f0c4f9dd5c8523f4348c889c536bcc1a20afb3c0252431c8fb8f86c6347a367e62e954bd14c1bef5bb9636e9b694700892ea94b9fb430112f7919166"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x6, 0x73, [@generic={0xfb, 0xc, "38a4aa369e10712b3ee9b8345475e15883e3d06dfa02782f3f6eb6be0c2e800009885f9e60e0365c5ab9f3ef530a1fcced1582e0721e393b10077ae29c00bf7fa6befc895fa32d24108126b28b0caef9c719b58fc9bea12f786b3d43ec936a565059fdb11e711d7268b690d3f581612ed4e859347d90b5fbd7d420b7cafab1a1d2ba64ff63ec95fe68420ddd01da17dc4d177e72152e9f7fb4f61a5aa53fdce29829f1022d9036a06ebfac9432fcfa66efea5d7e67346a91562cfc8102b9e707f9b1f78fdb834aa73e3dc7ef7c31ff488c522dba79e8c1ef9d042b4c5c6a7e43bdd86a81e6ccabaa7f7b44209549d745bbed5d4521bd35b192"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1f, 0x8, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0xe2c70d41cc3a5fc5, 0x10, 0x400, 0x3, 0x15, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x80}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x1, 0x1f, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4, 0x8, 0x1, [@generic={0xcc, 0x21, "2659f2a3d1bc63da8c6260aa1a795061eba5d0b0fddeda6c3320a23416ead17a91b28e8d07399b3f9949e36916f1c23a2efa3fdb1d8a28704cfff89a915e924b2542a10f15c602d99af7e7d56345ed2d039e5de3b2cd03f4872d7714e00ace777c454b99a593f96b4af72b78ea59a643761f9b26c280ebe0ec1b1528abde2896375ec3539f479c4e7968cdc711b080804aec238ca582d68fed1daf774f4269dd222d1b00fe947c54d0a7b7a40c3542557dcb0dc2912638fd5413c899c7d59aac68a6b35e13c6d2360468"}, @generic={0x51, 0x3, "b852310887c5f4d115c77697c757be4344a6350573aebe4f3b76734f4c085fab6d57b407f88e0dee3aca75a9c1e3e2b98f9509ef2e164b36ad4733a997b4b7045bccbaad097b59ff778f4a992d477b"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3f}, @generic={0x2a, 0x23, "9652e3f25950fbc862f68bdc5f081343c08a894abb9cdb9471eb4fe7c98f19e8ae9bec4d16852205"}]}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x7, 0x2, 0x6, 0x0, 0x6, [@hid_hid={0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xbae}}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0xff, 0x5, [@generic={0xa0, 0x23, "626231e7affb29c98fb2d8ac3fc2bc950465ba080c1be6d7d4479760e2a5de25377a69a827f0e504366690c1d81900767d058326145d0fd828c2171dc8a19dd92be3887cd4541a9685fa400dd6c181f60d3f8157ce532a0380e1fd87698c65ec4bc661d4e0de351a2e9f8e10fb33e2a11521628b2a16bd863109fc78bcae2d22e242d7d75e02e26a4ab3d10849551f0bba24c27b86ab56e3c42906b8908f"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x81, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0xbe50ca4003cfb026, 0x1e, 0x10, 0x5e, 0x0, 0x7, [@generic={0x3b, 0x3d, "8978c5dd1b6c596d01c46afe28a47e785a928e24bf00ed752c4c865e0b0f6d32811abd9c6621c06b2405657b6d12552ae0f76a59c227638190"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1fa}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x6, 0x1f, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa5, 0xfe01}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x0, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x2, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}, @generic={0x9f, 0x23, "b22a32f17c73a04476c4ddf963f18502cd5a7c10e29d9970aadd7f9f438aa0238704b0de56caca0bb682311341ec952dc2f873ccf1bdd04dfd68fc57b3295f0b3fda3631f5b9edf7a73cfd5e265c1e6d737e79d7d7ed62dd31981db57ed4768cec43ea1a7d7df497974ba549c50319307cdbf36933bc4f46772496e38b71360d518b88fdfb3ff6cb9dd2a0b84d52f7689e49bf8e101928942f9175d848"}]}}]}}, {{0x9, 0x4, 0x24, 0x6, 0x8, 0x2, 0x2, 0x2, 0xb1, [@generic={0xf8, 0x1, "25de6e717a3362237e744d6667b82c28b99e84e074dad5a0d840c7ad426d12ddd58da34271cec519b026d5299338b7d632c7c09f9f227c6a137175e43f4f96bb1ffa1540a374835d1e72ad675b70c9b39ca25fbc4907516e611296a8eacd718751bc036834cf898be8d9c843be30d3da2fec8b086e6954db067d27ac5a550b577f9ff574068eb76c280eb817da96dd6e0b248c0a46d731cfe12bef3c27ab33a433ba23ec1f4bbb75b8b8eb422d736cef032474c0e840055037989112f30e04563e82e37005aaa1cf2abd6d72f2a33f75f9f329e59bbe49530bbfbbd572a77f57d7ab2ed066ca114cda92fbe62f9d756d2d30b6bc4c2a"}], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x1, 0x80, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x6, 0x51, 0x20, [@generic={0x46, 0x8, "add433816468cd93c754348a87b1aa894ef4564e110733342cebb907f69ab5d6742117098b0429b5bb893dd18eaa0a0c5d53cecd727d3b070309a7abeb730dc782dfacfa"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x7, 0x3, [@generic={0xde, 0x5, "ea2f6b65703132ca41274d9716fd7c6acafaafa9d87411c4a2d60d632837a9f9006e65a9744d5a8f0ee7556ae08512a97ca11165d15d05dea1f8bea954c69334300455fe814b6d42b0563b98be2430328a3f3bb34b91e372b1fffe3d5cf9a53a8ee5d4311d81706c7cf6b9eea00837813889db22c7522c097d303d4122b8bb35dbd592df2a8958641f4e67e387e642e02dbcedb7b06a480e2f693124b1df73fbda2d271ad36f437ab692e6cfa5b5508ae51c768964dcd2cdfdf2f14adc90ac7ce848f641a69207ddc382207dbf8e729864c17faef7a3405e778cb27d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xaf, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x1f, 0xfc00}]}}, {{0x9, 0x5, 0x9bf6ee1dbd2e7a99, 0x2, 0x20, 0x6, 0x8, 0x2, [@generic={0x4d, 0x10, "c9e3eb07fde7ba0b223c124317c9108a378ca120be83499f4bb22629c821c02bd3f8ec4fb340bcaab05c8d7c813b3ed03db842afe7ecaa8f1df3377a2129ffa2836330915909835b2c51aa"}, @generic={0xbb, 0x2, "864dbd9871175709a22e5ba566c914a6a21b4b78c60e81d7268a22f4f53ded4269fab65aba9b40dc1144e6894b5355c6ccef49305981f235b5c69dbab0accf12dbc820098eb7638d3245bf6f633ee9826d5208937c91128ee67375052e4bead0a93001e12fc3efd9c178f798a98de35783bc09cde6d436986a01913f93f210690d0d4a439366df2ecf61bf66e7401faa4cd9d76720241406edef5e09a495f0d9bdd2149d70db196f8240dd6043363f6d2f128918c6a64480be"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0xff, 0x2, [@generic={0x2d, 0x3, "453e7d748d6119111ab08ffe863b2b8f046371e84705e66df5fc5fa48eb5bae823d3b6ee6fcc0d55153f9f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x1, 0x9, 0x8, [@generic={0x9c, 0xb, "0764cb44acb172c918fcd9e1e413005f2a78286e6f8d348382b9a6f99aa190219ee7ea4f9a23a7a93f03e3f379d132192018156424b3c8cf9fe3dc6d704e5e0f80d7bd5296dbc8d2199f71a87437a1b35be2f6b6261b254719026b00712633ad241c7f09e1ba14d1937de62b32fe811b62399b4894e070a024354b5b1c5a3dba0976e2a3f06b9775f02cf4110a6af19704aaea804635aa1733f5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x6, 0x40, 0x31, [@generic={0xf1, 0x11, "37d8ee1a63e238e53d76d421fa99dda5299ba50f8864180bef9a5ae8359387f0a33aa7b207bebeeb568618785251e21a734993a263be4f5223a51e26cc08ac9c211c48cfa6899a00703ae8c32781948042a39c8164f421b004a669fed74a7b815478cbf2d3bdc5dc8c3d0226eb4ccbedabc56244a0de2ef6fd9b540bd0dbd4487bbe7b2d385a6beaea5ba37bf1268499a2ccb38f831d32cdd0fa2c44b413b2f7426b41097ce2f2366233c482645be974c2d72fb5b0ccf09ab48774e3958cb36121a8ff867d63ddf32cc9c7ed2ee9242d7f7c10eedb3b40a5f20e24d4fa44b20ffc42930e2a8c2ed43cc34132cab5cf"}]}}]}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002180)={0xa, 0x6, 0xc37b880e9e2a87d1, 0x9, 0x7, 0x1f, 0x20, 0x7}, 0xb0, &(0x7f00000021c0)={0x5, 0xf, 0xb0, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0x10, 0x3, 0x80, 0x4}, @generic={0xa0, 0x10, 0xa, "2acf2362864c1b17fb19825599522507cfacd2a800f24c3b2696729c665e7bd9313b3c9c9ea8c22d91e9e15241c6eef604f7169c7f73347f8975d8b5368ea4db3065766d1978858aea28fd269693f02de964e77964014c352ea7b1de3f44143e2a1fb1dbcf3dff64acdd5cce661285f9d05f1271535c5a0cf37da8004615aeaccc7786ccb34f4c02c0d09939164b3d69fbebd112ebb7ad55e0179a825b"}]}, 0x4, [{0xf9, &(0x7f0000002280)=@string={0xf9, 0x3, "b269af3471a5303f3d34676578daec9aa3dd425103a860cf15022ddbc7ef5a96aa04e10694064a92ed76d2613e182dfcb830e81b802ecd000be551a1d26ec60804d0138666298985f29b7d6647be0ef11df068e5c155321086e21486f9d3444ceb3ac98f40a9c12dba8a44e12d444d03bd3dc56985005572eda3503230cb316a51e230640b582ac0f15bd1fae56c7c6ce2eea35d66ad84180259a492a8096a4e8ab8ff3dc287a22e94ff823e3b40fc4dad4613a31385fb2510c14d182771708c0068dd5822fd3ad510afb68abf9592a2eaa3af8c02dcf0e9df82bab2dd73a595c15711328a51098fd2b3d021eaf7278bf2b4050dba36ec"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x1c09}}]}) (async) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000002580)={0x14, &(0x7f00000024c0)={0x0, 0x21, 0x79, {0x79, 0xf, "bb856c97a90da70b245b2620db24dfdf9554e16a099c13faa0b43a664cc62466323662580a795b237cc8aa3f023fe18ea2a7f434b54c812eaba3873a1ba5de0f5297475a8e814148030a90fa31599edeba4e4d4fbb492d3126f835ec3222f288874ce23f4b29f3d55802dc3f9bce37b9d6ccdba0d0df51"}}, &(0x7f0000002540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000027c0)={0x44, &(0x7f00000025c0)={0x20, 0x6, 0x34, "af34922fbb0e9e7d7aaa147320f61d4334005b2a944894ad71770e3263f1d0cf3e894c71ba94c6d23c2048a8a8e26abb3141ca46"}, &(0x7f0000002600)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000002640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002680)={0x20, 0x80, 0x1c, {0xfffa, 0x3, 0x8, 0x7, 0x8000, 0x3, 0xffe1, 0x4a0, 0xff, 0x101, 0x80, 0x800}}, &(0x7f00000026c0)={0x20, 0x85, 0x4}, &(0x7f0000002700)={0x20, 0x83, 0x2}, &(0x7f0000002740)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000002780)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) (async) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c40)={0x14, &(0x7f0000000b00)={0x20, 0x4, 0xe3, {0xe3, 0x8, "23fca8fdfb8285c07da0cf5e734ef8c1b3cedadfa03cafaf43496f8ae088409413bd20722cf609e3814119080cee3b626790dc128b1a174b131a18d54abbbc80ce6f4649b3ef98c0eaf93842211ae95d98263bc554736f3b487afc23685ed429eb43bbeb795215b0f5c9a5dcef799b9261016b47ba45f650399aa92751050c5f460358a3e8f9efbe4db659a18efad7b5ec14c4503abea627fca13db6afe7e7c1be423388ca349495502797e9e4a65f5a46356c8e88fcb5d27ef4f683ef3eb6fb298654afa6cd894835f6121cc7e71e134a854e8395f956a1e6dc396b34d49349a2"}}, &(0x7f0000000c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000002840)=ANY=[@ANYBLOB="200a8f000000f154a739d1ac499478400e27122773e5335ba685f50fad62d0e75ff802f0b4f84b6bc2b63e2a9daff0226d6868db75bab31a7b6ace5d758922da43f0c33d399790b66a8bc24222dda34e3bad3cc1a9d32ba264e8c3874f07a15e62056fa8088912485ce44c68c4137bb0b96d9c34b7e73d6aef384ff14714ebe182bd84281cd568618426cdaa056cbc5592018adeba2e88c2b2ee1a279278404e6bc54413be695cc931d7900616ab3fb1281456538b5cb3974f81bbdece9f59cf455bd35d3c91d896ae35edc57de3beb2a910288c000000000000000000"], &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xb21a, 0x7, 0x8001, 0xffff, 0x0, 0x9, 0x8, 0x9, 0x7, 0xffff, 0x4, 0x1000}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0xdf2}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) (async) 03:14:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 6) [ 1247.141061][ T3758] usb 4-1: USB disconnect, device number 51 03:14:27 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x4000, 0x0, 0x0) 03:14:27 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x53, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:27 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3334, 0x0, 0x0) [ 1247.272817][ T6479] UDC core: couldn't find an available UDC or it's busy: -16 [ 1247.287309][ T6479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1247.328289][ T6479] UDC core: couldn't find an available UDC or it's busy: -16 [ 1247.349154][ T6479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1247.453113][ T32] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1247.603018][ T3758] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1247.858321][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.870517][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1247.881299][ T32] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1247.891296][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1247.901861][ T32] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1247.963329][ T3758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.063524][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1248.073258][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.081273][ T32] usb 3-1: Product: syz [ 1248.089645][ T32] usb 3-1: Manufacturer: syz [ 1248.094567][ T32] usb 3-1: SerialNumber: syz [ 1248.134511][ T3758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1248.143802][ T3758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.151809][ T3758] usb 4-1: Product: syz [ 1248.156522][ T3758] usb 4-1: Manufacturer: syz [ 1248.161153][ T3758] usb 4-1: SerialNumber: syz [ 1248.405047][ T6493] UDC core: couldn't find an available UDC or it's busy: -16 [ 1248.412442][ T6493] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1248.558956][ T6490] FAULT_INJECTION: forcing a failure. [ 1248.558956][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.571733][ T6490] CPU: 1 PID: 6490 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1248.582202][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.592261][ T6490] Call Trace: [ 1248.595569][ T6490] [ 1248.598504][ T6490] dump_stack_lvl+0xcd/0x134 [ 1248.603092][ T6490] should_fail.cold+0x5/0xa [ 1248.607592][ T6490] should_failslab+0x5/0x10 [ 1248.612102][ T6490] __kmalloc+0x7b/0x4d0 [ 1248.616253][ T6490] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1248.621970][ T6490] tomoyo_realpath_from_path+0xc3/0x620 [ 1248.627595][ T6490] ? tomoyo_profile+0x42/0x50 [ 1248.632281][ T6490] tomoyo_path_number_perm+0x1d5/0x590 [ 1248.637753][ T6490] ? tomoyo_path_number_perm+0x18d/0x590 [ 1248.643378][ T6490] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1248.649184][ T6490] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1248.655162][ T6490] ? __context_tracking_exit+0xb8/0xe0 [ 1248.660614][ T6490] ? __fget_files+0x28c/0x470 [ 1248.665282][ T6490] security_file_ioctl+0x50/0xb0 [ 1248.670227][ T6490] __x64_sys_ioctl+0xb3/0x200 [ 1248.675004][ T6490] do_syscall_64+0x35/0xb0 [ 1248.679501][ T6490] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1248.685392][ T6490] RIP: 0033:0x7fd05c028e07 [ 1248.689812][ T6490] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1248.709419][ T6490] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.717835][ T6490] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1248.725801][ T6490] RDX: 0000000000000000 RSI: 0000000040045506 RDI: 0000000000000003 [ 1248.733896][ T6490] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1248.741878][ T6490] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1248.749849][ T6490] R13: 0000000000000000 R14: 00007fd05c670020 R15: 0000000000000000 [ 1248.757864][ T6490] [ 1248.764471][ T6490] ERROR: Out of memory at tomoyo_realpath_from_path. 03:14:28 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000000000000000624e41a0000000905810320000000000904010000020d00000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0xb9, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x2, 0x1, 0x81, 0x10, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b9e83747aa85"}, {0x5, 0x24, 0x0, 0xfb}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x401, 0x5}, {0x6, 0x24, 0x1a, 0x1000, 0x18}, [@mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x9, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2f, 0xff, 0x1, 0xf4}, @mbim_extended={0x8, 0x24, 0x1c, 0xa5, 0x20, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xac, 0x1, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x80, 0x1, [0x7a, 0x5, 0x40, 0x2, 0x40, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x20, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x3f}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x2, 0x2, 0xff, 0x2}, 0x73, &(0x7f0000000240)={0x5, 0xf, 0x73, 0x6, [@generic={0x3e, 0x10, 0xa, "4a192680e0761b24ed0c3ce334e7ff962f5e49eae550db0c1a358f58f915e79114e47b7ff26ff14b537c6c5409ff6c4e3fc011efe44b2f7de5a4e9"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x51022d8f4d9c1be4, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x400, 0x1e00, 0x1, [0x3f3f, 0xc00f, 0x1bf, 0x3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0xa, 0xf800}]}, 0x3, [{0x9d, &(0x7f00000003c0)=@string={0x9d, 0x3, "5d0ab56ccac15b74014344769a3af84d4bd77a03414d8a1446a333023f565ad511bea2cabc36c40b674037f458a1b9d25d2669f5b1a41a8f6b1313c7cb7148113450ab118b886c4546fc3e717d264da70d59c5036dd7027f98ff1312e581764abf49dfeb5bbd16e4c9bb79e2938752625580124b635ea48caf0f305bca5cb8048426f2f689e34af74a93c4ab6bcf545ae996c159f319c3cb66de32"}}, {0x86, &(0x7f0000000480)=@string={0x86, 0x3, "159cadb6af5fa06c6f75e29cc15f08b671f9c540ebc5fc17fa8b30ecb1cf411b5183a00af666c99c10c65b3324619dd89ca0db3141c873345107cd071a421a55519054df516aca5102885a9d97f4f914ef3fe2172b1940c9e41ee7430846d74067321f8265145f646b77750ddc46624be9077b24f6baaeabb4c2fe8add7cbe50180dc65a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x78}}]}) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)=ANY=[@ANYBLOB="1201000052607a0011043d009b250102030109025d00010000000009040000000cc91904052406000005240000000d240e010000000000fdff0000052401000006241a00000012240700000000000000000000000000000d240f0100"/111], 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 03:14:28 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3433, 0x0, 0x0) 03:14:28 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x54, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:29 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x7000, 0x0, 0x0) [ 1248.962579][ T20] usb 1-1: USB disconnect, device number 79 03:14:29 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xd805, 0x0, 0x0) [ 1249.013610][ T32] cdc_ncm 3-1:1.0: bind() failure 03:14:29 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3f00, 0x0, 0x0) 03:14:29 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x55, 0xfffffdef, 0x0, 0x0, 0x0) [ 1249.083562][ T32] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1249.123086][ T32] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1249.153270][ T32] usbtest: probe of 3-1:1.1 failed with error -71 [ 1249.176476][ T32] usb 3-1: USB disconnect, device number 18 [ 1249.203496][ T3758] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1249.209573][ T3758] cdc_ncm 4-1:1.0: bind() failure [ 1249.242771][ T3758] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1249.250067][ T3758] cdc_ncm 4-1:1.1: bind() failure [ 1249.413174][ T20] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1249.783121][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.793501][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1249.802466][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1249.975154][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1249.985086][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.993202][ T20] usb 1-1: Product: syz [ 1249.997379][ T20] usb 1-1: Manufacturer: syz [ 1250.001981][ T20] usb 1-1: SerialNumber: syz [ 1250.055011][ T20] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1250.061842][ T20] cdc_ncm 1-1:1.0: bind() failure 03:14:30 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000240)="d3fea750fea45c75a072e068ef15bd151e19652b8bf5d4b70000000000005c9998b6ccd83e07c1261f457b0e989fd44ef214502b6c24") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:14:30 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xfe11, 0x0, 0x0) 03:14:30 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x4000, 0x0, 0x0) 03:14:30 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x56, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:30 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 7) [ 1250.247057][ T3758] usb 4-1: USB disconnect, device number 52 [ 1250.258836][ T6514] UDC core: couldn't find an available UDC or it's busy: -16 [ 1250.283481][ T6514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1250.310266][ T6529] UDC core: couldn't find an available UDC or it's busy: -16 [ 1250.329763][ T6529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1250.563093][ T3653] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1250.713068][ T3758] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1250.973349][ T3653] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.984463][ T3653] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1250.995178][ T3653] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1251.006096][ T3653] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1251.015930][ T3653] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1251.093160][ T3758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.203312][ T3653] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1251.213260][ T3653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.221364][ T3653] usb 3-1: Product: syz [ 1251.226021][ T3653] usb 3-1: Manufacturer: syz [ 1251.230631][ T3653] usb 3-1: SerialNumber: syz [ 1251.263404][ T3758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1251.272633][ T3758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.280972][ T3758] usb 4-1: Product: syz [ 1251.288602][ T3758] usb 4-1: Manufacturer: syz [ 1251.293486][ T3758] usb 4-1: SerialNumber: syz [ 1251.545473][ T6535] UDC core: couldn't find an available UDC or it's busy: -16 [ 1251.553106][ T6535] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1251.691065][ T6528] FAULT_INJECTION: forcing a failure. [ 1251.691065][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.706489][ T6528] CPU: 0 PID: 6528 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1251.717017][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1251.727082][ T6528] Call Trace: [ 1251.730353][ T6528] [ 1251.733277][ T6528] dump_stack_lvl+0xcd/0x134 [ 1251.737872][ T6528] should_fail.cold+0x5/0xa [ 1251.742373][ T6528] should_failslab+0x5/0x10 [ 1251.746882][ T6528] __kmalloc+0x7b/0x4d0 [ 1251.751029][ T6528] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1251.756744][ T6528] tomoyo_realpath_from_path+0xc3/0x620 [ 1251.762288][ T6528] ? tomoyo_profile+0x42/0x50 [ 1251.766977][ T6528] tomoyo_path_number_perm+0x1d5/0x590 [ 1251.772427][ T6528] ? tomoyo_path_number_perm+0x18d/0x590 [ 1251.778048][ T6528] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1251.783923][ T6528] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1251.789901][ T6528] ? __context_tracking_exit+0xb8/0xe0 [ 1251.795354][ T6528] ? __fget_files+0x28c/0x470 [ 1251.800024][ T6528] security_file_ioctl+0x50/0xb0 [ 1251.804959][ T6528] __x64_sys_ioctl+0xb3/0x200 [ 1251.809633][ T6528] do_syscall_64+0x35/0xb0 [ 1251.814068][ T6528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1251.819983][ T6528] RIP: 0033:0x7fd05c028e07 [ 1251.824402][ T6528] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1251.844007][ T6528] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1251.852450][ T6528] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1251.860424][ T6528] RDX: 00007fd05c67046c RSI: 0000000040095505 RDI: 0000000000000003 [ 1251.868387][ T6528] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1251.876348][ T6528] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd05c67046e [ 1251.884313][ T6528] R13: 00007fd05c67046c R14: 0000000000000000 R15: 0000000000000000 [ 1251.892275][ T6528] [ 1251.902754][ T6528] ERROR: Out of memory at tomoyo_realpath_from_path. 03:14:32 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x7000, 0x0, 0x0) 03:14:32 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x400000, 0x0, 0x0) 03:14:32 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x57, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:32 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810320000000000904140000020d00000904010102020d0000090582020002000000090503020002000000c2cb98153a404a9e61570a964a51eb49be38028268595aa973e6cea288712d5bae4a3de68c738c6c9619404e9c8ba3e2baf691dbb2677693e9fa2956dbaad2d32971322fdabeca498e79f10e95501f2f6704cc51b1ec2faa5c7ac3adf71b150bbc6819190bb85e0cbaaf46f48ca6ab3834569dafbf91fa8bf125d64596cec135ac4d"], 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000f00)={0x14, &(0x7f0000000cc0)={0xc70a53ae32d616b2, 0x2, 0xcb, {0xcb, 0xb, "0bf5cc8663241afafe15426b9c9ce3c4d61d754f5abf4dcb633f33789e90e0bc3ea1b57affc5dfdc2d35ae20b3b01e0054cd3d98ebe026fbc983fb027a83db06eda6b205aa8f031b8bed9a729bca3b99cd3cc6e6e2d6171890ee324e4536186dc868977117e1c99c39fbe71bc00f4a736b0467c693b648daf6cd81177e7e9838113f63cb8a98f6a57989d2c29a7ae475f5b41d75eedaf6ca523ca166591ba569a04743b5f72521b74bc71b1bc91d4df11fb2469ee21494952e8c5423bd4377bc51d2cd982e803e5e52"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f40)={0x40, 0xd, 0x42, "3d1988b137c87d24b666ac65fa0913092bdd24dff023e4542fb40998a03c8ca70d407473e2ed810efc41deeb5b16250889af94f87531f0a55422e175055354905032"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x62}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x0, 0xff, 0x40, 0xfff8, 0x1, 0x8, 0x20, 0x7, 0x9, 0xe9, 0x0, 0x24d}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x401}, &(0x7f00000010c0)={0x20, 0x83, 0x2}, &(0x7f0000001100)={0x20, 0x87, 0x2}, &(0x7f0000001140)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x1, 0xd0, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc49f, 0xaf}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x3, 0x0, 'g'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x6, 0x6, 0x6f}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x6, 0x4, 0xfd}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x52, "e2463f195014"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x0, "24ec"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x2, 0x2, 0x4, 0x7f, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x90, 0x61, "", "010e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9, 0x5, "ed56d1d2b6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfe, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0x1, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x4, 0xda, "381e756ec2c9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x1f, 0x3, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8d, 0x11, 0x7f, 0x8f, 0x8}, 0x65, &(0x7f00000001c0)={0x5, 0xf, 0x65, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x1, 0x7}, @generic={0x56, 0x10, 0x4, "dc965e1ddfb3e3002387d26918f13c462dff337ed2bbeabdfe03e56568506335c1202cb6658baf6f93825edfae7812151a5cc9141f9282e0e8638e334209822d551fc0c4f64921546984f607a4c4785c4a7422"}, @ptm_cap={0x3}]}, 0x6, [{0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "36e44ac4c4a9fd2eb75e3df4bdb2096a2e5e28cc6ecd69b2b290e826d893e18d0170e5a2d8e6a97b70c520cb09c7b72bc2ab73f64976503dd50313c6dd0b6deeb8c7a577d6e5656df7fbdf47972ff810f10b6abd697a54bdc23b8ac9dc8df26b69ce8889001f9d38df5f3b8682637b201f7ef5199f65b93457bf9709"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xda, &(0x7f0000000400)=@string={0xda, 0x3, "a42b434f1c96f078d718e74fe5f0697e894f4b129c203a6369d5c8820f374cd13ac7afaa92474a62e4bfbe5c6e94a7d9ae543ddfc8c7b8066e0873c987b488a356944df60b1ec154b34fc60c36f6347760574ceea2cf80630123ab8697870af8619be264348c9f3167573a0150a27284b21fc8e8e38ca12160659e0365ba4080067c46d2394c8766efc07cb13634f98cf55b408b442ee5677532d8ceb5759c3bcf87072c3c9aafb57eb5caa4766c53c5b27b290cc3cd182ad5d65eccf496ebc6248232a357f3c1f8c4bf8b7db824e56d5ca61f67df64d3b4"}}, {0xb0, &(0x7f00000000c0)=@string={0xb0, 0x3, "155b9b5d6c97636190b84d7983b2145f7e6c4597a660a212562a3953bcecda6bbeb2172f6d82798c22a611bfaf1936f4a25dbfe971c12d5d20afc74284ea1e3167930644c8503ed5017b5a217e4bffda116160c449e355710699639bbb17c38c71db77d9ebc3f195e748db264e4fe96a7eb34976982874924e5f55ffd0399702bfe0e0dd86d1e8dc2ff3730ef9dcce2fac5940843bef166e654628420af9e270bb279c3dd74a433fdbe6628f825a"}}, {0x21, &(0x7f0000000540)=@string={0x21, 0x3, "a1d6b1e38bd0572f020db943adb29a356e3f81d59b1b050ffa7a9d0018666b"}}, {0xe0, &(0x7f0000000580)=@string={0xe0, 0x3, "63f29b14dc49b9bdde5fb8f6e4b1593cd644bba8439f584b44c4ac30331e5972d115f89bad13c6d36b14d50ce609b164ec545f5ce7453c2216efeb7025008a36d3be364d6830e3923a3c47961d5fa63de118c30b189d3381897096f53008f820b13fc473fb7f7764b65234e4005154c9e87f08e2d0fe7bcce3b029f4c97e9040ace740b4844f02bdf74b8a4b5529cd146bf519b9abc0cc3bb4c168c554e051e0cb90f905e3a69aaf1d821244b1f8d326a4c172867672722e18369c21dc7a234551e160e82139c17276de6f2fa80a4f4262211325bae31424926d3ee258e6"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x6, 0x1a8, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x196, 0x1, 0x1, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "dfdf5b3f5b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1000, 0x807, 0xd5}, [@acm={0x4, 0x24, 0x2, 0xd}, @mdlm={0x15, 0x24, 0x12, 0xc3}, @mdlm_detail={0x4f, 0x24, 0x13, 0x6e, "25e944651e27a0e8797dd485261dfd54c1ac3ed01e14a25cd2dd32705a4431f1c9da03fe9da706e50d945ec5e21c39b89f41dd0cef6e0e391bed0c510cf49469fb2918b036ec145fad9279"}, @mdlm_detail={0xe5, 0x24, 0x13, 0x3f, "4491ca2b39aff92d61804f208dc4c6856d2c32b06a59832824597a6eac7955a8c12f3281dc0472bf37510c0868cdd14f27e675968012959e034621e4a1a750155e396330fedd7856172fddf228ae16fb3115ce28db12ab34f31efee354980b60e0eac69c2e6263842a146c099cee81ab0f6442b2842ed7dffb576539686875b09374be7937acd92dfe856bd7ffaac5aac99071348beef7a41d11bb6511c8af9abcfc3c9b630348e6ac47809a5f47dde0edb31ce34fb5487f1bc83171b658923d1a113a31af65087bb1fa20a58a52c7863a93f198e77a77ff6f9fcd4f357166602e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x3, 0x3f}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x29, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x7f, 0xc7}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x6a, 0x5, 0x40, 0x1}, 0x3d, &(0x7f0000000500)={0x5, 0xf, 0x3d, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "38747b16f80fbb78f997f32b2589dc22"}, @ss_container_id={0x14, 0x10, 0x4, 0x45, "261309a62745d33f52b1a9e1e731c086"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1e, 0x4, 0xc4, 0x4}]}, 0x6, [{0xa8, &(0x7f00000009c0)=@string={0xa8, 0x3, "64379b1c2dcd927722aa971a6bcb67659ba0f6e322cf3e812c8083abb0bdacde1159084bb7f412583b68755069c1e2cd9f3d1da60c78d57f38ccf16b3638319a2ba8ab65d2f40fc6a641f7f348e3cc95decfcabadc420ca4f2e2d1cd742b0827fbbe1137a188c635401f7d125d86bd6198e77baba26cf51bb2f5997597f225fa1cc47e3dd5e7777fd98f00bc939a0ef2fea362ab7b961c53156804e6baf133c08d1fd560742f"}}, {0x8c, &(0x7f0000000a80)=@string={0x8c, 0x3, "66d5fb66199c803f7f041f5ed6f336a6e105345bbb0bfb74eb71aaf9a8ef0e18e77d244c5a1977b23658a6fb8c47e5ca7e826c4f9ef6f2670eae7504c55a42cdc3febdc69f84e7a40decb686a8d1b71bc42c2a50a357ca69aecea113cfc695228aff8bf78572e9e5e2aa80708017a5fa8a9272d004d0cd10508a57e148752d06ad82301b95ab88d604d1"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2b64d292fc0032df}}, {0x24, &(0x7f0000000bc0)=@string={0x24, 0x3, "4fd8d9a34913398381b29db2b6d391e108899919eed75e7befc012bc795483ed700c"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x40d}}]}) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1252.043013][ T3684] usb 1-1: USB disconnect, device number 80 03:14:32 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x700000, 0x0, 0x0) 03:14:32 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x58, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:32 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xcd06, 0x0, 0x0) [ 1252.153335][ T3653] cdc_ncm 3-1:1.0: bind() failure [ 1252.183315][ T3653] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1252.213210][ T3653] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1252.235944][ T3653] usbtest: probe of 3-1:1.1 failed with error -71 [ 1252.277645][ T3653] usb 3-1: USB disconnect, device number 19 [ 1252.483040][ T3684] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1252.776117][ T3758] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1252.782562][ T3758] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1252.790615][ T3758] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1252.843152][ T3684] usb 1-1: config 1 has an invalid interface number: 20 but max is 1 [ 1252.852204][ T3684] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1252.862652][ T3684] usb 1-1: config 1 has no interface number 2 [ 1252.869178][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.880337][ T3684] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1252.993343][ T3758] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1253.014968][ T3758] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1253.055047][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1253.077199][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.093463][ T3684] usb 1-1: Product: syz [ 1253.097871][ T3684] usb 1-1: Manufacturer: syz [ 1253.102648][ T3684] usb 1-1: SerialNumber: syz [ 1253.360633][ T6546] UDC core: couldn't find an available UDC or it's busy: -16 [ 1253.378037][ T6546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1253.393322][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1253.399458][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1253.406054][ T3684] cdc_ncm 1-1:1.0: bind() failure [ 1253.416087][ T3684] cdc_ncm 1-1:1.20: CDC Union missing and no IAD found [ 1253.430191][ T3684] cdc_ncm 1-1:1.20: bind() failure [ 1253.439437][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1253.445658][ T3684] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 1253.452669][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1253.460559][ T3684] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 1253.468272][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1253.479974][ T3684] usbtest: probe of 1-1:1.1 failed with error -22 [ 1253.500649][ T3684] usb 1-1: USB disconnect, device number 81 [ 1253.808112][ T32] usb 4-1: USB disconnect, device number 53 [ 1253.833416][ T32] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 1253.993225][ T3684] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 1254.240632][ T3684] usb 1-1: Invalid ep0 maxpacket: 64 03:14:34 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1000000, 0x0, 0x0) 03:14:34 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x59, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:34 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xe811, 0x0, 0x0) 03:14:34 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 8) 03:14:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (rerun: 64) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000240)="d3fea750fea45c75a072e068ef15bd151e19652b8bf5d4b70000000000005c9998b6ccd83e07c1261f457b0e989fd44ef214502b6c24") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64) 03:14:34 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5a, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:34 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000000, 0x0, 0x0) [ 1254.393199][ T3684] usb 1-1: new low-speed USB device number 83 using dummy_hcd 03:14:34 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x400000, 0x0, 0x0) [ 1254.457165][ T6623] UDC core: couldn't find an available UDC or it's busy: -16 [ 1254.478408][ T6623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1254.502577][ T6623] UDC core: couldn't find an available UDC or it's busy: -16 [ 1254.545919][ T6623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1254.581758][ T6623] UDC core: couldn't find an available UDC or it's busy: -16 [ 1254.591802][ T6623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1254.618460][ T6623] UDC core: couldn't find an available UDC or it's busy: -16 [ 1254.639258][ T6623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1254.652602][ T6623] UDC core: couldn't find an available UDC or it's busy: -16 [ 1254.653036][ T32] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1254.663050][ T3684] usb 1-1: Invalid ep0 maxpacket: 64 [ 1254.681670][ T6623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1254.692557][ T3684] usb usb1-port1: attempt power cycle [ 1254.733370][ T20] usb 4-1: new high-speed USB device number 54 using dummy_hcd 03:14:35 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810320000000000904140000020d00000904010102020d0000090582020002000000090503020002000000c2cb98153a404a9e61570a964a51eb49be38028268595aa973e6cea288712d5bae4a3de68c738c6c9619404e9c8ba3e2baf691dbb2677693e9fa2956dbaad2d32971322fdabeca498e79f10e95501f2f6704cc51b1ec2faa5c7ac3adf71b150bbc6819190bb85e0cbaaf46f48ca6ab3834569dafbf91fa8bf125d64596cec135ac4d"], 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000f00)={0x14, &(0x7f0000000cc0)={0xc70a53ae32d616b2, 0x2, 0xcb, {0xcb, 0xb, "0bf5cc8663241afafe15426b9c9ce3c4d61d754f5abf4dcb633f33789e90e0bc3ea1b57affc5dfdc2d35ae20b3b01e0054cd3d98ebe026fbc983fb027a83db06eda6b205aa8f031b8bed9a729bca3b99cd3cc6e6e2d6171890ee324e4536186dc868977117e1c99c39fbe71bc00f4a736b0467c693b648daf6cd81177e7e9838113f63cb8a98f6a57989d2c29a7ae475f5b41d75eedaf6ca523ca166591ba569a04743b5f72521b74bc71b1bc91d4df11fb2469ee21494952e8c5423bd4377bc51d2cd982e803e5e52"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f40)={0x40, 0xd, 0x42, "3d1988b137c87d24b666ac65fa0913092bdd24dff023e4542fb40998a03c8ca70d407473e2ed810efc41deeb5b16250889af94f87531f0a55422e175055354905032"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x62}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x0, 0xff, 0x40, 0xfff8, 0x1, 0x8, 0x20, 0x7, 0x9, 0xe9, 0x0, 0x24d}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x401}, &(0x7f00000010c0)={0x20, 0x83, 0x2}, &(0x7f0000001100)={0x20, 0x87, 0x2}, &(0x7f0000001140)={0x20, 0x89, 0x2}}) syz_usb_connect$uac1(0x1, 0xd0, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc49f, 0xaf}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x3, 0x0, 'g'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x6, 0x6, 0x6f}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x6, 0x4, 0xfd}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x52, "e2463f195014"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x0, "24ec"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x2, 0x2, 0x4, 0x7f, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x90, 0x61, "", "010e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9, 0x5, "ed56d1d2b6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfe, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0x1, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x4, 0xda, "381e756ec2c9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x1f, 0x3, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8d, 0x11, 0x7f, 0x8f, 0x8}, 0x65, &(0x7f00000001c0)={0x5, 0xf, 0x65, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x1, 0x7}, @generic={0x56, 0x10, 0x4, "dc965e1ddfb3e3002387d26918f13c462dff337ed2bbeabdfe03e56568506335c1202cb6658baf6f93825edfae7812151a5cc9141f9282e0e8638e334209822d551fc0c4f64921546984f607a4c4785c4a7422"}, @ptm_cap={0x3}]}, 0x6, [{0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "36e44ac4c4a9fd2eb75e3df4bdb2096a2e5e28cc6ecd69b2b290e826d893e18d0170e5a2d8e6a97b70c520cb09c7b72bc2ab73f64976503dd50313c6dd0b6deeb8c7a577d6e5656df7fbdf47972ff810f10b6abd697a54bdc23b8ac9dc8df26b69ce8889001f9d38df5f3b8682637b201f7ef5199f65b93457bf9709"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xda, &(0x7f0000000400)=@string={0xda, 0x3, "a42b434f1c96f078d718e74fe5f0697e894f4b129c203a6369d5c8820f374cd13ac7afaa92474a62e4bfbe5c6e94a7d9ae543ddfc8c7b8066e0873c987b488a356944df60b1ec154b34fc60c36f6347760574ceea2cf80630123ab8697870af8619be264348c9f3167573a0150a27284b21fc8e8e38ca12160659e0365ba4080067c46d2394c8766efc07cb13634f98cf55b408b442ee5677532d8ceb5759c3bcf87072c3c9aafb57eb5caa4766c53c5b27b290cc3cd182ad5d65eccf496ebc6248232a357f3c1f8c4bf8b7db824e56d5ca61f67df64d3b4"}}, {0xb0, &(0x7f00000000c0)=@string={0xb0, 0x3, "155b9b5d6c97636190b84d7983b2145f7e6c4597a660a212562a3953bcecda6bbeb2172f6d82798c22a611bfaf1936f4a25dbfe971c12d5d20afc74284ea1e3167930644c8503ed5017b5a217e4bffda116160c449e355710699639bbb17c38c71db77d9ebc3f195e748db264e4fe96a7eb34976982874924e5f55ffd0399702bfe0e0dd86d1e8dc2ff3730ef9dcce2fac5940843bef166e654628420af9e270bb279c3dd74a433fdbe6628f825a"}}, {0x21, &(0x7f0000000540)=@string={0x21, 0x3, "a1d6b1e38bd0572f020db943adb29a356e3f81d59b1b050ffa7a9d0018666b"}}, {0xe0, &(0x7f0000000580)=@string={0xe0, 0x3, "63f29b14dc49b9bdde5fb8f6e4b1593cd644bba8439f584b44c4ac30331e5972d115f89bad13c6d36b14d50ce609b164ec545f5ce7453c2216efeb7025008a36d3be364d6830e3923a3c47961d5fa63de118c30b189d3381897096f53008f820b13fc473fb7f7764b65234e4005154c9e87f08e2d0fe7bcce3b029f4c97e9040ace740b4844f02bdf74b8a4b5529cd146bf519b9abc0cc3bb4c168c554e051e0cb90f905e3a69aaf1d821244b1f8d326a4c172867672722e18369c21dc7a234551e160e82139c17276de6f2fa80a4f4262211325bae31424926d3ee258e6"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x6, 0x1a8, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x196, 0x1, 0x1, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "dfdf5b3f5b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1000, 0x807, 0xd5}, [@acm={0x4, 0x24, 0x2, 0xd}, @mdlm={0x15, 0x24, 0x12, 0xc3}, @mdlm_detail={0x4f, 0x24, 0x13, 0x6e, "25e944651e27a0e8797dd485261dfd54c1ac3ed01e14a25cd2dd32705a4431f1c9da03fe9da706e50d945ec5e21c39b89f41dd0cef6e0e391bed0c510cf49469fb2918b036ec145fad9279"}, @mdlm_detail={0xe5, 0x24, 0x13, 0x3f, "4491ca2b39aff92d61804f208dc4c6856d2c32b06a59832824597a6eac7955a8c12f3281dc0472bf37510c0868cdd14f27e675968012959e034621e4a1a750155e396330fedd7856172fddf228ae16fb3115ce28db12ab34f31efee354980b60e0eac69c2e6263842a146c099cee81ab0f6442b2842ed7dffb576539686875b09374be7937acd92dfe856bd7ffaac5aac99071348beef7a41d11bb6511c8af9abcfc3c9b630348e6ac47809a5f47dde0edb31ce34fb5487f1bc83171b658923d1a113a31af65087bb1fa20a58a52c7863a93f198e77a77ff6f9fcd4f357166602e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x3, 0x3f}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x29, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x7f, 0xc7}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x6a, 0x5, 0x40, 0x1}, 0x3d, &(0x7f0000000500)={0x5, 0xf, 0x3d, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "38747b16f80fbb78f997f32b2589dc22"}, @ss_container_id={0x14, 0x10, 0x4, 0x45, "261309a62745d33f52b1a9e1e731c086"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1e, 0x4, 0xc4, 0x4}]}, 0x6, [{0xa8, &(0x7f00000009c0)=@string={0xa8, 0x3, "64379b1c2dcd927722aa971a6bcb67659ba0f6e322cf3e812c8083abb0bdacde1159084bb7f412583b68755069c1e2cd9f3d1da60c78d57f38ccf16b3638319a2ba8ab65d2f40fc6a641f7f348e3cc95decfcabadc420ca4f2e2d1cd742b0827fbbe1137a188c635401f7d125d86bd6198e77baba26cf51bb2f5997597f225fa1cc47e3dd5e7777fd98f00bc939a0ef2fea362ab7b961c53156804e6baf133c08d1fd560742f"}}, {0x8c, &(0x7f0000000a80)=@string={0x8c, 0x3, "66d5fb66199c803f7f041f5ed6f336a6e105345bbb0bfb74eb71aaf9a8ef0e18e77d244c5a1977b23658a6fb8c47e5ca7e826c4f9ef6f2670eae7504c55a42cdc3febdc69f84e7a40decb686a8d1b71bc42c2a50a357ca69aecea113cfc695228aff8bf78572e9e5e2aa80708017a5fa8a9272d004d0cd10508a57e148752d06ad82301b95ab88d604d1"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2b64d292fc0032df}}, {0x24, &(0x7f0000000bc0)=@string={0x24, 0x3, "4fd8d9a34913398381b29db2b6d391e108899919eed75e7befc012bc795483ed700c"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x40d}}]}) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810320000000000904140000020d00000904010102020d0000090582020002000000090503020002000000c2cb98153a404a9e61570a964a51eb49be38028268595aa973e6cea288712d5bae4a3de68c738c6c9619404e9c8ba3e2baf691dbb2677693e9fa2956dbaad2d32971322fdabeca498e79f10e95501f2f6704cc51b1ec2faa5c7ac3adf71b150bbc6819190bb85e0cbaaf46f48ca6ab3834569dafbf91fa8bf125d64596cec135ac4d"], 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000f00)={0x14, &(0x7f0000000cc0)={0xc70a53ae32d616b2, 0x2, 0xcb, {0xcb, 0xb, "0bf5cc8663241afafe15426b9c9ce3c4d61d754f5abf4dcb633f33789e90e0bc3ea1b57affc5dfdc2d35ae20b3b01e0054cd3d98ebe026fbc983fb027a83db06eda6b205aa8f031b8bed9a729bca3b99cd3cc6e6e2d6171890ee324e4536186dc868977117e1c99c39fbe71bc00f4a736b0467c693b648daf6cd81177e7e9838113f63cb8a98f6a57989d2c29a7ae475f5b41d75eedaf6ca523ca166591ba569a04743b5f72521b74bc71b1bc91d4df11fb2469ee21494952e8c5423bd4377bc51d2cd982e803e5e52"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f40)={0x40, 0xd, 0x42, "3d1988b137c87d24b666ac65fa0913092bdd24dff023e4542fb40998a03c8ca70d407473e2ed810efc41deeb5b16250889af94f87531f0a55422e175055354905032"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x62}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x0, 0xff, 0x40, 0xfff8, 0x1, 0x8, 0x20, 0x7, 0x9, 0xe9, 0x0, 0x24d}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x401}, &(0x7f00000010c0)={0x20, 0x83, 0x2}, &(0x7f0000001100)={0x20, 0x87, 0x2}, &(0x7f0000001140)={0x20, 0x89, 0x2}}) (async) syz_usb_connect$uac1(0x1, 0xd0, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc49f, 0xaf}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x3, 0x0, 'g'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x6, 0x6, 0x6f}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x6, 0x4, 0xfd}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x52, "e2463f195014"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x0, "24ec"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x2, 0x2, 0x4, 0x7f, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x90, 0x61, "", "010e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9, 0x5, "ed56d1d2b6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfe, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0x1, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x4, 0xda, "381e756ec2c9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x1f, 0x3, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8d, 0x11, 0x7f, 0x8f, 0x8}, 0x65, &(0x7f00000001c0)={0x5, 0xf, 0x65, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x1, 0x7}, @generic={0x56, 0x10, 0x4, "dc965e1ddfb3e3002387d26918f13c462dff337ed2bbeabdfe03e56568506335c1202cb6658baf6f93825edfae7812151a5cc9141f9282e0e8638e334209822d551fc0c4f64921546984f607a4c4785c4a7422"}, @ptm_cap={0x3}]}, 0x6, [{0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "36e44ac4c4a9fd2eb75e3df4bdb2096a2e5e28cc6ecd69b2b290e826d893e18d0170e5a2d8e6a97b70c520cb09c7b72bc2ab73f64976503dd50313c6dd0b6deeb8c7a577d6e5656df7fbdf47972ff810f10b6abd697a54bdc23b8ac9dc8df26b69ce8889001f9d38df5f3b8682637b201f7ef5199f65b93457bf9709"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xda, &(0x7f0000000400)=@string={0xda, 0x3, "a42b434f1c96f078d718e74fe5f0697e894f4b129c203a6369d5c8820f374cd13ac7afaa92474a62e4bfbe5c6e94a7d9ae543ddfc8c7b8066e0873c987b488a356944df60b1ec154b34fc60c36f6347760574ceea2cf80630123ab8697870af8619be264348c9f3167573a0150a27284b21fc8e8e38ca12160659e0365ba4080067c46d2394c8766efc07cb13634f98cf55b408b442ee5677532d8ceb5759c3bcf87072c3c9aafb57eb5caa4766c53c5b27b290cc3cd182ad5d65eccf496ebc6248232a357f3c1f8c4bf8b7db824e56d5ca61f67df64d3b4"}}, {0xb0, &(0x7f00000000c0)=@string={0xb0, 0x3, "155b9b5d6c97636190b84d7983b2145f7e6c4597a660a212562a3953bcecda6bbeb2172f6d82798c22a611bfaf1936f4a25dbfe971c12d5d20afc74284ea1e3167930644c8503ed5017b5a217e4bffda116160c449e355710699639bbb17c38c71db77d9ebc3f195e748db264e4fe96a7eb34976982874924e5f55ffd0399702bfe0e0dd86d1e8dc2ff3730ef9dcce2fac5940843bef166e654628420af9e270bb279c3dd74a433fdbe6628f825a"}}, {0x21, &(0x7f0000000540)=@string={0x21, 0x3, "a1d6b1e38bd0572f020db943adb29a356e3f81d59b1b050ffa7a9d0018666b"}}, {0xe0, &(0x7f0000000580)=@string={0xe0, 0x3, "63f29b14dc49b9bdde5fb8f6e4b1593cd644bba8439f584b44c4ac30331e5972d115f89bad13c6d36b14d50ce609b164ec545f5ce7453c2216efeb7025008a36d3be364d6830e3923a3c47961d5fa63de118c30b189d3381897096f53008f820b13fc473fb7f7764b65234e4005154c9e87f08e2d0fe7bcce3b029f4c97e9040ace740b4844f02bdf74b8a4b5529cd146bf519b9abc0cc3bb4c168c554e051e0cb90f905e3a69aaf1d821244b1f8d326a4c172867672722e18369c21dc7a234551e160e82139c17276de6f2fa80a4f4262211325bae31424926d3ee258e6"}}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0x1a8, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x196, 0x1, 0x1, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "dfdf5b3f5b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1000, 0x807, 0xd5}, [@acm={0x4, 0x24, 0x2, 0xd}, @mdlm={0x15, 0x24, 0x12, 0xc3}, @mdlm_detail={0x4f, 0x24, 0x13, 0x6e, "25e944651e27a0e8797dd485261dfd54c1ac3ed01e14a25cd2dd32705a4431f1c9da03fe9da706e50d945ec5e21c39b89f41dd0cef6e0e391bed0c510cf49469fb2918b036ec145fad9279"}, @mdlm_detail={0xe5, 0x24, 0x13, 0x3f, "4491ca2b39aff92d61804f208dc4c6856d2c32b06a59832824597a6eac7955a8c12f3281dc0472bf37510c0868cdd14f27e675968012959e034621e4a1a750155e396330fedd7856172fddf228ae16fb3115ce28db12ab34f31efee354980b60e0eac69c2e6263842a146c099cee81ab0f6442b2842ed7dffb576539686875b09374be7937acd92dfe856bd7ffaac5aac99071348beef7a41d11bb6511c8af9abcfc3c9b630348e6ac47809a5f47dde0edb31ce34fb5487f1bc83171b658923d1a113a31af65087bb1fa20a58a52c7863a93f198e77a77ff6f9fcd4f357166602e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x3, 0x3f}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x29, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x7f, 0xc7}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x6a, 0x5, 0x40, 0x1}, 0x3d, &(0x7f0000000500)={0x5, 0xf, 0x3d, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "38747b16f80fbb78f997f32b2589dc22"}, @ss_container_id={0x14, 0x10, 0x4, 0x45, "261309a62745d33f52b1a9e1e731c086"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1e, 0x4, 0xc4, 0x4}]}, 0x6, [{0xa8, &(0x7f00000009c0)=@string={0xa8, 0x3, "64379b1c2dcd927722aa971a6bcb67659ba0f6e322cf3e812c8083abb0bdacde1159084bb7f412583b68755069c1e2cd9f3d1da60c78d57f38ccf16b3638319a2ba8ab65d2f40fc6a641f7f348e3cc95decfcabadc420ca4f2e2d1cd742b0827fbbe1137a188c635401f7d125d86bd6198e77baba26cf51bb2f5997597f225fa1cc47e3dd5e7777fd98f00bc939a0ef2fea362ab7b961c53156804e6baf133c08d1fd560742f"}}, {0x8c, &(0x7f0000000a80)=@string={0x8c, 0x3, "66d5fb66199c803f7f041f5ed6f336a6e105345bbb0bfb74eb71aaf9a8ef0e18e77d244c5a1977b23658a6fb8c47e5ca7e826c4f9ef6f2670eae7504c55a42cdc3febdc69f84e7a40decb686a8d1b71bc42c2a50a357ca69aecea113cfc695228aff8bf78572e9e5e2aa80708017a5fa8a9272d004d0cd10508a57e148752d06ad82301b95ab88d604d1"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2b64d292fc0032df}}, {0x24, &(0x7f0000000bc0)=@string={0x24, 0x3, "4fd8d9a34913398381b29db2b6d391e108899919eed75e7befc012bc795483ed700c"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x40d}}]}) (async) syz_usb_disconnect(r2) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:14:35 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x7000000, 0x0, 0x0) 03:14:35 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x700000, 0x0, 0x0) 03:14:35 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5b, 0xfffffdef, 0x0, 0x0, 0x0) [ 1255.113198][ T3684] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 1255.132308][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.144722][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 03:14:35 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x8000000, 0x0, 0x0) 03:14:35 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1000000, 0x0, 0x0) 03:14:35 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5c, 0xfffffdef, 0x0, 0x0, 0x0) [ 1255.169185][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1255.185004][ T32] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1255.257599][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1255.298333][ T32] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1255.349680][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.358971][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.373207][ T3684] usb 1-1: device not accepting address 84, error -71 [ 1255.378952][ T20] usb 4-1: Product: syz [ 1255.400677][ T20] usb 4-1: Manufacturer: syz [ 1255.411723][ T20] usb 4-1: SerialNumber: syz [ 1255.513344][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.527236][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.535873][ T32] usb 3-1: Product: syz [ 1255.540050][ T32] usb 3-1: Manufacturer: syz [ 1255.549647][ T32] usb 3-1: SerialNumber: syz [ 1255.723644][ T20] cdc_ncm 4-1:1.0: bind() failure [ 1255.732787][ T20] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1255.740404][ T20] cdc_ncm 4-1:1.1: bind() failure [ 1255.750074][ T20] usb 4-1: USB disconnect, device number 54 [ 1255.753207][ T3684] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1255.973239][ T3684] usb 1-1: config 1 has an invalid interface number: 20 but max is 1 [ 1255.981364][ T3684] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1255.990511][ T3684] usb 1-1: config 1 has no interface number 2 [ 1255.996661][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.005624][ T6616] FAULT_INJECTION: forcing a failure. [ 1256.005624][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.021358][ T3684] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1256.028671][ T6616] CPU: 0 PID: 6616 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1256.039106][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.049152][ T6616] Call Trace: [ 1256.052423][ T6616] [ 1256.055351][ T6616] dump_stack_lvl+0xcd/0x134 [ 1256.059939][ T6616] should_fail.cold+0x5/0xa [ 1256.064444][ T6616] should_failslab+0x5/0x10 [ 1256.068938][ T6616] __kmalloc+0x7b/0x4d0 [ 1256.073088][ T6616] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1256.078454][ T6616] ? d_absolute_path+0x127/0x1a0 [ 1256.083451][ T6616] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1256.088644][ T6616] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1256.094361][ T6616] tomoyo_encode+0x28/0x50 [ 1256.098783][ T6616] tomoyo_realpath_from_path+0x186/0x620 [ 1256.104434][ T6616] tomoyo_path_number_perm+0x1d5/0x590 [ 1256.109903][ T6616] ? tomoyo_path_number_perm+0x18d/0x590 [ 1256.115526][ T6616] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1256.121326][ T6616] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1256.127325][ T6616] ? __context_tracking_exit+0xb8/0xe0 [ 1256.132802][ T6616] ? __fget_files+0x28c/0x470 [ 1256.137532][ T6616] security_file_ioctl+0x50/0xb0 [ 1256.142485][ T6616] __x64_sys_ioctl+0xb3/0x200 [ 1256.147255][ T6616] do_syscall_64+0x35/0xb0 [ 1256.151676][ T6616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1256.157564][ T6616] RIP: 0033:0x7fd05c028e07 [ 1256.161972][ T6616] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1256.181573][ T6616] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.189986][ T6616] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1256.198048][ T6616] RDX: 0000000000000000 RSI: 0000000040045506 RDI: 0000000000000003 [ 1256.206013][ T6616] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1256.213999][ T6616] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1256.221957][ T6616] R13: 0000000000000000 R14: 00007fd05c670020 R15: 0000000000000000 [ 1256.229916][ T6616] [ 1256.237723][ T6616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1256.373347][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1256.382571][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.390917][ T3684] usb 1-1: Product: syz [ 1256.395323][ T3684] usb 1-1: Manufacturer: syz [ 1256.400004][ T3684] usb 1-1: SerialNumber: syz [ 1256.503341][ T32] cdc_ncm 3-1:1.0: bind() failure [ 1256.544136][ T32] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1256.563151][ T32] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1256.595475][ T32] usbtest: probe of 3-1:1.1 failed with error -71 [ 1256.612429][ T32] usb 3-1: USB disconnect, device number 20 [ 1256.644243][ T6662] UDC core: couldn't find an available UDC or it's busy: -16 [ 1256.651755][ T6662] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1256.663242][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1256.669310][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1256.676034][ T3684] cdc_ncm 1-1:1.0: bind() failure [ 1256.684353][ T3684] cdc_ncm 1-1:1.20: CDC Union missing and no IAD found [ 1256.691545][ T3684] cdc_ncm 1-1:1.20: bind() failure [ 1256.699779][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1256.705795][ T3684] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 1256.712764][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1256.718773][ T3684] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 1256.726794][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1256.732740][ T3684] usbtest: probe of 1-1:1.1 failed with error -22 [ 1256.755362][ T3684] usb 1-1: USB disconnect, device number 85 03:14:37 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 9) 03:14:37 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000000, 0x0, 0x0) 03:14:37 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xc000000, 0x0, 0x0) 03:14:37 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5d, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:37 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000240)="d3fea750fea45c75a072e068ef15bd151e19652b8bf5d4b70000000000005c9998b6ccd83e07c1261f457b0e989fd44ef214502b6c24") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0x36, &(0x7f0000000240)="d3fea750fea45c75a072e068ef15bd151e19652b8bf5d4b70000000000005c9998b6ccd83e07c1261f457b0e989fd44ef214502b6c24") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) [ 1257.223102][ T3684] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 1257.293036][ T3758] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1257.303267][ T2336] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1257.463099][ T3684] usb 1-1: Invalid ep0 maxpacket: 64 [ 1257.613113][ T3684] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 1257.654740][ T3758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.666871][ T2336] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.679812][ T2336] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1257.690000][ T2336] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1257.699973][ T2336] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1257.709886][ T2336] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1257.843139][ T3758] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1257.852286][ T3758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.861014][ T3758] usb 4-1: Product: syz [ 1257.867029][ T3758] usb 4-1: Manufacturer: syz [ 1257.871749][ T3758] usb 4-1: SerialNumber: syz [ 1257.876967][ T2336] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1257.886123][ T3684] usb 1-1: Invalid ep0 maxpacket: 64 [ 1257.891672][ T3684] usb usb1-port1: attempt power cycle [ 1257.898299][ T2336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.914080][ T2336] usb 3-1: Product: syz [ 1257.918460][ T2336] usb 3-1: Manufacturer: syz [ 1257.923442][ T2336] usb 3-1: SerialNumber: syz 03:14:38 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810320000000000904140000020d00000904010102020d0000090582020002000000090503020002000000c2cb98153a404a9e61570a964a51eb49be38028268595aa973e6cea288712d5bae4a3de68c738c6c9619404e9c8ba3e2baf691dbb2677693e9fa2956dbaad2d32971322fdabeca498e79f10e95501f2f6704cc51b1ec2faa5c7ac3adf71b150bbc6819190bb85e0cbaaf46f48ca6ab3834569dafbf91fa8bf125d64596cec135ac4d"], 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000f00)={0x14, &(0x7f0000000cc0)={0xc70a53ae32d616b2, 0x2, 0xcb, {0xcb, 0xb, "0bf5cc8663241afafe15426b9c9ce3c4d61d754f5abf4dcb633f33789e90e0bc3ea1b57affc5dfdc2d35ae20b3b01e0054cd3d98ebe026fbc983fb027a83db06eda6b205aa8f031b8bed9a729bca3b99cd3cc6e6e2d6171890ee324e4536186dc868977117e1c99c39fbe71bc00f4a736b0467c693b648daf6cd81177e7e9838113f63cb8a98f6a57989d2c29a7ae475f5b41d75eedaf6ca523ca166591ba569a04743b5f72521b74bc71b1bc91d4df11fb2469ee21494952e8c5423bd4377bc51d2cd982e803e5e52"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f40)={0x40, 0xd, 0x42, "3d1988b137c87d24b666ac65fa0913092bdd24dff023e4542fb40998a03c8ca70d407473e2ed810efc41deeb5b16250889af94f87531f0a55422e175055354905032"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x62}, &(0x7f0000001040)={0x20, 0x80, 0x1c, {0x0, 0xff, 0x40, 0xfff8, 0x1, 0x8, 0x20, 0x7, 0x9, 0xe9, 0x0, 0x24d}}, &(0x7f0000001080)={0x20, 0x85, 0x4, 0x401}, &(0x7f00000010c0)={0x20, 0x83, 0x2}, &(0x7f0000001100)={0x20, 0x87, 0x2}, &(0x7f0000001140)={0x20, 0x89, 0x2}}) (async) syz_usb_connect$uac1(0x1, 0xd0, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x7, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc49f, 0xaf}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x3, 0x0, 'g'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x6, 0x6, 0x6f}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x6, 0x4, 0xfd}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x52, "e2463f195014"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x0, "24ec"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x2, 0x2, 0x4, 0x7f, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x90, 0x61, "", "010e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9, 0x5, "ed56d1d2b6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfe, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0x1, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x4, 0xda, "381e756ec2c9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x1f, 0x3, {0x7, 0x25, 0x1, 0x1, 0x1f, 0x1}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x8d, 0x11, 0x7f, 0x8f, 0x8}, 0x65, &(0x7f00000001c0)={0x5, 0xf, 0x65, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x1, 0x7}, @generic={0x56, 0x10, 0x4, "dc965e1ddfb3e3002387d26918f13c462dff337ed2bbeabdfe03e56568506335c1202cb6658baf6f93825edfae7812151a5cc9141f9282e0e8638e334209822d551fc0c4f64921546984f607a4c4785c4a7422"}, @ptm_cap={0x3}]}, 0x6, [{0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "36e44ac4c4a9fd2eb75e3df4bdb2096a2e5e28cc6ecd69b2b290e826d893e18d0170e5a2d8e6a97b70c520cb09c7b72bc2ab73f64976503dd50313c6dd0b6deeb8c7a577d6e5656df7fbdf47972ff810f10b6abd697a54bdc23b8ac9dc8df26b69ce8889001f9d38df5f3b8682637b201f7ef5199f65b93457bf9709"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0xda, &(0x7f0000000400)=@string={0xda, 0x3, "a42b434f1c96f078d718e74fe5f0697e894f4b129c203a6369d5c8820f374cd13ac7afaa92474a62e4bfbe5c6e94a7d9ae543ddfc8c7b8066e0873c987b488a356944df60b1ec154b34fc60c36f6347760574ceea2cf80630123ab8697870af8619be264348c9f3167573a0150a27284b21fc8e8e38ca12160659e0365ba4080067c46d2394c8766efc07cb13634f98cf55b408b442ee5677532d8ceb5759c3bcf87072c3c9aafb57eb5caa4766c53c5b27b290cc3cd182ad5d65eccf496ebc6248232a357f3c1f8c4bf8b7db824e56d5ca61f67df64d3b4"}}, {0xb0, &(0x7f00000000c0)=@string={0xb0, 0x3, "155b9b5d6c97636190b84d7983b2145f7e6c4597a660a212562a3953bcecda6bbeb2172f6d82798c22a611bfaf1936f4a25dbfe971c12d5d20afc74284ea1e3167930644c8503ed5017b5a217e4bffda116160c449e355710699639bbb17c38c71db77d9ebc3f195e748db264e4fe96a7eb34976982874924e5f55ffd0399702bfe0e0dd86d1e8dc2ff3730ef9dcce2fac5940843bef166e654628420af9e270bb279c3dd74a433fdbe6628f825a"}}, {0x21, &(0x7f0000000540)=@string={0x21, 0x3, "a1d6b1e38bd0572f020db943adb29a356e3f81d59b1b050ffa7a9d0018666b"}}, {0xe0, &(0x7f0000000580)=@string={0xe0, 0x3, "63f29b14dc49b9bdde5fb8f6e4b1593cd644bba8439f584b44c4ac30331e5972d115f89bad13c6d36b14d50ce609b164ec545f5ce7453c2216efeb7025008a36d3be364d6830e3923a3c47961d5fa63de118c30b189d3381897096f53008f820b13fc473fb7f7764b65234e4005154c9e87f08e2d0fe7bcce3b029f4c97e9040ace740b4844f02bdf74b8a4b5529cd146bf519b9abc0cc3bb4c168c554e051e0cb90f905e3a69aaf1d821244b1f8d326a4c172867672722e18369c21dc7a234551e160e82139c17276de6f2fa80a4f4262211325bae31424926d3ee258e6"}}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r2 = syz_usb_connect$cdc_ecm(0x6, 0x1a8, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x196, 0x1, 0x1, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "dfdf5b3f5b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1000, 0x807, 0xd5}, [@acm={0x4, 0x24, 0x2, 0xd}, @mdlm={0x15, 0x24, 0x12, 0xc3}, @mdlm_detail={0x4f, 0x24, 0x13, 0x6e, "25e944651e27a0e8797dd485261dfd54c1ac3ed01e14a25cd2dd32705a4431f1c9da03fe9da706e50d945ec5e21c39b89f41dd0cef6e0e391bed0c510cf49469fb2918b036ec145fad9279"}, @mdlm_detail={0xe5, 0x24, 0x13, 0x3f, "4491ca2b39aff92d61804f208dc4c6856d2c32b06a59832824597a6eac7955a8c12f3281dc0472bf37510c0868cdd14f27e675968012959e034621e4a1a750155e396330fedd7856172fddf228ae16fb3115ce28db12ab34f31efee354980b60e0eac69c2e6263842a146c099cee81ab0f6442b2842ed7dffb576539686875b09374be7937acd92dfe856bd7ffaac5aac99071348beef7a41d11bb6511c8af9abcfc3c9b630348e6ac47809a5f47dde0edb31ce34fb5487f1bc83171b658923d1a113a31af65087bb1fa20a58a52c7863a93f198e77a77ff6f9fcd4f357166602e"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x3, 0x3f}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x29, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x7f, 0xc7}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x6a, 0x5, 0x40, 0x1}, 0x3d, &(0x7f0000000500)={0x5, 0xf, 0x3d, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "38747b16f80fbb78f997f32b2589dc22"}, @ss_container_id={0x14, 0x10, 0x4, 0x45, "261309a62745d33f52b1a9e1e731c086"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1e, 0x4, 0xc4, 0x4}]}, 0x6, [{0xa8, &(0x7f00000009c0)=@string={0xa8, 0x3, "64379b1c2dcd927722aa971a6bcb67659ba0f6e322cf3e812c8083abb0bdacde1159084bb7f412583b68755069c1e2cd9f3d1da60c78d57f38ccf16b3638319a2ba8ab65d2f40fc6a641f7f348e3cc95decfcabadc420ca4f2e2d1cd742b0827fbbe1137a188c635401f7d125d86bd6198e77baba26cf51bb2f5997597f225fa1cc47e3dd5e7777fd98f00bc939a0ef2fea362ab7b961c53156804e6baf133c08d1fd560742f"}}, {0x8c, &(0x7f0000000a80)=@string={0x8c, 0x3, "66d5fb66199c803f7f041f5ed6f336a6e105345bbb0bfb74eb71aaf9a8ef0e18e77d244c5a1977b23658a6fb8c47e5ca7e826c4f9ef6f2670eae7504c55a42cdc3febdc69f84e7a40decb686a8d1b71bc42c2a50a357ca69aecea113cfc695228aff8bf78572e9e5e2aa80708017a5fa8a9272d004d0cd10508a57e148752d06ad82301b95ab88d604d1"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2b64d292fc0032df}}, {0x24, &(0x7f0000000bc0)=@string={0x24, 0x3, "4fd8d9a34913398381b29db2b6d391e108899919eed75e7befc012bc795483ed700c"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x40d}}]}) syz_usb_disconnect(r2) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 03:14:38 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x7000000, 0x0, 0x0) 03:14:38 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1f000000, 0x0, 0x0) 03:14:38 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5e, 0xfffffdef, 0x0, 0x0, 0x0) [ 1258.153985][ T6677] UDC core: couldn't find an available UDC or it's busy: -16 [ 1258.161454][ T6677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:14:38 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x8000000, 0x0, 0x0) 03:14:38 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x20000000, 0x0, 0x0) 03:14:38 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5f, 0xfffffdef, 0x0, 0x0, 0x0) [ 1258.266860][ T3684] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 1258.365773][ T6675] FAULT_INJECTION: forcing a failure. [ 1258.365773][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.388543][ T6675] CPU: 0 PID: 6675 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1258.399000][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.409073][ T6675] Call Trace: [ 1258.412368][ T6675] [ 1258.415304][ T6675] dump_stack_lvl+0xcd/0x134 [ 1258.419907][ T6675] should_fail.cold+0x5/0xa [ 1258.424429][ T6675] should_failslab+0x5/0x10 [ 1258.428953][ T6675] __kmalloc+0x7b/0x4d0 [ 1258.433130][ T6675] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1258.438874][ T6675] tomoyo_realpath_from_path+0xc3/0x620 [ 1258.444446][ T6675] ? tomoyo_profile+0x42/0x50 [ 1258.449148][ T6675] tomoyo_path_number_perm+0x1d5/0x590 [ 1258.454633][ T6675] ? tomoyo_path_number_perm+0x18d/0x590 [ 1258.460288][ T6675] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1258.466090][ T6675] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1258.472069][ T6675] ? __context_tracking_exit+0xb8/0xe0 [ 1258.477530][ T6675] ? __fget_files+0x28c/0x470 [ 1258.482216][ T6675] security_file_ioctl+0x50/0xb0 [ 1258.487169][ T6675] __x64_sys_ioctl+0xb3/0x200 [ 1258.491836][ T6675] do_syscall_64+0x35/0xb0 [ 1258.496254][ T6675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1258.502201][ T6675] RIP: 0033:0x7fd05c028e07 [ 1258.506621][ T6675] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1258.526261][ T6675] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1258.534679][ T6675] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1258.542650][ T6675] RDX: 00007fd05c67046c RSI: 0000000040095505 RDI: 0000000000000003 [ 1258.550608][ T6675] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1258.558564][ T6675] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd05c67046e [ 1258.566544][ T6675] R13: 00007fd05c67046c R14: 0000000000000000 R15: 0000000000000000 [ 1258.574536][ T6675] [ 1258.585852][ T3684] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1258.598164][ T6675] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1258.813235][ T3684] usb 1-1: config 1 has an invalid interface number: 20 but max is 1 [ 1258.821738][ T3684] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1258.830773][ T3684] usb 1-1: config 1 has no interface number 2 [ 1258.837267][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.848280][ T3684] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1258.855210][ T2336] cdc_ncm 3-1:1.0: bind() failure [ 1258.873254][ T2336] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1258.893267][ T2336] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1258.914888][ T2336] usbtest: probe of 3-1:1.1 failed with error -71 [ 1258.938273][ T2336] usb 3-1: USB disconnect, device number 21 [ 1259.013284][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1259.022361][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.030780][ T3684] usb 1-1: Product: syz [ 1259.035133][ T3684] usb 1-1: Manufacturer: syz [ 1259.039732][ T3684] usb 1-1: SerialNumber: syz [ 1259.298870][ T6686] UDC core: couldn't find an available UDC or it's busy: -16 [ 1259.306414][ T6686] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1259.333863][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1259.339650][ T3684] usb 1-1: selecting invalid altsetting 0 03:14:39 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 10) 03:14:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x33340000, 0x0, 0x0) 03:14:39 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xc000000, 0x0, 0x0) 03:14:39 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x60, 0xfffffdef, 0x0, 0x0, 0x0) [ 1259.356873][ T3684] cdc_ncm 1-1:1.0: bind() failure [ 1259.397385][ T3684] cdc_ncm 1-1:1.20: CDC Union missing and no IAD found [ 1259.408874][ T3758] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1259.433142][ T3758] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1259.440709][ T3758] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1259.446962][ T3684] cdc_ncm 1-1:1.20: bind() failure [ 1259.459116][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1259.465651][ T3684] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 1259.472436][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1259.491242][ T3684] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 1259.505126][ T3684] usb 1-1: selecting invalid altsetting 0 [ 1259.521144][ T3684] usbtest: probe of 1-1:1.1 failed with error -22 [ 1259.549655][ T3684] usb 1-1: USB disconnect, device number 89 [ 1259.633172][ T3758] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1259.642965][ T3758] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1259.683078][ T20] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1260.113430][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.132871][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1260.144035][ T20] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1260.155225][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1260.166221][ T20] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1260.192629][ T6694] UDC core: couldn't find an available UDC or it's busy: -16 [ 1260.208010][ T6731] UDC core: couldn't find an available UDC or it's busy: -16 [ 1260.219788][ T6694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1260.229096][ T6731] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1260.248099][ T3683] usb 4-1: USB disconnect, device number 55 03:14:40 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009025cf402010000000904000001020d00000524060001052400000000000000000006241a0000000905810320000000000904010000020d000009040101023e8de7934bd5573b0533c0cc020d000009058202000200000000000000520149349f16809994ee7e3118e92e641af1d9cba9e7c65376caefc58210be4e9d254c7fa303210f3c726b4be60274023634c6ba026e51bbca8db8f051b2b5e5f5419392931ef26786fd68d2b5ce810335d290329e664db85f0ea141ed382ca60c8565a6ddc5740e39548454d2e86bda5801"], 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0x7c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x0, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a694"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x8, 0x9, 0x14}, {0x6, 0x24, 0x1a, 0x8055, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x3, 0x0, 0x20}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0xcd, 0x7d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3f, 0x8, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x5e, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xb2, 0x7f, 0xff, 0xff, 0x3}, 0x15, &(0x7f0000000140)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xab, 0x1, 0x8, 0xf, 0x258, [0xc0]}]}, 0x1, [{0xd6, &(0x7f00000003c0)=@string={0xd6, 0x3, "ef546c70aa80383158856ab1ad3fe8e2970750eedbdf584ec0cbd261101aa93b67177f2ae91f7c23575fbe976090f5dfeeb827ccb758eb0c5c5c9411293e4e93768ede8e6b7ccf3a320ff6034294271844e0a21fcdaed7fa31a21c883f4f3064ce171f371b9b3e50e5d93a2048d8c3f19117cd5e5b57965be8d03e79e3a17ba511eb4fb86f83aad3c893fa5a20f2f53183ab54af16bb508afc3d0f9fbfdbc7a4e350e7d1ffbbfe029a6905e7cb11ad245f643548980aebd141b1f355221990b287a8c1ca0fedd07195c9921ed28c9208357c4b64"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000c80)={0x14, &(0x7f0000000c00)={0x0, 0x21, 0xa, {0xa, 0x23, "75ba799bdeb84f44"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000000cc0)={0x20, 0xc, 0x79, "fe62d0578feb95eaa8255c3a8b49630079fe6ceb6cf21a14b8cf1aa067efe26bdeb4d580fc0ea35380a0725a53e71cecec3242235c653730deb96c453798b8e4a9b922acbdffd491aa584f477c1124317215eef58de2520c43643149f52a0ab03d402c35874bac4ada9d11209d49075344e4da439b05bec280"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x7, 0x1, 0x1000, 0x76, 0x1, 0x0, 0x9, 0x8000, 0x29, 0x4, 0x689, 0x6}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f00000001c0)={0x0, 0x22, 0x2b, {0x2b, 0x22, "d4544cb6db7991dabeb0e1bb6a52cbbc150147ed75e3fdb117e16170580c7cbae22560fc33ed174ec6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "491e04b8c191adda52f69e6294ae80f6f3c726216cd657a9ca63e4243e3e566aed270cab208a4057e7b55dba87d76e39a31d07873597bea96432932195d0a0d2b59b6b00bc3ca00373c36cdb5d1c7bb70b625209c77975ba50ca90baee9bbcd238913658846b6a4363cba6da5da9ba94e58726bb061d95efed88963d20ca11706f3bf5"}}, &(0x7f0000000580)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x32, 0x1}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x9, "b1aa730b", "5daacec7"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x96, 0x0, 0x5, 0x6, 0xbd, 0x5, 0x9}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x16, 0xd3, "bc5bc6cf11eba0c6c825cb712974dc8355963fea198e09442253d13d7bbdf2ee19f71147060eebfc8ae0097d16c247ce00594e5aeb271994412ec6fd8b6ffbd60d8323141e8f84bb3a025ccba442985e8e108db1086ec8172fcee341607db238d9068a46df148b61ce45257df50758e3cf8a8d3b28439dcd190f62f14ae37aaa8b5f5deeb07078c7a0f8dcd018ab3d3122c3169237d558c7fee48bd9d148e35550115bc2f25486145251191ecfa4d5b913fc9f68dfa1d75ad0c2ea47a43db9c1ab40904e8f33f5f9c507b6c23ce462575aa2b8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x40, 0x1, [0xf00]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, '~%'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xc60}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, '$>'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x3}}) 03:14:40 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3f000000, 0x0, 0x0) 03:14:40 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000001680)={0x2c, &(0x7f0000001480)={0x0, 0xf, 0x83, {0x83, 0x6, "a42d8f49776a7fef3ce91ecb95e5db4e71eadfd5a8f9fdf2511748b4f93d9b82e247045751ac67185386dd39ed69987b71552074cd7c9d72abb11a69451a1445b0026b227742bc769cc731817d08dbe6b1a130827b45fa4c52a46be4b0f42b0eb7783214965be3bf8e4bed0970402fa47bcff1e9c8b512e837495261ad417a591a"}}, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000001580)={0x0, 0xf, 0x75, {0x5, 0xf, 0x75, 0x1, [@generic={0x70, 0x10, 0x2, "bbe2847607d5e41d64674deb43482347880afaeec971c6fb0f86c6ac8cf572c8bcfcd25cd2716a2304c99af6ab61a549e4f39edcbe4f5bcf60a425ec43a5978b0fecb3342176587bfa30ccb4d7aaabfaebd4e6d0eebd586b9448230dae6510922d18815efc7cbbdcb007751775"}]}}, &(0x7f0000001600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x3f, 0x0, "94b03688", "043b7eb6"}}, &(0x7f0000001640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0x80, 0x8, 0x6c, 0x9, 0x8}}}, &(0x7f0000001b40)={0x84, &(0x7f00000016c0)={0x0, 0x17, 0xaa, "231b8c9f0a90aba47056b9768e27f30e0f801a2778b289aeceeb0f6bd04db8ab5cd124dd3d71059f8ba9dfdb86071eb49975fe929b4d8fe1166e125d76b28c8ebc39cbd21c9b1792275b7d07b0377fddad5be2308970161b644d97fd53ac065df69f7b2652b6b46396ec75e7bb628b76397a4aa29dd8e60ffe6502b73b3199790d89c056560ca5359314ae7efe7cdd5d623ae5a4b5226313aedf4355648dc34ce9ffa84aaf85c21ec7af"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x1, 0x5}}, &(0x7f0000001840)={0x20, 0x0, 0x8, {0x4, 0x40, [0x770f]}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000001900)={0x40, 0xb, 0x2, '\a['}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xd0}, &(0x7f0000001980)={0x40, 0x13, 0x6}, &(0x7f00000019c0)={0x40, 0x17, 0x6, @random="54358641ba80"}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "e5c7"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x9f}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xa2}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001240)={0x24, &(0x7f0000001140)={0x40, 0x21, 0x28, {0x28, 0x2, "2bf0061a588a4a8353ae3f1e344839c03047c2210de39ef5e30c143737d20eedc3820e38c5e2"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f00000011c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0xa, "6f634089"}, @main=@item_012={0x1, 0x0, 0xa, 'H'}, @global=@item_4={0x3, 0x1, 0x3, "16fff538"}, @global=@item_012={0x1, 0x1, 0xb, 'O'}, @local=@item_4={0x3, 0x2, 0x3, "d6a5d49f"}, @local=@item_012={0x1, 0x2, 0x7, 'k'}, @main=@item_012={0x2, 0x0, 0xa, "a406"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x243}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x40, 0xe, 0xb5, "0aad4bfd35bb2dccd1cebcbe8b85edce47a17fa7b119f5a23b81a0332860832984ce5d8cc7b0ca87a21d9d28c01f6186cac7aea2e35f0b9a50e9ce8b0c4190b7f033f315cf6550a97970e514d9e126d0406a56827506eefe17807cebbf811e602af38c47f9d2b900f198d031f1c4d4c5fa6aa8333707ef6de9e78f88e1588d78d93091f30020d847b7321d3d958a3f5ea39c0abffcdf66234c28216308a72bb758067fcf48d0d02957af8aea8c7562dd590833a1fe"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000013c0)={0x20, 0x1, 0x2c, "443ef2d38d22ae91f647722c64748b1ed37ea95d6ceda3d639d3e2ac33d812f115c5234971da0de5e3a4eb2d"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x20, 0x11, 0x29, {0x29, 0x21, "41369bbbd49a5a8751efdb8861d3e70081e0c44307aa5717f01ee52a0e7af57b931b30d8a451db"}}, &(0x7f0000000900)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "105c726ce00707ee8edc0a76b9c2a96f5ff09e6276b69d5f35310188294ab9677367b48629ff24ab0378aac6545936353f7b2e8b1581e0188f7923889bf54b148294ff9e32ba2eeb23f16af15975a7ab6644bc0e6e940392a810dcc13592b5728124f836e3cbc26c5c6d76f4f033cdae70732807731c74cc806961da817ab2362162d672ca0476df61f6d9f3ed539046c26ac8a944947e78f219d0576463"}}, &(0x7f00000009c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x50, 0x1f, 0x6, 0x380f, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0x3, 0x8001}, @ptm_cap={0x3}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x4, 0x8, 0x40, "f352b33f", "c2779322"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x64, 0x59, 0x80, 0x3, 0xc0, 0x3}}}, &(0x7f0000001080)={0x84, &(0x7f0000000ac0)={0x40, 0xf, 0xcd, "1b0b1b4afe2ce6ca4645982b09d39121456543b1a2e1ec9aff0df6ae28876f63cf98a7554f2435bfb92161849e7517388b495ee349053d0290354a05782726b37efecd21f6387db454e630f00d145856b12851363840cee9b6a74e3e73325395a945ceaf9954a7ce8a1ed2e07e2cc09e030d9bb63e090efb7abf5164d06220a22551fbc7c043c7abb307431a75b2fb7efc52454c0cbd77193cb9233dbcef9ec347ea96b3c732aa2c206c7fbf07fc6fcf294a17210702979200a097bbb7bdeb89df028ce59c3eb5db68f018d852"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x1e0, 0x80, [0xf0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "4dcd"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "8097"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x8, 0xcd, {0xcd, 0xb, "d7cbc2f6e50d886ca613525ccd113bc8cb2f2d43faa484b3f2ac68aff5bb22efef53a738dc0110f5c95884359efb9b1cab28a527e6c30bf593a57bfce2f4ac00746eab11fd7fc6a7ea0fd829d620fcb9f152eb24697c328e22b869aed6888ec409ca499d361af98605f2420705c190759de11ba391435f0a50636f0f03b3c282544d15d372074fa3ba535be9d9c8d66c2311b351a9c9b436d856a5ae587ab79232a03a733f692589153e02b0501c84531adede2ff793165ec4aef6eae6177fc0d1642035b85fbb72b8f8f4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f00000000c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xa, 0x2, 0xfffa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9b4f32fd3cb4fd9da6094911e189ed05"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a03eb5800a1fdde58fba6004416da6c5"}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6f, 0x60, 0x1, 0x9, "0555b6c2", "6a9bbb30"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x40, 0x0, 0x52, 0x5, 0x6000}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x31, 0x25, "430bcbb93d8a0d9a5448c7098b4d73137c4193eef4d7a6d683021f6c1343dc4ac893d05cbc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1000, 0x20, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x81}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "181e"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'wS'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1c0}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x61}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) 03:14:40 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1f000000, 0x0, 0x0) 03:14:40 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x61, 0xfffffdef, 0x0, 0x0, 0x0) [ 1260.255937][ T3683] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM 03:14:40 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xd8050000, 0x0, 0x0) 03:14:40 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x20000000, 0x0, 0x0) 03:14:40 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x62, 0xfffffdef, 0x0, 0x0, 0x0) [ 1260.363510][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1260.378035][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.416373][ T20] usb 3-1: Product: syz [ 1260.431611][ T20] usb 3-1: Manufacturer: syz [ 1260.450108][ T20] usb 3-1: SerialNumber: syz [ 1260.633189][T30378] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1260.883192][ T3683] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1260.937188][ T6708] FAULT_INJECTION: forcing a failure. [ 1260.937188][ T6708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.965250][ T6708] CPU: 1 PID: 6708 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1260.975705][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.985766][ T6708] Call Trace: [ 1260.989040][ T6708] [ 1260.991966][ T6708] dump_stack_lvl+0xcd/0x134 [ 1260.996567][ T6708] should_fail.cold+0x5/0xa [ 1261.001070][ T6708] _copy_from_user+0x2c/0x180 [ 1261.005763][ T6708] memdup_user+0x65/0xd0 [ 1261.010071][ T6708] raw_ioctl+0x1150/0x2690 [ 1261.014491][ T6708] ? __fget_files+0x28c/0x470 [ 1261.019163][ T6708] ? raw_open+0x4c0/0x4c0 [ 1261.023487][ T6708] ? security_file_ioctl+0x5c/0xb0 [ 1261.028607][ T6708] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1261.034851][ T6708] ? raw_open+0x4c0/0x4c0 [ 1261.039177][ T6708] __x64_sys_ioctl+0x193/0x200 [ 1261.044023][ T6708] do_syscall_64+0x35/0xb0 [ 1261.048440][ T6708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1261.054335][ T6708] RIP: 0033:0x7fd05c028e07 [ 1261.058747][ T6708] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1261.078391][ T6708] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1261.086805][ T6708] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1261.094769][ T6708] RDX: 00007fd05c67046c RSI: 0000000040095505 RDI: 0000000000000003 [ 1261.102736][ T6708] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1261.110702][ T6708] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd05c67046e [ 1261.118667][ T6708] R13: 00007fd05c67046c R14: 0000000000000000 R15: 0000000000000000 [ 1261.126634][ T6708] [ 1261.173316][T30378] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.203093][ T3683] usb 4-1: device descriptor read/64, error 18 [ 1261.353254][T30378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1261.374483][T30378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.389367][T30378] usb 1-1: Product: syz [ 1261.397007][ T20] cdc_ncm 3-1:1.0: bind() failure [ 1261.404824][T30378] usb 1-1: Manufacturer: syz [ 1261.412771][T30378] usb 1-1: SerialNumber: syz [ 1261.433521][ T20] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1261.473452][ T20] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1261.495096][ T3683] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1261.514290][ T20] usbtest: probe of 3-1:1.1 failed with error -71 [ 1261.525975][ T20] usb 3-1: USB disconnect, device number 22 [ 1261.696864][ T6749] UDC core: couldn't find an available UDC or it's busy: -16 [ 1261.711088][ T6749] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1261.719324][ T3683] usb 4-1: device descriptor read/64, error 18 03:14:41 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 11) 03:14:41 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xe4ffffff, 0x0, 0x0) 03:14:41 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x63, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:41 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x33340000, 0x0, 0x0) [ 1261.860702][ T3683] usb usb4-port1: attempt power cycle [ 1262.263144][ T3758] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1262.293138][ T3683] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1262.303973][ T6824] UDC core: couldn't find an available UDC or it's busy: -16 [ 1262.311365][ T6824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1262.393197][ T3683] usb 4-1: Invalid ep0 maxpacket: 244 [ 1262.533435][T30378] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1262.539474][T30378] cdc_ncm 1-1:1.0: bind() failure [ 1262.548799][T30378] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1262.557607][ T3683] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1262.565694][T30378] cdc_ncm 1-1:1.1: bind() failure [ 1262.633163][ T3758] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.644564][ T3758] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1262.654485][ T3758] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1262.663127][ T3683] usb 4-1: Invalid ep0 maxpacket: 244 [ 1262.664403][ T3758] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1262.671321][ T3683] usb usb4-port1: unable to enumerate USB device [ 1262.680431][ T3758] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1262.853628][ T3758] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1262.869651][ T3758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.876117][ T6825] UDC core: couldn't find an available UDC or it's busy: -16 [ 1262.878219][ T3758] usb 3-1: Product: syz [ 1262.886274][ T6825] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1262.906676][ T3758] usb 3-1: Manufacturer: syz [ 1262.911290][ T3758] usb 3-1: SerialNumber: syz 03:14:43 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009025cf402010000000904000001020d00000524060001052400000000000000000006241a0000000905810320000000000904010000020d000009040101023e8de7934bd5573b0533c0cc020d000009058202000200000000000000520149349f16809994ee7e3118e92e641af1d9cba9e7c65376caefc58210be4e9d254c7fa303210f3c726b4be60274023634c6ba026e51bbca8db8f051b2b5e5f5419392931ef26786fd68d2b5ce810335d290329e664db85f0ea141ed382ca60c8565a6ddc5740e39548454d2e86bda5801"], 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) r2 = syz_usb_connect$cdc_ncm(0x5, 0x7c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x0, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a694"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x8, 0x9, 0x14}, {0x6, 0x24, 0x1a, 0x8055, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x3, 0x0, 0x20}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0xcd, 0x7d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3f, 0x8, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x5e, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xb2, 0x7f, 0xff, 0xff, 0x3}, 0x15, &(0x7f0000000140)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xab, 0x1, 0x8, 0xf, 0x258, [0xc0]}]}, 0x1, [{0xd6, &(0x7f00000003c0)=@string={0xd6, 0x3, "ef546c70aa80383158856ab1ad3fe8e2970750eedbdf584ec0cbd261101aa93b67177f2ae91f7c23575fbe976090f5dfeeb827ccb758eb0c5c5c9411293e4e93768ede8e6b7ccf3a320ff6034294271844e0a21fcdaed7fa31a21c883f4f3064ce171f371b9b3e50e5d93a2048d8c3f19117cd5e5b57965be8d03e79e3a17ba511eb4fb86f83aad3c893fa5a20f2f53183ab54af16bb508afc3d0f9fbfdbc7a4e350e7d1ffbbfe029a6905e7cb11ad245f643548980aebd141b1f355221990b287a8c1ca0fedd07195c9921ed28c9208357c4b64"}}]}) (rerun: 32) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000c80)={0x14, &(0x7f0000000c00)={0x0, 0x21, 0xa, {0xa, 0x23, "75ba799bdeb84f44"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000000cc0)={0x20, 0xc, 0x79, "fe62d0578feb95eaa8255c3a8b49630079fe6ceb6cf21a14b8cf1aa067efe26bdeb4d580fc0ea35380a0725a53e71cecec3242235c653730deb96c453798b8e4a9b922acbdffd491aa584f477c1124317215eef58de2520c43643149f52a0ab03d402c35874bac4ada9d11209d49075344e4da439b05bec280"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x7, 0x1, 0x1000, 0x76, 0x1, 0x0, 0x9, 0x8000, 0x29, 0x4, 0x689, 0x6}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f00000001c0)={0x0, 0x22, 0x2b, {0x2b, 0x22, "d4544cb6db7991dabeb0e1bb6a52cbbc150147ed75e3fdb117e16170580c7cbae22560fc33ed174ec6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "491e04b8c191adda52f69e6294ae80f6f3c726216cd657a9ca63e4243e3e566aed270cab208a4057e7b55dba87d76e39a31d07873597bea96432932195d0a0d2b59b6b00bc3ca00373c36cdb5d1c7bb70b625209c77975ba50ca90baee9bbcd238913658846b6a4363cba6da5da9ba94e58726bb061d95efed88963d20ca11706f3bf5"}}, &(0x7f0000000580)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x32, 0x1}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x9, "b1aa730b", "5daacec7"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x96, 0x0, 0x5, 0x6, 0xbd, 0x5, 0x9}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x16, 0xd3, "bc5bc6cf11eba0c6c825cb712974dc8355963fea198e09442253d13d7bbdf2ee19f71147060eebfc8ae0097d16c247ce00594e5aeb271994412ec6fd8b6ffbd60d8323141e8f84bb3a025ccba442985e8e108db1086ec8172fcee341607db238d9068a46df148b61ce45257df50758e3cf8a8d3b28439dcd190f62f14ae37aaa8b5f5deeb07078c7a0f8dcd018ab3d3122c3169237d558c7fee48bd9d148e35550115bc2f25486145251191ecfa4d5b913fc9f68dfa1d75ad0c2ea47a43db9c1ab40904e8f33f5f9c507b6c23ce462575aa2b8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x40, 0x1, [0xf00]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, '~%'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xc60}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, '$>'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x3}}) 03:14:43 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xfe110000, 0x0, 0x0) [ 1263.356943][ T6823] FAULT_INJECTION: forcing a failure. [ 1263.356943][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.387991][ T6823] CPU: 1 PID: 6823 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1263.398455][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.408523][ T6823] Call Trace: [ 1263.411799][ T6823] [ 1263.414736][ T6823] dump_stack_lvl+0xcd/0x134 [ 1263.419327][ T6823] should_fail.cold+0x5/0xa [ 1263.423946][ T6823] should_failslab+0x5/0x10 [ 1263.428447][ T6823] __kmalloc+0x7b/0x4d0 [ 1263.432597][ T6823] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1263.437962][ T6823] ? d_absolute_path+0x127/0x1a0 [ 1263.442911][ T6823] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1263.448123][ T6823] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1263.453841][ T6823] tomoyo_encode+0x28/0x50 [ 1263.458283][ T6823] tomoyo_realpath_from_path+0x186/0x620 [ 1263.463938][ T6823] tomoyo_path_number_perm+0x1d5/0x590 [ 1263.469415][ T6823] ? tomoyo_path_number_perm+0x18d/0x590 [ 1263.475039][ T6823] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1263.480836][ T6823] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1263.486822][ T6823] ? __context_tracking_exit+0xb8/0xe0 [ 1263.492299][ T6823] ? __fget_files+0x28c/0x470 [ 1263.496964][ T6823] security_file_ioctl+0x50/0xb0 [ 1263.501895][ T6823] __x64_sys_ioctl+0xb3/0x200 [ 1263.506563][ T6823] do_syscall_64+0x35/0xb0 [ 1263.510973][ T6823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1263.516876][ T6823] RIP: 0033:0x7fd05c028e07 [ 1263.521298][ T6823] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1263.540921][ T6823] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.549326][ T6823] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1263.557306][ T6823] RDX: 00007fd05c67046c RSI: 0000000040095505 RDI: 0000000000000003 [ 1263.565271][ T6823] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1263.573244][ T6823] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd05c67046e [ 1263.581232][ T6823] R13: 00007fd05c67046c R14: 0000000000000000 R15: 0000000000000000 [ 1263.589215][ T6823] [ 1263.604352][ T6823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1263.825112][ T3684] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1263.853121][ T3758] cdc_ncm 3-1:1.0: bind() failure [ 1263.873532][ T3758] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1263.893153][ T3758] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1263.913145][ T3758] usbtest: probe of 3-1:1.1 failed with error -71 [ 1263.931383][ T3758] usb 3-1: USB disconnect, device number 23 [ 1264.023026][ T3684] usb 4-1: device descriptor read/64, error 18 03:14:44 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000001680)={0x2c, &(0x7f0000001480)={0x0, 0xf, 0x83, {0x83, 0x6, "a42d8f49776a7fef3ce91ecb95e5db4e71eadfd5a8f9fdf2511748b4f93d9b82e247045751ac67185386dd39ed69987b71552074cd7c9d72abb11a69451a1445b0026b227742bc769cc731817d08dbe6b1a130827b45fa4c52a46be4b0f42b0eb7783214965be3bf8e4bed0970402fa47bcff1e9c8b512e837495261ad417a591a"}}, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000001580)={0x0, 0xf, 0x75, {0x5, 0xf, 0x75, 0x1, [@generic={0x70, 0x10, 0x2, "bbe2847607d5e41d64674deb43482347880afaeec971c6fb0f86c6ac8cf572c8bcfcd25cd2716a2304c99af6ab61a549e4f39edcbe4f5bcf60a425ec43a5978b0fecb3342176587bfa30ccb4d7aaabfaebd4e6d0eebd586b9448230dae6510922d18815efc7cbbdcb007751775"}]}}, &(0x7f0000001600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x3f, 0x0, "94b03688", "043b7eb6"}}, &(0x7f0000001640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0x80, 0x8, 0x6c, 0x9, 0x8}}}, &(0x7f0000001b40)={0x84, &(0x7f00000016c0)={0x0, 0x17, 0xaa, "231b8c9f0a90aba47056b9768e27f30e0f801a2778b289aeceeb0f6bd04db8ab5cd124dd3d71059f8ba9dfdb86071eb49975fe929b4d8fe1166e125d76b28c8ebc39cbd21c9b1792275b7d07b0377fddad5be2308970161b644d97fd53ac065df69f7b2652b6b46396ec75e7bb628b76397a4aa29dd8e60ffe6502b73b3199790d89c056560ca5359314ae7efe7cdd5d623ae5a4b5226313aedf4355648dc34ce9ffa84aaf85c21ec7af"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x1, 0x5}}, &(0x7f0000001840)={0x20, 0x0, 0x8, {0x4, 0x40, [0x770f]}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000001900)={0x40, 0xb, 0x2, '\a['}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xd0}, &(0x7f0000001980)={0x40, 0x13, 0x6}, &(0x7f00000019c0)={0x40, 0x17, 0x6, @random="54358641ba80"}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "e5c7"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x9f}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xa2}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000001240)={0x24, &(0x7f0000001140)={0x40, 0x21, 0x28, {0x28, 0x2, "2bf0061a588a4a8353ae3f1e344839c03047c2210de39ef5e30c143737d20eedc3820e38c5e2"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f00000011c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0xa, "6f634089"}, @main=@item_012={0x1, 0x0, 0xa, 'H'}, @global=@item_4={0x3, 0x1, 0x3, "16fff538"}, @global=@item_012={0x1, 0x1, 0xb, 'O'}, @local=@item_4={0x3, 0x2, 0x3, "d6a5d49f"}, @local=@item_012={0x1, 0x2, 0x7, 'k'}, @main=@item_012={0x2, 0x0, 0xa, "a406"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x243}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x40, 0xe, 0xb5, "0aad4bfd35bb2dccd1cebcbe8b85edce47a17fa7b119f5a23b81a0332860832984ce5d8cc7b0ca87a21d9d28c01f6186cac7aea2e35f0b9a50e9ce8b0c4190b7f033f315cf6550a97970e514d9e126d0406a56827506eefe17807cebbf811e602af38c47f9d2b900f198d031f1c4d4c5fa6aa8333707ef6de9e78f88e1588d78d93091f30020d847b7321d3d958a3f5ea39c0abffcdf66234c28216308a72bb758067fcf48d0d02957af8aea8c7562dd590833a1fe"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000013c0)={0x20, 0x1, 0x2c, "443ef2d38d22ae91f647722c64748b1ed37ea95d6ceda3d639d3e2ac33d812f115c5234971da0de5e3a4eb2d"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x8}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x20, 0x11, 0x29, {0x29, 0x21, "41369bbbd49a5a8751efdb8861d3e70081e0c44307aa5717f01ee52a0e7af57b931b30d8a451db"}}, &(0x7f0000000900)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "105c726ce00707ee8edc0a76b9c2a96f5ff09e6276b69d5f35310188294ab9677367b48629ff24ab0378aac6545936353f7b2e8b1581e0188f7923889bf54b148294ff9e32ba2eeb23f16af15975a7ab6644bc0e6e940392a810dcc13592b5728124f836e3cbc26c5c6d76f4f033cdae70732807731c74cc806961da817ab2362162d672ca0476df61f6d9f3ed539046c26ac8a944947e78f219d0576463"}}, &(0x7f00000009c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x50, 0x1f, 0x6, 0x380f, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0x3, 0x8001}, @ptm_cap={0x3}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x4, 0x8, 0x40, "f352b33f", "c2779322"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x64, 0x59, 0x80, 0x3, 0xc0, 0x3}}}, &(0x7f0000001080)={0x84, &(0x7f0000000ac0)={0x40, 0xf, 0xcd, "1b0b1b4afe2ce6ca4645982b09d39121456543b1a2e1ec9aff0df6ae28876f63cf98a7554f2435bfb92161849e7517388b495ee349053d0290354a05782726b37efecd21f6387db454e630f00d145856b12851363840cee9b6a74e3e73325395a945ceaf9954a7ce8a1ed2e07e2cc09e030d9bb63e090efb7abf5164d06220a22551fbc7c043c7abb307431a75b2fb7efc52454c0cbd77193cb9233dbcef9ec347ea96b3c732aa2c206c7fbf07fc6fcf294a17210702979200a097bbb7bdeb89df028ce59c3eb5db68f018d852"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x1e0, 0x80, [0xf0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "4dcd"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "8097"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x6}}) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x8, 0xcd, {0xcd, 0xb, "d7cbc2f6e50d886ca613525ccd113bc8cb2f2d43faa484b3f2ac68aff5bb22efef53a738dc0110f5c95884359efb9b1cab28a527e6c30bf593a57bfce2f4ac00746eab11fd7fc6a7ea0fd829d620fcb9f152eb24697c328e22b869aed6888ec409ca499d361af98605f2420705c190759de11ba391435f0a50636f0f03b3c282544d15d372074fa3ba535be9d9c8d66c2311b351a9c9b436d856a5ae587ab79232a03a733f692589153e02b0501c84531adede2ff793165ec4aef6eae6177fc0d1642035b85fbb72b8f8f4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f00000000c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xa, 0x2, 0xfffa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9b4f32fd3cb4fd9da6094911e189ed05"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a03eb5800a1fdde58fba6004416da6c5"}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6f, 0x60, 0x1, 0x9, "0555b6c2", "6a9bbb30"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x40, 0x0, 0x52, 0x5, 0x6000}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x31, 0x25, "430bcbb93d8a0d9a5448c7098b4d73137c4193eef4d7a6d683021f6c1343dc4ac893d05cbc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1000, 0x20, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x81}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "181e"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'wS'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1c0}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x61}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) 03:14:44 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3f000000, 0x0, 0x0) 03:14:44 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x64, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:44 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xffffffe4, 0x0, 0x0) 03:14:44 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 12) [ 1264.279288][ T3758] usb 1-1: USB disconnect, device number 90 [ 1264.299416][ T3684] usb 4-1: new high-speed USB device number 61 using dummy_hcd 03:14:44 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1000000000000, 0x0, 0x0) 03:14:44 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x65, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:44 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xcd060000, 0x0, 0x0) 03:14:44 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x40000000000000, 0x0, 0x0) 03:14:44 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x66, 0xfffffdef, 0x0, 0x0, 0x0) [ 1264.514129][ T3684] usb 4-1: device descriptor read/64, error 18 [ 1264.633321][ T3684] usb usb4-port1: attempt power cycle [ 1264.703141][ T3682] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1264.733248][ T3758] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1265.043010][ T3684] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1265.093140][ T3758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.113517][ T3682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.124788][ T3682] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1265.135934][ T3682] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1265.143219][ T3684] usb 4-1: Invalid ep0 maxpacket: 244 [ 1265.146374][ T3682] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1265.161346][ T3682] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1265.263133][ T3758] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1265.272296][ T3758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.280485][ T3758] usb 1-1: Product: syz [ 1265.288787][ T3758] usb 1-1: Manufacturer: syz [ 1265.293658][ T3684] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1265.301388][ T3758] usb 1-1: SerialNumber: syz [ 1265.333245][ T3682] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1265.343827][ T3682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.351842][ T3682] usb 3-1: Product: syz [ 1265.356665][ T3682] usb 3-1: Manufacturer: syz [ 1265.361355][ T3682] usb 3-1: SerialNumber: syz [ 1265.383144][ T3684] usb 4-1: Invalid ep0 maxpacket: 244 [ 1265.388951][ T3684] usb usb4-port1: unable to enumerate USB device [ 1265.548261][ T6838] UDC core: couldn't find an available UDC or it's busy: -16 [ 1265.555958][ T6838] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1265.808481][ T6843] FAULT_INJECTION: forcing a failure. [ 1265.808481][ T6843] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.821355][ T6843] CPU: 0 PID: 6843 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1265.831797][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.841847][ T6843] Call Trace: [ 1265.845123][ T6843] [ 1265.848053][ T6843] dump_stack_lvl+0xcd/0x134 [ 1265.852653][ T6843] should_fail.cold+0x5/0xa [ 1265.857157][ T6843] should_failslab+0x5/0x10 [ 1265.861823][ T6843] __kmalloc+0x7b/0x4d0 [ 1265.866062][ T6843] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1265.871470][ T6843] ? d_absolute_path+0x127/0x1a0 [ 1265.876409][ T6843] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1265.881616][ T6843] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1265.887335][ T6843] tomoyo_encode+0x28/0x50 [ 1265.891872][ T6843] tomoyo_realpath_from_path+0x186/0x620 [ 1265.897517][ T6843] tomoyo_path_number_perm+0x1d5/0x590 [ 1265.900244][ T6854] UDC core: couldn't find an available UDC or it's busy: -16 [ 1265.902991][ T6843] ? tomoyo_path_number_perm+0x18d/0x590 [ 1265.903024][ T6843] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1265.910679][ T6854] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1265.916026][ T6843] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1265.935206][ T6843] ? __context_tracking_exit+0xb8/0xe0 [ 1265.940657][ T6843] ? __fget_files+0x28c/0x470 [ 1265.945320][ T6843] security_file_ioctl+0x50/0xb0 [ 1265.950272][ T6843] __x64_sys_ioctl+0xb3/0x200 [ 1265.954942][ T6843] do_syscall_64+0x35/0xb0 [ 1265.959352][ T6843] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1265.965238][ T6843] RIP: 0033:0x7fd05c028e07 [ 1265.969642][ T6843] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1265.989256][ T6843] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1265.997663][ T6843] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1266.005624][ T6843] RDX: 00007fd05c67047c RSI: 0000000040095505 RDI: 0000000000000003 [ 1266.013581][ T6843] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1266.021540][ T6843] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd05c67047e [ 1266.029525][ T6843] R13: 00007fd05c67047c R14: 0000000000000001 R15: 00000000ffffffff [ 1266.037528][ T6843] [ 1266.046219][ T6843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1266.276370][ T6854] UDC core: couldn't find an available UDC or it's busy: -16 [ 1266.284419][ T6854] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1266.293887][ T3758] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1266.303307][ T3682] cdc_ncm 3-1:1.0: bind() failure [ 1266.303715][ T3758] cdc_ncm 1-1:1.0: bind() failure [ 1266.329930][ T3758] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1266.330034][ T3682] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1266.337365][ T3758] cdc_ncm 1-1:1.1: bind() failure [ 1266.365841][ T3758] usb 1-1: USB disconnect, device number 91 [ 1266.373215][ T3682] cdc_mbim: probe of 3-1:1.1 failed with error -71 03:14:46 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009025cf402010000000904000001020d00000524060001052400000000000000000006241a0000000905810320000000000904010000020d000009040101023e8de7934bd5573b0533c0cc020d000009058202000200000000000000520149349f16809994ee7e3118e92e641af1d9cba9e7c65376caefc58210be4e9d254c7fa303210f3c726b4be60274023634c6ba026e51bbca8db8f051b2b5e5f5419392931ef26786fd68d2b5ce810335d290329e664db85f0ea141ed382ca60c8565a6ddc5740e39548454d2e86bda5801"], 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0x7c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x0, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a694"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x8, 0x9, 0x14}, {0x6, 0x24, 0x1a, 0x8055, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x3, 0x0, 0x20}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0xcd, 0x7d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3f, 0x8, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x5e, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xb2, 0x7f, 0xff, 0xff, 0x3}, 0x15, &(0x7f0000000140)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xab, 0x1, 0x8, 0xf, 0x258, [0xc0]}]}, 0x1, [{0xd6, &(0x7f00000003c0)=@string={0xd6, 0x3, "ef546c70aa80383158856ab1ad3fe8e2970750eedbdf584ec0cbd261101aa93b67177f2ae91f7c23575fbe976090f5dfeeb827ccb758eb0c5c5c9411293e4e93768ede8e6b7ccf3a320ff6034294271844e0a21fcdaed7fa31a21c883f4f3064ce171f371b9b3e50e5d93a2048d8c3f19117cd5e5b57965be8d03e79e3a17ba511eb4fb86f83aad3c893fa5a20f2f53183ab54af16bb508afc3d0f9fbfdbc7a4e350e7d1ffbbfe029a6905e7cb11ad245f643548980aebd141b1f355221990b287a8c1ca0fedd07195c9921ed28c9208357c4b64"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000c80)={0x14, &(0x7f0000000c00)={0x0, 0x21, 0xa, {0xa, 0x23, "75ba799bdeb84f44"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000000cc0)={0x20, 0xc, 0x79, "fe62d0578feb95eaa8255c3a8b49630079fe6ceb6cf21a14b8cf1aa067efe26bdeb4d580fc0ea35380a0725a53e71cecec3242235c653730deb96c453798b8e4a9b922acbdffd491aa584f477c1124317215eef58de2520c43643149f52a0ab03d402c35874bac4ada9d11209d49075344e4da439b05bec280"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x7, 0x1, 0x1000, 0x76, 0x1, 0x0, 0x9, 0x8000, 0x29, 0x4, 0x689, 0x6}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f00000001c0)={0x0, 0x22, 0x2b, {0x2b, 0x22, "d4544cb6db7991dabeb0e1bb6a52cbbc150147ed75e3fdb117e16170580c7cbae22560fc33ed174ec6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "491e04b8c191adda52f69e6294ae80f6f3c726216cd657a9ca63e4243e3e566aed270cab208a4057e7b55dba87d76e39a31d07873597bea96432932195d0a0d2b59b6b00bc3ca00373c36cdb5d1c7bb70b625209c77975ba50ca90baee9bbcd238913658846b6a4363cba6da5da9ba94e58726bb061d95efed88963d20ca11706f3bf5"}}, &(0x7f0000000580)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x32, 0x1}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x9, "b1aa730b", "5daacec7"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x96, 0x0, 0x5, 0x6, 0xbd, 0x5, 0x9}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x16, 0xd3, "bc5bc6cf11eba0c6c825cb712974dc8355963fea198e09442253d13d7bbdf2ee19f71147060eebfc8ae0097d16c247ce00594e5aeb271994412ec6fd8b6ffbd60d8323141e8f84bb3a025ccba442985e8e108db1086ec8172fcee341607db238d9068a46df148b61ce45257df50758e3cf8a8d3b28439dcd190f62f14ae37aaa8b5f5deeb07078c7a0f8dcd018ab3d3122c3169237d558c7fee48bd9d148e35550115bc2f25486145251191ecfa4d5b913fc9f68dfa1d75ad0c2ea47a43db9c1ab40904e8f33f5f9c507b6c23ce462575aa2b8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x40, 0x1, [0xf00]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, '~%'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xc60}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, '$>'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x3}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009025cf402010000000904000001020d00000524060001052400000000000000000006241a0000000905810320000000000904010000020d000009040101023e8de7934bd5573b0533c0cc020d000009058202000200000000000000520149349f16809994ee7e3118e92e641af1d9cba9e7c65376caefc58210be4e9d254c7fa303210f3c726b4be60274023634c6ba026e51bbca8db8f051b2b5e5f5419392931ef26786fd68d2b5ce810335d290329e664db85f0ea141ed382ca60c8565a6ddc5740e39548454d2e86bda5801"], 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x5, 0x7c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x0, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a694"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x8, 0x9, 0x14}, {0x6, 0x24, 0x1a, 0x8055, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x3, 0x0, 0x20}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0xcd, 0x7d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3f, 0x8, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x5e, 0x8}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xb2, 0x7f, 0xff, 0xff, 0x3}, 0x15, &(0x7f0000000140)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xab, 0x1, 0x8, 0xf, 0x258, [0xc0]}]}, 0x1, [{0xd6, &(0x7f00000003c0)=@string={0xd6, 0x3, "ef546c70aa80383158856ab1ad3fe8e2970750eedbdf584ec0cbd261101aa93b67177f2ae91f7c23575fbe976090f5dfeeb827ccb758eb0c5c5c9411293e4e93768ede8e6b7ccf3a320ff6034294271844e0a21fcdaed7fa31a21c883f4f3064ce171f371b9b3e50e5d93a2048d8c3f19117cd5e5b57965be8d03e79e3a17ba511eb4fb86f83aad3c893fa5a20f2f53183ab54af16bb508afc3d0f9fbfdbc7a4e350e7d1ffbbfe029a6905e7cb11ad245f643548980aebd141b1f355221990b287a8c1ca0fedd07195c9921ed28c9208357c4b64"}}]}) (async) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x95, &(0x7f0000008440)=ANY=[]) (async) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000c80)={0x14, &(0x7f0000000c00)={0x0, 0x21, 0xa, {0xa, 0x23, "75ba799bdeb84f44"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000000cc0)={0x20, 0xc, 0x79, "fe62d0578feb95eaa8255c3a8b49630079fe6ceb6cf21a14b8cf1aa067efe26bdeb4d580fc0ea35380a0725a53e71cecec3242235c653730deb96c453798b8e4a9b922acbdffd491aa584f477c1124317215eef58de2520c43643149f52a0ab03d402c35874bac4ada9d11209d49075344e4da439b05bec280"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d80)={0x0, 0x8, 0x1}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x7, 0x1, 0x1000, 0x76, 0x1, 0x0, 0x9, 0x8000, 0x29, 0x4, 0x689, 0x6}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, &(0x7f00000001c0)={0x0, 0x22, 0x2b, {0x2b, 0x22, "d4544cb6db7991dabeb0e1bb6a52cbbc150147ed75e3fdb117e16170580c7cbae22560fc33ed174ec6"}}, &(0x7f00000004c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "491e04b8c191adda52f69e6294ae80f6f3c726216cd657a9ca63e4243e3e566aed270cab208a4057e7b55dba87d76e39a31d07873597bea96432932195d0a0d2b59b6b00bc3ca00373c36cdb5d1c7bb70b625209c77975ba50ca90baee9bbcd238913658846b6a4363cba6da5da9ba94e58726bb061d95efed88963d20ca11706f3bf5"}}, &(0x7f0000000580)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x32, 0x1}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x0, 0x9, "b1aa730b", "5daacec7"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x96, 0x0, 0x5, 0x6, 0xbd, 0x5, 0x9}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x16, 0xd3, "bc5bc6cf11eba0c6c825cb712974dc8355963fea198e09442253d13d7bbdf2ee19f71147060eebfc8ae0097d16c247ce00594e5aeb271994412ec6fd8b6ffbd60d8323141e8f84bb3a025ccba442985e8e108db1086ec8172fcee341607db238d9068a46df148b61ce45257df50758e3cf8a8d3b28439dcd190f62f14ae37aaa8b5f5deeb07078c7a0f8dcd018ab3d3122c3169237d558c7fee48bd9d148e35550115bc2f25486145251191ecfa4d5b913fc9f68dfa1d75ad0c2ea47a43db9c1ab40904e8f33f5f9c507b6c23ce462575aa2b8"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x40, 0x1, [0xf00]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x800}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, '~%'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0xc60}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a00)={0x40, 0x19, 0x2, '$>'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x3}}) (async) 03:14:46 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xe4ffffff, 0x0, 0x0) 03:14:46 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x67, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:46 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x70000000000000, 0x0, 0x0) 03:14:46 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000001680)={0x2c, &(0x7f0000001480)={0x0, 0xf, 0x83, {0x83, 0x6, "a42d8f49776a7fef3ce91ecb95e5db4e71eadfd5a8f9fdf2511748b4f93d9b82e247045751ac67185386dd39ed69987b71552074cd7c9d72abb11a69451a1445b0026b227742bc769cc731817d08dbe6b1a130827b45fa4c52a46be4b0f42b0eb7783214965be3bf8e4bed0970402fa47bcff1e9c8b512e837495261ad417a591a"}}, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000001580)={0x0, 0xf, 0x75, {0x5, 0xf, 0x75, 0x1, [@generic={0x70, 0x10, 0x2, "bbe2847607d5e41d64674deb43482347880afaeec971c6fb0f86c6ac8cf572c8bcfcd25cd2716a2304c99af6ab61a549e4f39edcbe4f5bcf60a425ec43a5978b0fecb3342176587bfa30ccb4d7aaabfaebd4e6d0eebd586b9448230dae6510922d18815efc7cbbdcb007751775"}]}}, &(0x7f0000001600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x3f, 0x0, "94b03688", "043b7eb6"}}, &(0x7f0000001640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0x80, 0x8, 0x6c, 0x9, 0x8}}}, &(0x7f0000001b40)={0x84, &(0x7f00000016c0)={0x0, 0x17, 0xaa, "231b8c9f0a90aba47056b9768e27f30e0f801a2778b289aeceeb0f6bd04db8ab5cd124dd3d71059f8ba9dfdb86071eb49975fe929b4d8fe1166e125d76b28c8ebc39cbd21c9b1792275b7d07b0377fddad5be2308970161b644d97fd53ac065df69f7b2652b6b46396ec75e7bb628b76397a4aa29dd8e60ffe6502b73b3199790d89c056560ca5359314ae7efe7cdd5d623ae5a4b5226313aedf4355648dc34ce9ffa84aaf85c21ec7af"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x1, 0x5}}, &(0x7f0000001840)={0x20, 0x0, 0x8, {0x4, 0x40, [0x770f]}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000001900)={0x40, 0xb, 0x2, '\a['}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xd0}, &(0x7f0000001980)={0x40, 0x13, 0x6}, &(0x7f00000019c0)={0x40, 0x17, 0x6, @random="54358641ba80"}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "e5c7"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x9f}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xa2}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001240)={0x24, &(0x7f0000001140)={0x40, 0x21, 0x28, {0x28, 0x2, "2bf0061a588a4a8353ae3f1e344839c03047c2210de39ef5e30c143737d20eedc3820e38c5e2"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f00000011c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0xa, "6f634089"}, @main=@item_012={0x1, 0x0, 0xa, 'H'}, @global=@item_4={0x3, 0x1, 0x3, "16fff538"}, @global=@item_012={0x1, 0x1, 0xb, 'O'}, @local=@item_4={0x3, 0x2, 0x3, "d6a5d49f"}, @local=@item_012={0x1, 0x2, 0x7, 'k'}, @main=@item_012={0x2, 0x0, 0xa, "a406"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x243}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x40, 0xe, 0xb5, "0aad4bfd35bb2dccd1cebcbe8b85edce47a17fa7b119f5a23b81a0332860832984ce5d8cc7b0ca87a21d9d28c01f6186cac7aea2e35f0b9a50e9ce8b0c4190b7f033f315cf6550a97970e514d9e126d0406a56827506eefe17807cebbf811e602af38c47f9d2b900f198d031f1c4d4c5fa6aa8333707ef6de9e78f88e1588d78d93091f30020d847b7321d3d958a3f5ea39c0abffcdf66234c28216308a72bb758067fcf48d0d02957af8aea8c7562dd590833a1fe"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000013c0)={0x20, 0x1, 0x2c, "443ef2d38d22ae91f647722c64748b1ed37ea95d6ceda3d639d3e2ac33d812f115c5234971da0de5e3a4eb2d"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x20, 0x11, 0x29, {0x29, 0x21, "41369bbbd49a5a8751efdb8861d3e70081e0c44307aa5717f01ee52a0e7af57b931b30d8a451db"}}, &(0x7f0000000900)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "105c726ce00707ee8edc0a76b9c2a96f5ff09e6276b69d5f35310188294ab9677367b48629ff24ab0378aac6545936353f7b2e8b1581e0188f7923889bf54b148294ff9e32ba2eeb23f16af15975a7ab6644bc0e6e940392a810dcc13592b5728124f836e3cbc26c5c6d76f4f033cdae70732807731c74cc806961da817ab2362162d672ca0476df61f6d9f3ed539046c26ac8a944947e78f219d0576463"}}, &(0x7f00000009c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x50, 0x1f, 0x6, 0x380f, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0x3, 0x8001}, @ptm_cap={0x3}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x4, 0x8, 0x40, "f352b33f", "c2779322"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x64, 0x59, 0x80, 0x3, 0xc0, 0x3}}}, &(0x7f0000001080)={0x84, &(0x7f0000000ac0)={0x40, 0xf, 0xcd, "1b0b1b4afe2ce6ca4645982b09d39121456543b1a2e1ec9aff0df6ae28876f63cf98a7554f2435bfb92161849e7517388b495ee349053d0290354a05782726b37efecd21f6387db454e630f00d145856b12851363840cee9b6a74e3e73325395a945ceaf9954a7ce8a1ed2e07e2cc09e030d9bb63e090efb7abf5164d06220a22551fbc7c043c7abb307431a75b2fb7efc52454c0cbd77193cb9233dbcef9ec347ea96b3c732aa2c206c7fbf07fc6fcf294a17210702979200a097bbb7bdeb89df028ce59c3eb5db68f018d852"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x1e0, 0x80, [0xf0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "4dcd"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "8097"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x8, 0xcd, {0xcd, 0xb, "d7cbc2f6e50d886ca613525ccd113bc8cb2f2d43faa484b3f2ac68aff5bb22efef53a738dc0110f5c95884359efb9b1cab28a527e6c30bf593a57bfce2f4ac00746eab11fd7fc6a7ea0fd829d620fcb9f152eb24697c328e22b869aed6888ec409ca499d361af98605f2420705c190759de11ba391435f0a50636f0f03b3c282544d15d372074fa3ba535be9d9c8d66c2311b351a9c9b436d856a5ae587ab79232a03a733f692589153e02b0501c84531adede2ff793165ec4aef6eae6177fc0d1642035b85fbb72b8f8f4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f00000000c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xa, 0x2, 0xfffa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9b4f32fd3cb4fd9da6094911e189ed05"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a03eb5800a1fdde58fba6004416da6c5"}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6f, 0x60, 0x1, 0x9, "0555b6c2", "6a9bbb30"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x40, 0x0, 0x52, 0x5, 0x6000}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x31, 0x25, "430bcbb93d8a0d9a5448c7098b4d73137c4193eef4d7a6d683021f6c1343dc4ac893d05cbc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1000, 0x20, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x81}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "181e"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'wS'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1c0}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x61}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000001680)={0x2c, &(0x7f0000001480)={0x0, 0xf, 0x83, {0x83, 0x6, "a42d8f49776a7fef3ce91ecb95e5db4e71eadfd5a8f9fdf2511748b4f93d9b82e247045751ac67185386dd39ed69987b71552074cd7c9d72abb11a69451a1445b0026b227742bc769cc731817d08dbe6b1a130827b45fa4c52a46be4b0f42b0eb7783214965be3bf8e4bed0970402fa47bcff1e9c8b512e837495261ad417a591a"}}, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000001580)={0x0, 0xf, 0x75, {0x5, 0xf, 0x75, 0x1, [@generic={0x70, 0x10, 0x2, "bbe2847607d5e41d64674deb43482347880afaeec971c6fb0f86c6ac8cf572c8bcfcd25cd2716a2304c99af6ab61a549e4f39edcbe4f5bcf60a425ec43a5978b0fecb3342176587bfa30ccb4d7aaabfaebd4e6d0eebd586b9448230dae6510922d18815efc7cbbdcb007751775"}]}}, &(0x7f0000001600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x3f, 0x0, "94b03688", "043b7eb6"}}, &(0x7f0000001640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0x80, 0x8, 0x6c, 0x9, 0x8}}}, &(0x7f0000001b40)={0x84, &(0x7f00000016c0)={0x0, 0x17, 0xaa, "231b8c9f0a90aba47056b9768e27f30e0f801a2778b289aeceeb0f6bd04db8ab5cd124dd3d71059f8ba9dfdb86071eb49975fe929b4d8fe1166e125d76b28c8ebc39cbd21c9b1792275b7d07b0377fddad5be2308970161b644d97fd53ac065df69f7b2652b6b46396ec75e7bb628b76397a4aa29dd8e60ffe6502b73b3199790d89c056560ca5359314ae7efe7cdd5d623ae5a4b5226313aedf4355648dc34ce9ffa84aaf85c21ec7af"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001800)={0x20, 0x0, 0x4, {0x1, 0x5}}, &(0x7f0000001840)={0x20, 0x0, 0x8, {0x4, 0x40, [0x770f]}}, &(0x7f0000001880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000018c0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000001900)={0x40, 0xb, 0x2, '\a['}, &(0x7f0000001940)={0x40, 0xf, 0x2, 0xd0}, &(0x7f0000001980)={0x40, 0x13, 0x6}, &(0x7f00000019c0)={0x40, 0x17, 0x6, @random="54358641ba80"}, &(0x7f0000001a00)={0x40, 0x19, 0x2, "e5c7"}, &(0x7f0000001a40)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001a80)={0x40, 0x1c, 0x1, 0x9f}, &(0x7f0000001ac0)={0x40, 0x1e, 0x1, 0xa2}, &(0x7f0000001b00)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010341a0208000000000001090224000100000000090400000103000000092100000001220900090581030000000000e46a6646bccee429b5a970c992499faf994a6a958fc52580ebf8cbf8b0e2aefb7ea9e36b"], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022c6"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000001240)={0x24, &(0x7f0000001140)={0x40, 0x21, 0x28, {0x28, 0x2, "2bf0061a588a4a8353ae3f1e344839c03047c2210de39ef5e30c143737d20eedc3820e38c5e2"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f00000011c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0xa, "6f634089"}, @main=@item_012={0x1, 0x0, 0xa, 'H'}, @global=@item_4={0x3, 0x1, 0x3, "16fff538"}, @global=@item_012={0x1, 0x1, 0xb, 'O'}, @local=@item_4={0x3, 0x2, 0x3, "d6a5d49f"}, @local=@item_012={0x1, 0x2, 0x7, 'k'}, @main=@item_012={0x2, 0x0, 0xa, "a406"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x243}}}}, &(0x7f0000001440)={0x2c, &(0x7f0000001280)={0x40, 0xe, 0xb5, "0aad4bfd35bb2dccd1cebcbe8b85edce47a17fa7b119f5a23b81a0332860832984ce5d8cc7b0ca87a21d9d28c01f6186cac7aea2e35f0b9a50e9ce8b0c4190b7f033f315cf6550a97970e514d9e126d0406a56827506eefe17807cebbf811e602af38c47f9d2b900f198d031f1c4d4c5fa6aa8333707ef6de9e78f88e1588d78d93091f30020d847b7321d3d958a3f5ea39c0abffcdf66234c28216308a72bb758067fcf48d0d02957af8aea8c7562dd590833a1fe"}, &(0x7f0000001340)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000001380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000013c0)={0x20, 0x1, 0x2c, "443ef2d38d22ae91f647722c64748b1ed37ea95d6ceda3d639d3e2ac33d812f115c5234971da0de5e3a4eb2d"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x8}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x20, 0x11, 0x29, {0x29, 0x21, "41369bbbd49a5a8751efdb8861d3e70081e0c44307aa5717f01ee52a0e7af57b931b30d8a451db"}}, &(0x7f0000000900)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "105c726ce00707ee8edc0a76b9c2a96f5ff09e6276b69d5f35310188294ab9677367b48629ff24ab0378aac6545936353f7b2e8b1581e0188f7923889bf54b148294ff9e32ba2eeb23f16af15975a7ab6644bc0e6e940392a810dcc13592b5728124f836e3cbc26c5c6d76f4f033cdae70732807731c74cc806961da817ab2362162d672ca0476df61f6d9f3ed539046c26ac8a944947e78f219d0576463"}}, &(0x7f00000009c0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x50, 0x1f, 0x6, 0x380f, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0x3, 0x8001}, @ptm_cap={0x3}]}}, &(0x7f0000000a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x4, 0x8, 0x40, "f352b33f", "c2779322"}}, &(0x7f0000000a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x64, 0x59, 0x80, 0x3, 0xc0, 0x3}}}, &(0x7f0000001080)={0x84, &(0x7f0000000ac0)={0x40, 0xf, 0xcd, "1b0b1b4afe2ce6ca4645982b09d39121456543b1a2e1ec9aff0df6ae28876f63cf98a7554f2435bfb92161849e7517388b495ee349053d0290354a05782726b37efecd21f6387db454e630f00d145856b12851363840cee9b6a74e3e73325395a945ceaf9954a7ce8a1ed2e07e2cc09e030d9bb63e090efb7abf5164d06220a22551fbc7c043c7abb307431a75b2fb7efc52454c0cbd77193cb9233dbcef9ec347ea96b3c732aa2c206c7fbf07fc6fcf294a17210702979200a097bbb7bdeb89df028ce59c3eb5db68f018d852"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x1e0, 0x80, [0xf0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "4dcd"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "8097"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x6}}) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x8, 0xcd, {0xcd, 0xb, "d7cbc2f6e50d886ca613525ccd113bc8cb2f2d43faa484b3f2ac68aff5bb22efef53a738dc0110f5c95884359efb9b1cab28a527e6c30bf593a57bfce2f4ac00746eab11fd7fc6a7ea0fd829d620fcb9f152eb24697c328e22b869aed6888ec409ca499d361af98605f2420705c190759de11ba391435f0a50636f0f03b3c282544d15d372074fa3ba535be9d9c8d66c2311b351a9c9b436d856a5ae587ab79232a03a733f692589153e02b0501c84531adede2ff793165ec4aef6eae6177fc0d1642035b85fbb72b8f8f4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f00000000c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xa, 0x2, 0xfffa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9b4f32fd3cb4fd9da6094911e189ed05"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "a03eb5800a1fdde58fba6004416da6c5"}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6f, 0x60, 0x1, 0x9, "0555b6c2", "6a9bbb30"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x40, 0x0, 0x52, 0x5, 0x6000}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x31, 0x25, "430bcbb93d8a0d9a5448c7098b4d73137c4193eef4d7a6d683021f6c1343dc4ac893d05cbc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1000, 0x20, [0xf0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x81}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "181e"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'wS'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1c0}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x61}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) [ 1266.395684][ T3682] usbtest: probe of 3-1:1.1 failed with error -71 03:14:46 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x68, 0xfffffdef, 0x0, 0x0, 0x0) [ 1266.457045][ T3682] usb 3-1: USB disconnect, device number 24 03:14:46 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 13) 03:14:46 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xe8110000, 0x0, 0x0) 03:14:46 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x100000000000000, 0x0, 0x0) 03:14:46 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x69, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:46 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x200000000000000, 0x0, 0x0) 03:14:46 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x6a, 0xfffffdef, 0x0, 0x0, 0x0) [ 1266.843154][ T3758] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1266.877897][ T2336] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1267.083071][ T2336] usb 4-1: device descriptor read/64, error 18 [ 1267.173244][ T3682] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1267.213154][ T3758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.353190][ T2336] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1267.383259][ T3758] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1267.398923][ T3758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.407032][ T3758] usb 1-1: Product: syz [ 1267.411231][ T3758] usb 1-1: Manufacturer: syz [ 1267.420673][ T3758] usb 1-1: SerialNumber: syz [ 1267.543190][ T2336] usb 4-1: device descriptor read/64, error 18 [ 1267.593224][ T3682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.608827][ T3682] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1267.618955][ T3682] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1267.633802][ T3682] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1267.643828][ T3682] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1267.663991][ T6864] UDC core: couldn't find an available UDC or it's busy: -16 [ 1267.671573][ T2336] usb usb4-port1: attempt power cycle [ 1267.671731][ T6864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1267.843236][ T3682] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1267.852460][ T3682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.860616][ T3682] usb 3-1: Product: syz [ 1267.864940][ T3682] usb 3-1: Manufacturer: syz [ 1267.869625][ T3682] usb 3-1: SerialNumber: syz [ 1268.083077][ T2336] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1268.173182][ T2336] usb 4-1: Invalid ep0 maxpacket: 244 [ 1268.244127][ T6886] UDC core: couldn't find an available UDC or it's busy: -16 [ 1268.251812][ T6886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1268.323088][ T2336] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1268.334115][ T6880] FAULT_INJECTION: forcing a failure. [ 1268.334115][ T6880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.347368][ T6880] CPU: 0 PID: 6880 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1268.357802][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.367957][ T6880] Call Trace: [ 1268.371235][ T6880] [ 1268.374171][ T6880] dump_stack_lvl+0xcd/0x134 [ 1268.378765][ T6880] should_fail.cold+0x5/0xa [ 1268.383279][ T6880] _copy_from_user+0x2c/0x180 [ 1268.387960][ T6880] memdup_user+0x65/0xd0 [ 1268.392198][ T6880] raw_ioctl+0x1150/0x2690 [ 1268.396607][ T6880] ? __fget_files+0x28c/0x470 [ 1268.401284][ T6880] ? raw_open+0x4c0/0x4c0 [ 1268.405719][ T6880] ? security_file_ioctl+0x5c/0xb0 [ 1268.410830][ T6880] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1268.417121][ T6880] ? raw_open+0x4c0/0x4c0 [ 1268.421460][ T6880] __x64_sys_ioctl+0x193/0x200 [ 1268.426230][ T6880] do_syscall_64+0x35/0xb0 [ 1268.430651][ T6880] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1268.436564][ T6880] RIP: 0033:0x7fd05c028e07 [ 1268.440983][ T6880] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1268.460621][ T6880] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.469059][ T6880] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1268.477030][ T6880] RDX: 00007fd05c67046c RSI: 0000000040095505 RDI: 0000000000000003 [ 1268.484998][ T6880] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1268.493114][ T6880] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd05c67046e [ 1268.501644][ T6880] R13: 00007fd05c67046c R14: 0000000000000000 R15: 0000000000000000 [ 1268.509632][ T6880] [ 1268.513794][ T3758] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1268.527035][ T3758] cdc_ncm 1-1:1.0: bind() failure [ 1268.537065][ T3758] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1268.544289][ T3758] cdc_ncm 1-1:1.1: bind() failure [ 1268.563141][ T2336] usb 4-1: Invalid ep0 maxpacket: 244 [ 1268.568852][ T2336] usb usb4-port1: unable to enumerate USB device [ 1268.793169][ T3682] cdc_ncm 3-1:1.0: bind() failure [ 1268.813302][ T3682] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1268.822892][ T6887] UDC core: couldn't find an available UDC or it's busy: -16 [ 1268.830594][ T6887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1268.845342][ T3682] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1268.883135][ T3682] usbtest: probe of 3-1:1.1 failed with error -71 [ 1268.894673][ T3682] usb 3-1: USB disconnect, device number 25 03:14:49 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xcf, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x2, 0x1, 0x86, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6853319de35e"}, {0x5, 0x24, 0x0, 0x51}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x26}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0x7ff, [0x5, 0x6, 0x1, 0xff, 0x100, 0x101]}, @mdlm_detail={0x49, 0x24, 0x13, 0x5, "a93c5e578483e04fc6a82078753be0afa951b30baa9ee656fbc3cacc083327863f8ea400688a8e64549b2343b2096ef079e1f9e330d1f5768c84e22e6ef8d8ac54efb5e8c9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xfc, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb0, 0x1, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x3, 0xd2}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6a, 0xf7, 0x9f, 0x8, 0x7f}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7, 0x8, 0x7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xcd6bd7dc6693faca, 0x8, 0xff, 0x71}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x425}}, {0xc, &(0x7f00000001c0)=@string={0xc, 0x3, "839400c6fe2089679f56"}}, {0x89, &(0x7f00000003c0)=@string={0x89, 0x3, "91b87fa4da191c2de2253b5b568639f495a37d98cefc645d507e7cb467133429ef1d6802134c6be6edfd5727fc876c546564771a00e8299a8d73fe4d233a19814bbd2562432001a6cb7748585273054cbf3a37e387c194f760cd79f723188d5d0124452f68ab4c39bd428285a38a1e60eef2ab011aba9a649d867e83f0c0a3894375d3233bb605"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x991, &(0x7f0000000f00)={{0x12, 0x1, 0x110, 0x69, 0xb7, 0x53, 0x10, 0x12d1, 0x1401, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97f, 0x2, 0x3, 0x5c, 0x80, 0xff, [{{0x9, 0x4, 0x3d, 0x7, 0x8, 0x3, 0xe0, 0xb6, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x80}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x6, 0x4, [0x3, 0x5, 0x4, 0x1], 0x5}]}], [{{0x9, 0x5, 0x1, 0x0, 0x11ad87686d7e6bb2, 0x0, 0x80, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x81, 0xb4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x9a, 0xf801}]}}, {{0x9, 0x5, 0x7, 0x5, 0x10, 0x8, 0x0, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x400}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x2, 0x8, 0x0, [@generic={0xea, 0x0, "accf1b13ecc6832f4145a36d69e851b8a5c34aa84266c860fcc65a41149bd0c004564c65f9ea313d870620345195ffcee2790c2af2ebb386827656288272823eb21b7771a267c51f6f08685aeee97e1a0b1cf049d71e5c7e8917c3bf462c7a65f68ad62c0155cd42e8fcc874ba2213c1a44e2c418b6a68a75e5db8169537770bf09e8c2caba6cfdb685d874e55c4dfdedf58b14aac5a3354651aa17eb86b7e9897f8590c666d472f4ef8fa17d1da239996563d31a51c45780710f076c494d17b26a51dc954061f0142a8f21423b4667cf4bf2737416ce7614efab7748594f75951cc91bd95e6d636"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x3, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x0, 0x80, 0x9, [@generic={0xf5, 0x7, "b49147e614eda5a85eced49823f2c5780af8522a5671e729240f4cc20a49415d382a2704aa3b0e5469dcb51b9d344d364295a56e8ff77285590fb6f441365b18297e6050983f17d28334a1ec3654f23088b6c4aa7bbceb2a2dcb6ccb25522ecfcd25159f3f65ae13aa36ba90235c60b12b31aa341e6203be335e754ef86acc97494b7b73aed32cca330a1f391180028bed60953e21037f574a661b15cf5bfbf695bf9b4cf9bae404dc0b35a3d0ba7fecb35e7329f5a5f6231819a6b47e1cb225e3c493cecdb39c7dadc234afe8e0f6958291869453dd6cf7c706954ff1153aa253959cf95d22ee10e74258554bc2ff23ba0cd4"}, @generic={0x1b, 0x22, "2ec6c44d00c791fa3c0796c54f6525fc9542341a08e53a3e16"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x80, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x80, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1a, 0x100}]}}]}}, {{0x9, 0x4, 0x9d, 0x2, 0xf, 0x9c, 0x50, 0x9a, 0x2, [@generic={0xe, 0x23, "8b9fcc36b64d1366752e5694"}], [{{0x9, 0x5, 0x5, 0x8, 0x200, 0x1, 0x2, 0x15, [@generic={0x27, 0x31, "a1fd03abfcfe8645bc8a1fd9de28559007659acf99ade7688b1bb7d5e71e6f40473716e1c2"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x52, 0x7, 0xdd, [@generic={0x59, 0xe, "4c22468915bddd2056d520c86a6324f26bf8b392908c15e970ae05081753e9cef167d073bebb6d27e1ea8c451c2828a9c97b6025546d60e24d456a6db23f4d6c3ac69c1a094dd402cd185282efb819d36e60cdd142d185"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3f}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0xd0, 0x2, 0x80, [@generic={0x18, 0x21, "89e51ce18b8bce95fa5319cb88059c7d8afe99b78bb9"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x1, 0x7, [@generic={0xb2, 0x11, "3ce26940fa3e24ec025c308e35f9e1226f1f94e01cc13ffbc623c93f351d83a0e46646a59b2297aa579183b5ce079d44526ab19b0832af12c42ad4d6b3e9cdfcb27300e4d6d03d38812b69537a1ab4f80fd952a57d48b6bbb3b64a99e99c921a7dbff7ecd6fdb72c1e74864c6763e8805294814d243f0baf7a2e39a79ef8506d44dadecd5d867657f8c7d2117118421606d0e13d25e68bad2bae71cbb4ee89d7107e47774451458f718803698f89d51f"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xce, 0x24, 0x6, [@generic={0xd0, 0xf, "016157fab8a8bdf515a0815fa461b1e0721ad80c5a30b2e52823749b7fce8bd3748aecfa4c1f3aa976336af4bd4a802c13f7166d080c31f4710068d15ee4ca9fe743c16aa13a4a5e288720321633fe84aaecf8cfd7c652c78c8b9f88e39f08f3334df50861a0e5d4ac156f27d35cf9a5581b8c52283a67d7a3d350c5163ae2a5cfafe4c07014bd8feed194783e26e48ad54809b4650564a224cb0fafbe1cf819d5842c670415560da102be5b8e21bd3ecca7221b601a7fcdff6cb5a5f26747380b816af4d4a81d9a1e3db8c35a3c"}, @generic={0x9d, 0x22, "ac21b84d2cf52a4a79161a3c0259c7f18a6941bc2f91a5def956db917be3b3df71816b42616341cf5662946ff6fef1f75c48cc18f3c5d84c6e08cac2313790c265a89be3f899caffc7a1b3586155ea2b2fbb484f4cf70b24a2e4eb238cf33548c80b5c0692e72334042b08a9d4bd6473fdbada8ee1f45d2c7ac4f2010e4a703eb8d45cc13facec97462aee906b6aaeb6e0753818b632fab638140c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x4, 0x9, 0x20, [@generic={0x81, 0x30, "dd3254b855119bd3ad5ba9856f3b8eaf4f879d0ef9b64fc47dc5b93d6b4036c86f37c468d2ccd6940f77eeb9f13fa707f23058b84e2bd509200d1c3f47e5d310711c5fd94ed48852adf6ce7d7151e6503e1220d8402cd3795d8e33fa69aebd507d07fd3ae36ff6d62f9d2f679ab56f49403a55c879331472d45a126d686450"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x0, 0x4, 0x7, [@generic={0x56, 0xc, "977d7912ddaaf7918120826a309f1a9a021feb46932633468469edc75cb9e06ed3dc1af5f69c89717c254afcc7f32e33cd75dd21e30e9e78b944c69dc69a609c0898adb435018689ad9ff88fd5c2fff22c76e329"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x80, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x9, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x7ff}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0x3, 0x20, [@generic={0xba, 0x21, "352fd907da1c931eefd25824dc4173a1472d3ee4fbddbb66357cb11f112803bf43461911aca36bee237d3e3f7bee5d8853ad0ab7bca34d6d129b651d10109c0644804f88637d95daf360ecb95416293aecd0e0ce420a913c3e57818c8a59d6cfb06d77ece2d53f2c12a51b87f1c91ce458e5a4bf59a36b75d02cecc51e8a0a4f3308cb4df9c96545c10db50c00d639365e35372f8f3e8aa1055721ca24b7fded3e7f2230494ed5cde5dcd2b91c5617874250cb39e99d9ac5"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x8, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0xd, 0x12, 0x8, 0xfc, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x81, 0x3, [@generic={0x49, 0x21, "e276ebfd3e44940f92d71f9eb4768f5a951851a9854800fd6d914ef0f297cfa040b6bcbb11892f7f7b38619a5e6ac34eb7eb258bf73a5d8be0b88d2a3b7a9cf2803f4ece33896a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x6, 0xf0, 0x1, [@generic={0x43, 0x6, "af34f685ccc0724a3abd12e9c50dd34b0e67d14a82e6f80d83f729e7225e93700025cdf242b0a964509e351af0ac07f62777a4f7bda601778958ebbba0f7221c4c"}, @generic={0xd7, 0x31, "74924dc5da049bbc2a5ebd28e2192e7c4ace86051d09b704f571f57dfcc8e24b07aa0707f9ec89c5a4c396f87e5c6e21a8bd672292e777a493c8a956cd48e91c69b3a233915b1764e4c2cf7c2731e719a5f452486760bc0e451361cd407695dad097687051067867cbf35a8a38507f862637671126705191370ca87c43aba5df3950c8aa6dd9c0b44769227ff2055837275d586d9c7cbfd1ab8a03006f151a422e1f43be8516a996e530226ede493df9076d8da96ecf2635e0424c45060fed1abfb00a9437369db694d8b6df702be81b66aad70850"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x23, 0x1, 0x16, [@generic={0x68, 0x0, "d5400c7ccf5c662aa5d7f60fa95f9c13740f157ad6c03177a02ee472894341e70b781e2c18afd694adbda5caebb293745cf0de048fbd7ff82e7e81e0ede90a5abeb81b964d4e76d3133a1544967398a72100a6605b33d2c6389b5dce4382771b9ccb64cefe23"}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x0, 0x1, 0x1, 0x10, 0x2}, 0x53, &(0x7f0000000580)={0x5, 0xf, 0x53, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xdc, "a3776bfded7bba0b03b0d37692f92b9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x0, 0xf, 0x61, [0xc00f]}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x0, 0xf000, 0x8478, [0x3f0f, 0xff0000, 0xc0, 0x6000, 0xf]}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x0, 0x6, 0x53, {0x53, 0x22, "f299e8da867708648d021864b9931fa63931730a5c3290deadbe200111e47ed0c5208c13a0f88a6de035447fe5924a49f1546fd55cbbe4abae0ffb0a3ea6e75844a5bb5b9535306cb3cd445d92c2b426f5"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000740)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0xa5, 0x2, 0x3, 0xff00, 0x7ff, [0xc030, 0x3f00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x3, 0x187}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x0, 0x2, "4a44d10d", "f2a4f970"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x1, 0x2, 0x7f, 0x4, 0x3}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x20, 0xf, 0x65, "b0a31ae4016d7c083847e6acfdeef2d890847badaeff624324e088f085d1de096a1906912df222cd367be8a4b048654e7185293bcc55ecad63acfe4220de9f12159f486e771f0affd90fce64675073243c3c821f3bc6718660f3df102af908432cfd172e63"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x140, 0x80, [0x8800]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "5eb7"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000ac0)={0x40, 0x13, 0x6}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, '2{'}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x53}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:14:49 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x6b, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:49 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xffffffe4, 0x0, 0x0) 03:14:49 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x700000000000000, 0x0, 0x0) [ 1269.543180][ T6898] UDC core: couldn't find an available UDC or it's busy: -16 [ 1269.556566][ T6898] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1269.576303][ T6899] UDC core: couldn't find an available UDC or it's busy: -16 [ 1269.611559][ T6899] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:14:49 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x5, 0x60c, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0xe5, 0x90, 0x29, 0x40, 0x79b, 0x4a, 0x63ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5fa, 0x2, 0x20, 0x0, 0x80, 0x40, [{{0x9, 0x4, 0xe2, 0x0, 0x7, 0x5f, 0x4f, 0x51, 0x3, [@generic={0x8f, 0x7, "d137f6c8292b2a39f7cb44aba250d00b703188b2459e4e34e5c2be2daadff0bd5252dbf12c6d6a3b577a788fe9a57a852cd329c91e80491b90534a17946bb5e991faa7d18a36caf496414fa9ab3d677f5d3f86ebcd2e648d8db438b56ad46291b7b69ecd9d4c03d8a55173e287f8313dac69acec6f77bc6a31725936aa00ca94f739622e177d3231b3ac02f2dc"}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x76}, [@extension_unit={0xb, 0x24, 0x8, 0x6, 0x2, 0x6, "3edbfa7a"}]}], [{{0x9, 0x5, 0xa, 0x7, 0x0, 0x1, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @generic={0x7d, 0x24, "a4670a932508a677304d9efb388e752898274cb3805223c987dab368803940478e878ec99758a8aec7abec58da69fa02e5205baa798f355529379cf478c9137d69a05931b3c1831f880fec2980d6c3b6dc303fd2489472c91724769f5cf4ed4978d3da97b4376e8a507e068a36708f4d2c3d34976a1932b4ebb0ac"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x5, 0x2, [@generic={0xf2, 0x1a, "2c8b8b82b12ee65e6ef5a83629b72f5ae79d99aee94a1f53e0bb70ed5a8b792b8a4b314d359b0bdddaf6713c1a0d1361aff85ce291751db8057bf6c7c2cbcdfc6a9a7bd5e34a99d044d7839570c255a4ffcf428cdaeedd3c1bbabee43dae407c71c01532dac60f47fb374e4e54479c6687375ae0d5484b9d88d4f0cd6c49325b4afb3bad917e8de5d6c51a85ef51af457991ab9cfada1a74c39a93c37b92250958be9ba532ef6fde82d880de570c75a04faf4b9c3497f2b02bdf8816478f8488005a76346df19a4f1a3fc9871e26404418863a04077afa8207b8cfd4bfc432eefb62414a0aef063d8b9d3d1dd1a191d4"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0xea00}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x7, 0x0, 0xe8, [@generic={0x50, 0x9, "48748ac766e8f8843e86bbe5a35cac256d571b339374f9f47f7afe5c77f877a7a2a81b0531057c263cac77fa8de587bd197dbe01b85fe9a55e78cd02044871b5c18a60a9fc26dc743b14e602032a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xff, 0x81, 0xf8, [@generic={0x9, 0x8, "18d428091628ab"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x8, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfff7}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7f, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}]}}, {{0x9, 0x4, 0xc4, 0x9, 0xa, 0xc6, 0xb0, 0x65, 0x39, [@uac_control={{0xa, 0x24, 0x1, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x3, 0x4, 0xee}]}], [{{0x9, 0x5, 0x7, 0x10, 0x50cab695bbdd59b9, 0x1, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xea, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x4, 0x80, [@generic={0xc3, 0xc, "2e3e188bdaa313d220675a7ef22760b94cd9bdcc43e8816da59d5cfcae3c4b341a24660f12aa7bb3e2bf5d10db929a5113f0a5d9646c7940436a5a0b2689d6de1abddaa8c318419db7c2ae245f74b20b9015204dbcb64a80ee891756b5f0dcbc47c02a283ab64c25bee561891f4296f48a49af56c9a11763adfffbd1cd759eded9e96be21a25f90119adb1812c52823c53c858b384e969619bd612028f13c0527fbaf1327d02a791eddf451b2c70559629ceac2cf11d63e7b9dd9a737591cfaf9f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x5, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x5, 0x0, 0x81, [@generic={0xc, 0x21, "f1b53024b85273df9f93"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x40, 0xfe, 0x80, [@generic={0x53, 0x10, "866f5cf36e2491ef42e4453396986d4ac52efbe44f65ce33e6f452cb6dbab4765820a37425b9520272fcf0f082ce3a2e349d834d345bedc7e75e69e4ef549d89fdc80eaefdde8fe3a6020745340333b4c0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xe8, 0x9, 0x2, [@generic={0x44, 0xa, "f6770d57f61949e34483cf8753411a3030a662b4cb91dfceb309a27986a2f1fbc0f78b47df23e93108496ecac86097264b384bcfa0e8abd2d0820009e28be15158a6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x1f, 0x1, [@generic={0xab, 0x22, "7c4a760dd69c76523449a257adc99331ca1dcb499d5ddf7d8857f8cead00c386f48414a8d938c190a38d49094dd321000462845427716aac0f272eb4043d0aa6c2dc372f837ff29af506fc47209d73d469fb360f77cd43a84c605c69c211a48840c30d241276aaa18f2281268c0b603821288361096ea403f4bfbd90b5f2bdcb1653f758c75736b6caf2d32d8a62a0b16d4a054d8cbdbcc429d3430fb2a6a1841fe3e7f3bcff46add8"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0xd2, 0x3, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x9}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x40, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0xe7, 0x9}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x1, 0x2, 0x4, [@generic={0x20, 0xb, "85218d3f0e246fa52fa5fa0a3d61bbf59833b6712c510194ee9a1c2517a7"}, @generic={0x4b, 0x21, "3291d0941596a8f2f8b18849275555fdffb8ebc7faa25c26fb3e2a08965f8de101bbc155e270bea08e30b8b519551149e0db3f086d1842e183e6a517bd8187ee8130bfa374ad009873"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x8, 0x8, 0x8, 0x53}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5e, "e782edad47f12e1cbf12879630917be1"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "7303c8481e772c272f3f72490c552189"}]}, 0x1, [{0x4d, &(0x7f0000000240)=@string={0x4d, 0x3, "13e41adebd5984f2ab57af730505c651092e6542aadd5237e39937edb211d30b0740b718f29d48c2129559cc43dc656a2f240dab0a4ef46b2719b554cfc3e4edd7b7a0704c7143a89a4038"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:14:49 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1000000000000, 0x0, 0x0) 03:14:49 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x800000000000000, 0x0, 0x0) 03:14:49 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 14) 03:14:49 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x6c, 0xfffffdef, 0x0, 0x0, 0x0) [ 1269.654877][ T2336] usb 1-1: USB disconnect, device number 92 03:14:49 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xc00000000000000, 0x0, 0x0) 03:14:49 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x40000000000000, 0x0, 0x0) 03:14:49 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x6d, 0xfffffdef, 0x0, 0x0, 0x0) [ 1269.943170][ T3682] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1269.953185][T30378] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1270.133106][ T2336] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1270.323369][ T3682] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.383338][T30378] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.394467][T30378] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1270.404374][T30378] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1270.414386][T30378] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1270.424177][T30378] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1270.493183][ T2336] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.543460][ T3682] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.552783][ T3682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.561581][ T3682] usb 4-1: Product: syz [ 1270.566142][ T3682] usb 4-1: Manufacturer: syz [ 1270.570760][ T3682] usb 4-1: SerialNumber: syz [ 1270.633440][T30378] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.645925][T30378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.655845][T30378] usb 3-1: Product: syz [ 1270.660080][T30378] usb 3-1: Manufacturer: syz [ 1270.663813][ T2336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1270.665710][T30378] usb 3-1: SerialNumber: syz [ 1270.682291][ T2336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.691281][ T2336] usb 1-1: Product: syz [ 1270.695935][ T2336] usb 1-1: Manufacturer: syz [ 1270.700885][ T2336] usb 1-1: SerialNumber: syz [ 1270.828101][ T6896] UDC core: couldn't find an available UDC or it's busy: -16 [ 1270.835667][ T6896] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1270.945033][ T6924] UDC core: couldn't find an available UDC or it's busy: -16 [ 1270.952494][ T6924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1271.117112][ T6917] FAULT_INJECTION: forcing a failure. [ 1271.117112][ T6917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.130492][ T6917] CPU: 1 PID: 6917 Comm: syz-executor.2 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1271.140941][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.151012][ T6917] Call Trace: [ 1271.154331][ T6917] [ 1271.157274][ T6917] dump_stack_lvl+0xcd/0x134 [ 1271.161887][ T6917] should_fail.cold+0x5/0xa [ 1271.166407][ T6917] _copy_from_user+0x2c/0x180 [ 1271.171093][ T6917] memdup_user+0x65/0xd0 [ 1271.175354][ T6917] raw_ioctl+0x1150/0x2690 [ 1271.179789][ T6917] ? __fget_files+0x28c/0x470 [ 1271.184492][ T6917] ? raw_open+0x4c0/0x4c0 [ 1271.188827][ T6917] ? security_file_ioctl+0x5c/0xb0 [ 1271.193944][ T6917] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1271.200189][ T6917] ? raw_open+0x4c0/0x4c0 [ 1271.204518][ T6917] __x64_sys_ioctl+0x193/0x200 [ 1271.209300][ T6917] do_syscall_64+0x35/0xb0 [ 1271.213717][ T6917] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1271.219608][ T6917] RIP: 0033:0x7fd05c028e07 [ 1271.224022][ T6917] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1271.243635][ T6917] RSP: 002b:00007fd05a99c078 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.252106][ T6917] RAX: ffffffffffffffda RBX: 00007fd05c670020 RCX: 00007fd05c028e07 [ 1271.260075][ T6917] RDX: 00007fd05c67047c RSI: 0000000040095505 RDI: 0000000000000003 [ 1271.268052][ T6917] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000001 [ 1271.276015][ T6917] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd05c67047e [ 1271.283983][ T6917] R13: 00007fd05c67047c R14: 0000000000000001 R15: 00000000ffffffff [ 1271.291968][ T6917] [ 1271.525305][ T6934] UDC core: couldn't find an available UDC or it's busy: -16 [ 1271.532794][ T6934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1271.573322][T30378] cdc_ncm 3-1:1.0: bind() failure [ 1271.603225][T30378] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1271.625844][T30378] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1271.653493][T30378] usbtest: probe of 3-1:1.1 failed with error -71 [ 1271.670500][T30378] usb 3-1: USB disconnect, device number 26 [ 1271.956323][ T6935] UDC core: couldn't find an available UDC or it's busy: -16 [ 1271.964172][ T6935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1271.983957][ T6934] UDC core: couldn't find an available UDC or it's busy: -16 [ 1271.991585][ T6934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1272.223243][ T3682] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1272.229719][ T3682] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1272.237536][ T3682] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1272.443222][ T3682] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 1272.684660][ T3682] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1273.273290][ T2336] cdc_ncm 1-1:1.0: failed to get mac address [ 1273.293248][ T2336] cdc_ncm 1-1:1.0: bind() failure [ 1273.313111][ T2336] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1273.333138][ T2336] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1273.354027][ T2336] usbtest: probe of 1-1:1.1 failed with error -71 [ 1273.359323][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1273.376348][ T2336] usb 1-1: USB disconnect, device number 93 03:14:53 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0xcf, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x2, 0x1, 0x86, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6853319de35e"}, {0x5, 0x24, 0x0, 0x51}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x26}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0x7ff, [0x5, 0x6, 0x1, 0xff, 0x100, 0x101]}, @mdlm_detail={0x49, 0x24, 0x13, 0x5, "a93c5e578483e04fc6a82078753be0afa951b30baa9ee656fbc3cacc083327863f8ea400688a8e64549b2343b2096ef079e1f9e330d1f5768c84e22e6ef8d8ac54efb5e8c9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xfc, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb0, 0x1, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x3, 0xd2}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6a, 0xf7, 0x9f, 0x8, 0x7f}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7, 0x8, 0x7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xcd6bd7dc6693faca, 0x8, 0xff, 0x71}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x425}}, {0xc, &(0x7f00000001c0)=@string={0xc, 0x3, "839400c6fe2089679f56"}}, {0x89, &(0x7f00000003c0)=@string={0x89, 0x3, "91b87fa4da191c2de2253b5b568639f495a37d98cefc645d507e7cb467133429ef1d6802134c6be6edfd5727fc876c546564771a00e8299a8d73fe4d233a19814bbd2562432001a6cb7748585273054cbf3a37e387c194f760cd79f723188d5d0124452f68ab4c39bd428285a38a1e60eef2ab011aba9a649d867e83f0c0a3894375d3233bb605"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x991, &(0x7f0000000f00)={{0x12, 0x1, 0x110, 0x69, 0xb7, 0x53, 0x10, 0x12d1, 0x1401, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97f, 0x2, 0x3, 0x5c, 0x80, 0xff, [{{0x9, 0x4, 0x3d, 0x7, 0x8, 0x3, 0xe0, 0xb6, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x80}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x6, 0x4, [0x3, 0x5, 0x4, 0x1], 0x5}]}], [{{0x9, 0x5, 0x1, 0x0, 0x11ad87686d7e6bb2, 0x0, 0x80, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x81, 0xb4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x9a, 0xf801}]}}, {{0x9, 0x5, 0x7, 0x5, 0x10, 0x8, 0x0, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x400}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x2, 0x8, 0x0, [@generic={0xea, 0x0, "accf1b13ecc6832f4145a36d69e851b8a5c34aa84266c860fcc65a41149bd0c004564c65f9ea313d870620345195ffcee2790c2af2ebb386827656288272823eb21b7771a267c51f6f08685aeee97e1a0b1cf049d71e5c7e8917c3bf462c7a65f68ad62c0155cd42e8fcc874ba2213c1a44e2c418b6a68a75e5db8169537770bf09e8c2caba6cfdb685d874e55c4dfdedf58b14aac5a3354651aa17eb86b7e9897f8590c666d472f4ef8fa17d1da239996563d31a51c45780710f076c494d17b26a51dc954061f0142a8f21423b4667cf4bf2737416ce7614efab7748594f75951cc91bd95e6d636"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x3, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x0, 0x80, 0x9, [@generic={0xf5, 0x7, "b49147e614eda5a85eced49823f2c5780af8522a5671e729240f4cc20a49415d382a2704aa3b0e5469dcb51b9d344d364295a56e8ff77285590fb6f441365b18297e6050983f17d28334a1ec3654f23088b6c4aa7bbceb2a2dcb6ccb25522ecfcd25159f3f65ae13aa36ba90235c60b12b31aa341e6203be335e754ef86acc97494b7b73aed32cca330a1f391180028bed60953e21037f574a661b15cf5bfbf695bf9b4cf9bae404dc0b35a3d0ba7fecb35e7329f5a5f6231819a6b47e1cb225e3c493cecdb39c7dadc234afe8e0f6958291869453dd6cf7c706954ff1153aa253959cf95d22ee10e74258554bc2ff23ba0cd4"}, @generic={0x1b, 0x22, "2ec6c44d00c791fa3c0796c54f6525fc9542341a08e53a3e16"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x80, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x80, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1a, 0x100}]}}]}}, {{0x9, 0x4, 0x9d, 0x2, 0xf, 0x9c, 0x50, 0x9a, 0x2, [@generic={0xe, 0x23, "8b9fcc36b64d1366752e5694"}], [{{0x9, 0x5, 0x5, 0x8, 0x200, 0x1, 0x2, 0x15, [@generic={0x27, 0x31, "a1fd03abfcfe8645bc8a1fd9de28559007659acf99ade7688b1bb7d5e71e6f40473716e1c2"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x52, 0x7, 0xdd, [@generic={0x59, 0xe, "4c22468915bddd2056d520c86a6324f26bf8b392908c15e970ae05081753e9cef167d073bebb6d27e1ea8c451c2828a9c97b6025546d60e24d456a6db23f4d6c3ac69c1a094dd402cd185282efb819d36e60cdd142d185"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3f}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0xd0, 0x2, 0x80, [@generic={0x18, 0x21, "89e51ce18b8bce95fa5319cb88059c7d8afe99b78bb9"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x1, 0x7, [@generic={0xb2, 0x11, "3ce26940fa3e24ec025c308e35f9e1226f1f94e01cc13ffbc623c93f351d83a0e46646a59b2297aa579183b5ce079d44526ab19b0832af12c42ad4d6b3e9cdfcb27300e4d6d03d38812b69537a1ab4f80fd952a57d48b6bbb3b64a99e99c921a7dbff7ecd6fdb72c1e74864c6763e8805294814d243f0baf7a2e39a79ef8506d44dadecd5d867657f8c7d2117118421606d0e13d25e68bad2bae71cbb4ee89d7107e47774451458f718803698f89d51f"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xce, 0x24, 0x6, [@generic={0xd0, 0xf, "016157fab8a8bdf515a0815fa461b1e0721ad80c5a30b2e52823749b7fce8bd3748aecfa4c1f3aa976336af4bd4a802c13f7166d080c31f4710068d15ee4ca9fe743c16aa13a4a5e288720321633fe84aaecf8cfd7c652c78c8b9f88e39f08f3334df50861a0e5d4ac156f27d35cf9a5581b8c52283a67d7a3d350c5163ae2a5cfafe4c07014bd8feed194783e26e48ad54809b4650564a224cb0fafbe1cf819d5842c670415560da102be5b8e21bd3ecca7221b601a7fcdff6cb5a5f26747380b816af4d4a81d9a1e3db8c35a3c"}, @generic={0x9d, 0x22, "ac21b84d2cf52a4a79161a3c0259c7f18a6941bc2f91a5def956db917be3b3df71816b42616341cf5662946ff6fef1f75c48cc18f3c5d84c6e08cac2313790c265a89be3f899caffc7a1b3586155ea2b2fbb484f4cf70b24a2e4eb238cf33548c80b5c0692e72334042b08a9d4bd6473fdbada8ee1f45d2c7ac4f2010e4a703eb8d45cc13facec97462aee906b6aaeb6e0753818b632fab638140c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x4, 0x9, 0x20, [@generic={0x81, 0x30, "dd3254b855119bd3ad5ba9856f3b8eaf4f879d0ef9b64fc47dc5b93d6b4036c86f37c468d2ccd6940f77eeb9f13fa707f23058b84e2bd509200d1c3f47e5d310711c5fd94ed48852adf6ce7d7151e6503e1220d8402cd3795d8e33fa69aebd507d07fd3ae36ff6d62f9d2f679ab56f49403a55c879331472d45a126d686450"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x0, 0x4, 0x7, [@generic={0x56, 0xc, "977d7912ddaaf7918120826a309f1a9a021feb46932633468469edc75cb9e06ed3dc1af5f69c89717c254afcc7f32e33cd75dd21e30e9e78b944c69dc69a609c0898adb435018689ad9ff88fd5c2fff22c76e329"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x80, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x9, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x7ff}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0x3, 0x20, [@generic={0xba, 0x21, "352fd907da1c931eefd25824dc4173a1472d3ee4fbddbb66357cb11f112803bf43461911aca36bee237d3e3f7bee5d8853ad0ab7bca34d6d129b651d10109c0644804f88637d95daf360ecb95416293aecd0e0ce420a913c3e57818c8a59d6cfb06d77ece2d53f2c12a51b87f1c91ce458e5a4bf59a36b75d02cecc51e8a0a4f3308cb4df9c96545c10db50c00d639365e35372f8f3e8aa1055721ca24b7fded3e7f2230494ed5cde5dcd2b91c5617874250cb39e99d9ac5"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x8, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0xd, 0x12, 0x8, 0xfc, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x81, 0x3, [@generic={0x49, 0x21, "e276ebfd3e44940f92d71f9eb4768f5a951851a9854800fd6d914ef0f297cfa040b6bcbb11892f7f7b38619a5e6ac34eb7eb258bf73a5d8be0b88d2a3b7a9cf2803f4ece33896a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x6, 0xf0, 0x1, [@generic={0x43, 0x6, "af34f685ccc0724a3abd12e9c50dd34b0e67d14a82e6f80d83f729e7225e93700025cdf242b0a964509e351af0ac07f62777a4f7bda601778958ebbba0f7221c4c"}, @generic={0xd7, 0x31, "74924dc5da049bbc2a5ebd28e2192e7c4ace86051d09b704f571f57dfcc8e24b07aa0707f9ec89c5a4c396f87e5c6e21a8bd672292e777a493c8a956cd48e91c69b3a233915b1764e4c2cf7c2731e719a5f452486760bc0e451361cd407695dad097687051067867cbf35a8a38507f862637671126705191370ca87c43aba5df3950c8aa6dd9c0b44769227ff2055837275d586d9c7cbfd1ab8a03006f151a422e1f43be8516a996e530226ede493df9076d8da96ecf2635e0424c45060fed1abfb00a9437369db694d8b6df702be81b66aad70850"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x23, 0x1, 0x16, [@generic={0x68, 0x0, "d5400c7ccf5c662aa5d7f60fa95f9c13740f157ad6c03177a02ee472894341e70b781e2c18afd694adbda5caebb293745cf0de048fbd7ff82e7e81e0ede90a5abeb81b964d4e76d3133a1544967398a72100a6605b33d2c6389b5dce4382771b9ccb64cefe23"}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x0, 0x1, 0x1, 0x10, 0x2}, 0x53, &(0x7f0000000580)={0x5, 0xf, 0x53, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xdc, "a3776bfded7bba0b03b0d37692f92b9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x0, 0xf, 0x61, [0xc00f]}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x0, 0xf000, 0x8478, [0x3f0f, 0xff0000, 0xc0, 0x6000, 0xf]}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4}}]}) syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x0, 0x6, 0x53, {0x53, 0x22, "f299e8da867708648d021864b9931fa63931730a5c3290deadbe200111e47ed0c5208c13a0f88a6de035447fe5924a49f1546fd55cbbe4abae0ffb0a3ea6e75844a5bb5b9535306cb3cd445d92c2b426f5"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000740)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0xa5, 0x2, 0x3, 0xff00, 0x7ff, [0xc030, 0x3f00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x3, 0x187}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x0, 0x2, "4a44d10d", "f2a4f970"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x1, 0x2, 0x7f, 0x4, 0x3}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x20, 0xf, 0x65, "b0a31ae4016d7c083847e6acfdeef2d890847badaeff624324e088f085d1de096a1906912df222cd367be8a4b048654e7185293bcc55ecad63acfe4220de9f12159f486e771f0affd90fce64675073243c3c821f3bc6718660f3df102af908432cfd172e63"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x140, 0x80, [0x8800]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "5eb7"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000ac0)={0x40, 0x13, 0x6}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, '2{'}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x53}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x9}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) (async) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0xcf, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x2, 0x1, 0x86, 0x0, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "6853319de35e"}, {0x5, 0x24, 0x0, 0x51}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x26}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0x7ff, [0x5, 0x6, 0x1, 0xff, 0x100, 0x101]}, @mdlm_detail={0x49, 0x24, 0x13, 0x5, "a93c5e578483e04fc6a82078753be0afa951b30baa9ee656fbc3cacc083327863f8ea400688a8e64549b2343b2096ef079e1f9e330d1f5768c84e22e6ef8d8ac54efb5e8c9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xfc, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xb0, 0x1, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x3, 0xd2}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x6a, 0xf7, 0x9f, 0x8, 0x7f}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7, 0x8, 0x7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xcd6bd7dc6693faca, 0x8, 0xff, 0x71}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x425}}, {0xc, &(0x7f00000001c0)=@string={0xc, 0x3, "839400c6fe2089679f56"}}, {0x89, &(0x7f00000003c0)=@string={0x89, 0x3, "91b87fa4da191c2de2253b5b568639f495a37d98cefc645d507e7cb467133429ef1d6802134c6be6edfd5727fc876c546564771a00e8299a8d73fe4d233a19814bbd2562432001a6cb7748585273054cbf3a37e387c194f760cd79f723188d5d0124452f68ab4c39bd428285a38a1e60eef2ab011aba9a649d867e83f0c0a3894375d3233bb605"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x991, &(0x7f0000000f00)={{0x12, 0x1, 0x110, 0x69, 0xb7, 0x53, 0x10, 0x12d1, 0x1401, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97f, 0x2, 0x3, 0x5c, 0x80, 0xff, [{{0x9, 0x4, 0x3d, 0x7, 0x8, 0x3, 0xe0, 0xb6, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x80}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x6, 0x4, [0x3, 0x5, 0x4, 0x1], 0x5}]}], [{{0x9, 0x5, 0x1, 0x0, 0x11ad87686d7e6bb2, 0x0, 0x80, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x81, 0xb4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x9a, 0xf801}]}}, {{0x9, 0x5, 0x7, 0x5, 0x10, 0x8, 0x0, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x400}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0x2, 0x8, 0x0, [@generic={0xea, 0x0, "accf1b13ecc6832f4145a36d69e851b8a5c34aa84266c860fcc65a41149bd0c004564c65f9ea313d870620345195ffcee2790c2af2ebb386827656288272823eb21b7771a267c51f6f08685aeee97e1a0b1cf049d71e5c7e8917c3bf462c7a65f68ad62c0155cd42e8fcc874ba2213c1a44e2c418b6a68a75e5db8169537770bf09e8c2caba6cfdb685d874e55c4dfdedf58b14aac5a3354651aa17eb86b7e9897f8590c666d472f4ef8fa17d1da239996563d31a51c45780710f076c494d17b26a51dc954061f0142a8f21423b4667cf4bf2737416ce7614efab7748594f75951cc91bd95e6d636"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x3, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x0, 0x80, 0x9, [@generic={0xf5, 0x7, "b49147e614eda5a85eced49823f2c5780af8522a5671e729240f4cc20a49415d382a2704aa3b0e5469dcb51b9d344d364295a56e8ff77285590fb6f441365b18297e6050983f17d28334a1ec3654f23088b6c4aa7bbceb2a2dcb6ccb25522ecfcd25159f3f65ae13aa36ba90235c60b12b31aa341e6203be335e754ef86acc97494b7b73aed32cca330a1f391180028bed60953e21037f574a661b15cf5bfbf695bf9b4cf9bae404dc0b35a3d0ba7fecb35e7329f5a5f6231819a6b47e1cb225e3c493cecdb39c7dadc234afe8e0f6958291869453dd6cf7c706954ff1153aa253959cf95d22ee10e74258554bc2ff23ba0cd4"}, @generic={0x1b, 0x22, "2ec6c44d00c791fa3c0796c54f6525fc9542341a08e53a3e16"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x80, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x80, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1a, 0x100}]}}]}}, {{0x9, 0x4, 0x9d, 0x2, 0xf, 0x9c, 0x50, 0x9a, 0x2, [@generic={0xe, 0x23, "8b9fcc36b64d1366752e5694"}], [{{0x9, 0x5, 0x5, 0x8, 0x200, 0x1, 0x2, 0x15, [@generic={0x27, 0x31, "a1fd03abfcfe8645bc8a1fd9de28559007659acf99ade7688b1bb7d5e71e6f40473716e1c2"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x52, 0x7, 0xdd, [@generic={0x59, 0xe, "4c22468915bddd2056d520c86a6324f26bf8b392908c15e970ae05081753e9cef167d073bebb6d27e1ea8c451c2828a9c97b6025546d60e24d456a6db23f4d6c3ac69c1a094dd402cd185282efb819d36e60cdd142d185"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3f}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0xd0, 0x2, 0x80, [@generic={0x18, 0x21, "89e51ce18b8bce95fa5319cb88059c7d8afe99b78bb9"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x1, 0x7, [@generic={0xb2, 0x11, "3ce26940fa3e24ec025c308e35f9e1226f1f94e01cc13ffbc623c93f351d83a0e46646a59b2297aa579183b5ce079d44526ab19b0832af12c42ad4d6b3e9cdfcb27300e4d6d03d38812b69537a1ab4f80fd952a57d48b6bbb3b64a99e99c921a7dbff7ecd6fdb72c1e74864c6763e8805294814d243f0baf7a2e39a79ef8506d44dadecd5d867657f8c7d2117118421606d0e13d25e68bad2bae71cbb4ee89d7107e47774451458f718803698f89d51f"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xce, 0x24, 0x6, [@generic={0xd0, 0xf, "016157fab8a8bdf515a0815fa461b1e0721ad80c5a30b2e52823749b7fce8bd3748aecfa4c1f3aa976336af4bd4a802c13f7166d080c31f4710068d15ee4ca9fe743c16aa13a4a5e288720321633fe84aaecf8cfd7c652c78c8b9f88e39f08f3334df50861a0e5d4ac156f27d35cf9a5581b8c52283a67d7a3d350c5163ae2a5cfafe4c07014bd8feed194783e26e48ad54809b4650564a224cb0fafbe1cf819d5842c670415560da102be5b8e21bd3ecca7221b601a7fcdff6cb5a5f26747380b816af4d4a81d9a1e3db8c35a3c"}, @generic={0x9d, 0x22, "ac21b84d2cf52a4a79161a3c0259c7f18a6941bc2f91a5def956db917be3b3df71816b42616341cf5662946ff6fef1f75c48cc18f3c5d84c6e08cac2313790c265a89be3f899caffc7a1b3586155ea2b2fbb484f4cf70b24a2e4eb238cf33548c80b5c0692e72334042b08a9d4bd6473fdbada8ee1f45d2c7ac4f2010e4a703eb8d45cc13facec97462aee906b6aaeb6e0753818b632fab638140c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x4, 0x9, 0x20, [@generic={0x81, 0x30, "dd3254b855119bd3ad5ba9856f3b8eaf4f879d0ef9b64fc47dc5b93d6b4036c86f37c468d2ccd6940f77eeb9f13fa707f23058b84e2bd509200d1c3f47e5d310711c5fd94ed48852adf6ce7d7151e6503e1220d8402cd3795d8e33fa69aebd507d07fd3ae36ff6d62f9d2f679ab56f49403a55c879331472d45a126d686450"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x0, 0x4, 0x7, [@generic={0x56, 0xc, "977d7912ddaaf7918120826a309f1a9a021feb46932633468469edc75cb9e06ed3dc1af5f69c89717c254afcc7f32e33cd75dd21e30e9e78b944c69dc69a609c0898adb435018689ad9ff88fd5c2fff22c76e329"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x80, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0xfff}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x9, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x7ff}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x3, 0x3, 0x20, [@generic={0xba, 0x21, "352fd907da1c931eefd25824dc4173a1472d3ee4fbddbb66357cb11f112803bf43461911aca36bee237d3e3f7bee5d8853ad0ab7bca34d6d129b651d10109c0644804f88637d95daf360ecb95416293aecd0e0ce420a913c3e57818c8a59d6cfb06d77ece2d53f2c12a51b87f1c91ce458e5a4bf59a36b75d02cecc51e8a0a4f3308cb4df9c96545c10db50c00d639365e35372f8f3e8aa1055721ca24b7fded3e7f2230494ed5cde5dcd2b91c5617874250cb39e99d9ac5"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x8, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0xd, 0x12, 0x8, 0xfc, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x81, 0x3, [@generic={0x49, 0x21, "e276ebfd3e44940f92d71f9eb4768f5a951851a9854800fd6d914ef0f297cfa040b6bcbb11892f7f7b38619a5e6ac34eb7eb258bf73a5d8be0b88d2a3b7a9cf2803f4ece33896a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x6, 0xf0, 0x1, [@generic={0x43, 0x6, "af34f685ccc0724a3abd12e9c50dd34b0e67d14a82e6f80d83f729e7225e93700025cdf242b0a964509e351af0ac07f62777a4f7bda601778958ebbba0f7221c4c"}, @generic={0xd7, 0x31, "74924dc5da049bbc2a5ebd28e2192e7c4ace86051d09b704f571f57dfcc8e24b07aa0707f9ec89c5a4c396f87e5c6e21a8bd672292e777a493c8a956cd48e91c69b3a233915b1764e4c2cf7c2731e719a5f452486760bc0e451361cd407695dad097687051067867cbf35a8a38507f862637671126705191370ca87c43aba5df3950c8aa6dd9c0b44769227ff2055837275d586d9c7cbfd1ab8a03006f151a422e1f43be8516a996e530226ede493df9076d8da96ecf2635e0424c45060fed1abfb00a9437369db694d8b6df702be81b66aad70850"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x23, 0x1, 0x16, [@generic={0x68, 0x0, "d5400c7ccf5c662aa5d7f60fa95f9c13740f157ad6c03177a02ee472894341e70b781e2c18afd694adbda5caebb293745cf0de048fbd7ff82e7e81e0ede90a5abeb81b964d4e76d3133a1544967398a72100a6605b33d2c6389b5dce4382771b9ccb64cefe23"}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x0, 0x1, 0x1, 0x10, 0x2}, 0x53, &(0x7f0000000580)={0x5, 0xf, 0x53, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xdc, "a3776bfded7bba0b03b0d37692f92b9e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x80, 0x1, 0x0, 0xf, 0x61, [0xc00f]}, @ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x0, 0xf000, 0x8478, [0x3f0f, 0xff0000, 0xc0, 0x6000, 0xf]}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4}}]}) (async) syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x0, 0x6, 0x53, {0x53, 0x22, "f299e8da867708648d021864b9931fa63931730a5c3290deadbe200111e47ed0c5208c13a0f88a6de035447fe5924a49f1546fd55cbbe4abae0ffb0a3ea6e75844a5bb5b9535306cb3cd445d92c2b426f5"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000740)={0x0, 0xf, 0x2c, {0x5, 0xf, 0x2c, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0xa5, 0x2, 0x3, 0xff00, 0x7ff, [0xc030, 0x3f00]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x3, 0x187}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x0, 0x2, "4a44d10d", "f2a4f970"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x1, 0x2, 0x7f, 0x4, 0x3}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x20, 0xf, 0x65, "b0a31ae4016d7c083847e6acfdeef2d890847badaeff624324e088f085d1de096a1906912df222cd367be8a4b048654e7185293bcc55ecad63acfe4220de9f12159f486e771f0affd90fce64675073243c3c821f3bc6718660f3df102af908432cfd172e63"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x140, 0x80, [0x8800]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "5eb7"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000ac0)={0x40, 0x13, 0x6}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b40)={0x40, 0x19, 0x2, '2{'}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x53}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 03:14:53 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x6e, 0xfffffdef, 0x0, 0x0, 0x0) 03:14:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x1f00000000000000, 0x0, 0x0) 03:14:53 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x70000000000000, 0x0, 0x0) 03:14:53 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 15) 03:14:53 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x6f, &(0x7f0000000e80)={{0x12, 0x1, 0x0, 0x52, 0x60, 0x7a, 0x0, 0x411, 0x3d, 0x259b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0xc9, 0x19, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @ncm={0x6}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffa4, &(0x7f0000000e00)="d3fea750fea47972a057e068ef15bde6f953683b2500ff6ac825f96b91fb5c9998b6ca3ef002de5a64a3ccd83e07c1261f457b0e989fd44ef214502b6c24e8ed0d") syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x5, 0x60c, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0xe5, 0x90, 0x29, 0x40, 0x79b, 0x4a, 0x63ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5fa, 0x2, 0x20, 0x0, 0x80, 0x40, [{{0x9, 0x4, 0xe2, 0x0, 0x7, 0x5f, 0x4f, 0x51, 0x3, [@generic={0x8f, 0x7, "d137f6c8292b2a39f7cb44aba250d00b703188b2459e4e34e5c2be2daadff0bd5252dbf12c6d6a3b577a788fe9a57a852cd329c91e80491b90534a17946bb5e991faa7d18a36caf496414fa9ab3d677f5d3f86ebcd2e648d8db438b56ad46291b7b69ecd9d4c03d8a55173e287f8313dac69acec6f77bc6a31725936aa00ca94f739622e177d3231b3ac02f2dc"}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x76}, [@extension_unit={0xb, 0x24, 0x8, 0x6, 0x2, 0x6, "3edbfa7a"}]}], [{{0x9, 0x5, 0xa, 0x7, 0x0, 0x1, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @generic={0x7d, 0x24, "a4670a932508a677304d9efb388e752898274cb3805223c987dab368803940478e878ec99758a8aec7abec58da69fa02e5205baa798f355529379cf478c9137d69a05931b3c1831f880fec2980d6c3b6dc303fd2489472c91724769f5cf4ed4978d3da97b4376e8a507e068a36708f4d2c3d34976a1932b4ebb0ac"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x5, 0x2, [@generic={0xf2, 0x1a, "2c8b8b82b12ee65e6ef5a83629b72f5ae79d99aee94a1f53e0bb70ed5a8b792b8a4b314d359b0bdddaf6713c1a0d1361aff85ce291751db8057bf6c7c2cbcdfc6a9a7bd5e34a99d044d7839570c255a4ffcf428cdaeedd3c1bbabee43dae407c71c01532dac60f47fb374e4e54479c6687375ae0d5484b9d88d4f0cd6c49325b4afb3bad917e8de5d6c51a85ef51af457991ab9cfada1a74c39a93c37b92250958be9ba532ef6fde82d880de570c75a04faf4b9c3497f2b02bdf8816478f8488005a76346df19a4f1a3fc9871e26404418863a04077afa8207b8cfd4bfc432eefb62414a0aef063d8b9d3d1dd1a191d4"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0xea00}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x7, 0x0, 0xe8, [@generic={0x50, 0x9, "48748ac766e8f8843e86bbe5a35cac256d571b339374f9f47f7afe5c77f877a7a2a81b0531057c263cac77fa8de587bd197dbe01b85fe9a55e78cd02044871b5c18a60a9fc26dc743b14e602032a"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xff, 0x81, 0xf8, [@generic={0x9, 0x8, "18d428091628ab"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x8, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfff7}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x0, 0x7f, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}]}}, {{0x9, 0x4, 0xc4, 0x9, 0xa, 0xc6, 0xb0, 0x65, 0x39, [@uac_control={{0xa, 0x24, 0x1, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x3, 0x4, 0xee}]}], [{{0x9, 0x5, 0x7, 0x10, 0x50cab695bbdd59b9, 0x1, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xea, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x4, 0x80, [@generic={0xc3, 0xc, "2e3e188bdaa313d220675a7ef22760b94cd9bdcc43e8816da59d5cfcae3c4b341a24660f12aa7bb3e2bf5d10db929a5113f0a5d9646c7940436a5a0b2689d6de1abddaa8c318419db7c2ae245f74b20b9015204dbcb64a80ee891756b5f0dcbc47c02a283ab64c25bee561891f4296f48a49af56c9a11763adfffbd1cd759eded9e96be21a25f90119adb1812c52823c53c858b384e969619bd612028f13c0527fbaf1327d02a791eddf451b2c70559629ceac2cf11d63e7b9dd9a737591cfaf9f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x5, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x5, 0x0, 0x81, [@generic={0xc, 0x21, "f1b53024b85273df9f93"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x40, 0xfe, 0x80, [@generic={0x53, 0x10, "866f5cf36e2491ef42e4453396986d4ac52efbe44f65ce33e6f452cb6dbab4765820a37425b9520272fcf0f082ce3a2e349d834d345bedc7e75e69e4ef549d89fdc80eaefdde8fe3a6020745340333b4c0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xe8, 0x9, 0x2, [@generic={0x44, 0xa, "f6770d57f61949e34483cf8753411a3030a662b4cb91dfceb309a27986a2f1fbc0f78b47df23e93108496ecac86097264b384bcfa0e8abd2d0820009e28be15158a6"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x1f, 0x1, [@generic={0xab, 0x22, "7c4a760dd69c76523449a257adc99331ca1dcb499d5ddf7d8857f8cead00c386f48414a8d938c190a38d49094dd321000462845427716aac0f272eb4043d0aa6c2dc372f837ff29af506fc47209d73d469fb360f77cd43a84c605c69c211a48840c30d241276aaa18f2281268c0b603821288361096ea403f4bfbd90b5f2bdcb1653f758c75736b6caf2d32d8a62a0b16d4a054d8cbdbcc429d3430fb2a6a1841fe3e7f3bcff46add8"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0xd2, 0x3, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x9}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x40, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0xe7, 0x9}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x1, 0x2, 0x4, [@generic={0x20, 0xb, "85218d3f0e246fa52fa5fa0a3d61bbf59833b6712c510194ee9a1c2517a7"}, @generic={0x4b, 0x21, "3291d0941596a8f2f8b18849275555fdffb8ebc7faa25c26fb3e2a08965f8de101bbc155e270bea08e30b8b519551149e0db3f086d1842e183e6a517bd8187ee8130bfa374ad009873"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x5, 0x8, 0x8, 0x8, 0x53}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5e, "e782edad47f12e1cbf12879630917be1"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "7303c8481e772c272f3f72490c552189"}]}, 0x1, [{0x4d, &(0x7f0000000240)=@string={0x4d, 0x3, "13e41adebd5984f2ab57af730505c651092e6542aadd5237e39937edb211d30b0740b718f29d48c2129559cc43dc656a2f240dab0a4ef46b2719b554cfc3e4edd7b7a0704c7143a89a4038"}}]}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) [ 1273.661342][ T3683] usb 4-1: USB disconnect, device number 68 [ 1273.701142][ T6986] UDC core: couldn't find an available UDC or it's busy: -16 [ 1273.713905][ T3683] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 1273.749231][ T3683] ================================================================== 03:14:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000000000000000, 0x0, 0x0) [ 1273.757319][ T3683] BUG: KASAN: use-after-free in __lock_acquire+0x3f2f/0x56c0 [ 1273.758863][ T6986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1273.764814][ T3683] Read of size 8 at addr ffff88807a07ecf0 by task kworker/1:6/3683 [ 1273.780154][ T3683] [ 1273.782481][ T3683] CPU: 1 PID: 3683 Comm: kworker/1:6 Not tainted 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1273.792658][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.802730][ T3683] Workqueue: usb_hub_wq hub_event [ 1273.807873][ T3683] Call Trace: [ 1273.811161][ T3683] [ 1273.814098][ T3683] dump_stack_lvl+0xcd/0x134 [ 1273.818708][ T3683] print_address_description.constprop.0.cold+0x8d/0x303 [ 1273.825760][ T3683] ? __lock_acquire+0x3f2f/0x56c0 [ 1273.830801][ T3683] ? __lock_acquire+0x3f2f/0x56c0 [ 1273.835847][ T3683] kasan_report.cold+0x83/0xdf [ 1273.840637][ T3683] ? __lock_acquire+0x3f2f/0x56c0 [ 1273.845714][ T3683] __lock_acquire+0x3f2f/0x56c0 [ 1273.850589][ T3683] ? check_path.constprop.0+0x24/0x50 [ 1273.855981][ T3683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1273.861989][ T3683] ? mark_lock.part.0+0xee/0x1910 [ 1273.867042][ T3683] lock_acquire+0x1ab/0x510 [ 1273.871568][ T3683] ? cdc_ncm_tx_fixup+0x8f/0x120 [ 1273.876611][ T3683] ? lock_release+0x720/0x720 [ 1273.881314][ T3683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1273.887336][ T3683] _raw_spin_lock_bh+0x2f/0x40 [ 1273.892123][ T3683] ? cdc_ncm_tx_fixup+0x8f/0x120 [ 1273.897086][ T3683] cdc_ncm_tx_fixup+0x8f/0x120 [ 1273.901870][ T3683] ? cdc_ncm_fill_tx_frame+0x3890/0x3890 [ 1273.907657][ T3683] usbnet_start_xmit+0x152/0x1f70 03:14:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x3334000000000000, 0x0, 0x0) 03:14:53 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x6f, 0xfffffdef, 0x0, 0x0, 0x0) [ 1273.912708][ T3683] dev_hard_start_xmit+0x1eb/0x920 [ 1273.917923][ T3683] sch_direct_xmit+0x19f/0xbe0 [ 1273.922774][ T3683] ? lock_release+0x720/0x720 [ 1273.927489][ T3683] ? __stack_depot_save+0x35/0x500 [ 1273.932686][ T3683] ? pfifo_fast_dequeue+0xae0/0xae0 [ 1273.937890][ T3683] ? do_raw_spin_trylock+0xb0/0x180 [ 1273.943105][ T3683] ? do_raw_spin_lock+0x240/0x2b0 [ 1273.948144][ T3683] __dev_queue_xmit+0x148f/0x37b0 [ 1273.953183][ T3683] ? unregister_netdevice_queue+0x2dd/0x3c0 [ 1273.959087][ T3683] ? unregister_netdev+0x18/0x20 [ 1273.963270][ T2336] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1273.964037][ T3683] ? usbnet_disconnect+0x139/0x270 [ 1273.976679][ T3683] ? usb_unbind_interface+0x1d8/0x8e0 [ 1273.982080][ T3683] ? __device_release_driver+0x627/0x760 [ 1273.987809][ T3683] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1273.993117][ T3683] ? usb_disable_device+0x35b/0x7b0 [ 1273.993710][ T3684] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1273.998346][ T3683] ? usb_disconnect.cold+0x27a/0x78e 03:14:54 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x100000000000000, 0x0, 0x0) [ 1274.011311][ T3683] ? hub_event+0x1e39/0x44d0 [ 1274.015933][ T3683] ? process_one_work+0x8b0/0x1650 [ 1274.021063][ T3683] ? worker_thread+0x657/0x1110 [ 1274.025934][ T3683] ? ret_from_fork+0x1f/0x30 [ 1274.030582][ T3683] ? memcpy+0x39/0x60 [ 1274.034584][ T3683] ? eth_header+0x15e/0x1e0 [ 1274.039176][ T3683] ? ether_setup+0x2c0/0x2c0 [ 1274.043795][ T3683] ? lapbeth_data_indication+0x4a0/0x4a0 [ 1274.049523][ T3683] lapb_data_transmit+0x8f/0xc0 [ 1274.054509][ T3683] lapb_transmit_buffer+0x183/0x390 [ 1274.059726][ T3683] lapb_send_control+0x1c7/0x370 03:14:54 executing program 1: open(&(0x7f0000000080)='./file0\x00', 0x842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) openat$damon_schemes(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/9, 0x9}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x70, 0xfffffdef, 0x0, 0x0, 0x0) [ 1274.064681][ T3683] __lapb_disconnect_request+0x127/0x1a0 [ 1274.070334][ T3683] lapb_device_event+0x292/0x560 [ 1274.075315][ T3683] notifier_call_chain+0xb5/0x200 [ 1274.080352][ T3683] call_netdevice_notifiers_info+0xb5/0x130 [ 1274.086269][ T3683] __dev_close_many+0xf1/0x2e0 [ 1274.091052][ T3683] ? __netif_schedule+0x2f0/0x2f0 [ 1274.096097][ T3683] ? lock_chain_count+0x20/0x20 [ 1274.101139][ T3683] dev_close_many+0x22c/0x620 [ 1274.105841][ T3683] ? __netdev_adjacent_dev_insert+0xab0/0xab0 [ 1274.111930][ T3683] ? pppoe_device_event+0x298/0x970 [ 1274.117193][ T3683] dev_close+0x16d/0x210 [ 1274.121469][ T3683] ? netdev_name_node_alt_create+0x460/0x460 [ 1274.127482][ T3683] ? lockdep_hardirqs_on+0x79/0x100 [ 1274.132697][ T3683] ? pppoe_device_event+0x298/0x970 [ 1274.137922][ T3683] ? __local_bh_enable_ip+0xa0/0x120 [ 1274.143233][ T3683] lapbeth_device_event+0x677/0xc00 [ 1274.148462][ T3683] ? hdlc_device_event+0x67/0x200 [ 1274.153509][ T3683] notifier_call_chain+0xb5/0x200 [ 1274.158931][ T3683] call_netdevice_notifiers_info+0xb5/0x130 03:14:54 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0x0, {}, 0x0, 0x0, 0x0, {0x0, 0x0, r3}}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x200000000000000, 0x0, 0x0) [ 1274.164857][ T3683] __dev_close_many+0xf1/0x2e0 [ 1274.169817][ T3683] ? __netif_schedule+0x2f0/0x2f0 [ 1274.174862][ T3683] ? kasan_save_stack+0x2e/0x40 [ 1274.179732][ T3683] ? kasan_set_free_info+0x20/0x30 [ 1274.184867][ T3683] dev_close_many+0x22c/0x620 [ 1274.189564][ T3683] ? __netdev_adjacent_dev_insert+0xab0/0xab0 [ 1274.195647][ T3683] ? lock_release+0x720/0x720 [ 1274.200346][ T3683] ? lock_chain_count+0x20/0x20 [ 1274.205217][ T3683] unregister_netdevice_many+0x3ff/0x18d0 [ 1274.210958][ T3683] ? __mutex_lock+0x21a/0x12f0 [ 1274.215746][ T3683] ? netdev_pick_tx+0xbe0/0xbe0 [ 1274.220616][ T3683] ? unregister_netdev+0xe/0x20 [ 1274.225491][ T3683] ? mutex_lock_io_nested+0x1150/0x1150 [ 1274.231062][ T3683] unregister_netdevice_queue+0x2dd/0x3c0 [ 1274.236811][ T3683] ? unregister_netdevice_many+0x18d0/0x18d0 [ 1274.242824][ T3683] ? cdc_ncm_free+0x145/0x1a0 [ 1274.247582][ T3683] ? cdc_ncm_free+0x1a0/0x1a0 [ 1274.252280][ T3683] unregister_netdev+0x18/0x20 [ 1274.257071][ T3683] usbnet_disconnect+0x139/0x270 [ 1274.262028][ T3683] usb_unbind_interface+0x1d8/0x8e0 [ 1274.267257][ T3683] ? usb_unbind_device+0x1a0/0x1a0 [ 1274.272402][ T3683] __device_release_driver+0x627/0x760 [ 1274.277895][ T3683] device_release_driver+0x26/0x40 [ 1274.283030][ T3683] bus_remove_device+0x2eb/0x5a0 [ 1274.288008][ T3683] device_del+0x4f3/0xc80 [ 1274.292530][ T3683] ? __device_link_del+0x380/0x380 [ 1274.297665][ T3683] ? kobject_put+0x1f3/0x540 [ 1274.298066][ T6996] UDC core: couldn't find an available UDC or it's busy: -16 [ 1274.302273][ T3683] usb_disable_device+0x35b/0x7b0 [ 1274.310869][ T6996] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1274.314634][ T3683] usb_disconnect.cold+0x27a/0x78e [ 1274.327168][ T3683] hub_event+0x1e39/0x44d0 [ 1274.331702][ T3683] ? hub_port_debounce+0x3c0/0x3c0 [ 1274.336831][ T3683] ? lock_release+0x720/0x720 [ 1274.341541][ T3683] ? lock_downgrade+0x6e0/0x6e0 [ 1274.343737][ T2336] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.346410][ T3683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1274.346454][ T3683] process_one_work+0x9ac/0x1650 [ 1274.368197][ T3683] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1274.373589][ T3683] ? rwlock_bug.part.0+0x90/0x90 [ 1274.378543][ T3683] ? _raw_spin_lock_irq+0x41/0x50 [ 1274.383572][ T3683] worker_thread+0x657/0x1110 [ 1274.388267][ T3683] ? process_one_work+0x1650/0x1650 [ 1274.393200][ T3684] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.393479][ T3683] kthread+0x2e9/0x3a0 [ 1274.393511][ T3683] ? kthread_complete_and_exit+0x40/0x40 [ 1274.393542][ T3683] ret_from_fork+0x1f/0x30 [ 1274.410806][ T3684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1274.414064][ T3683] [ 1274.414077][ T3683] [ 1274.414082][ T3683] Allocated by task 3682: [ 1274.414092][ T3683] kasan_save_stack+0x1e/0x40 [ 1274.414123][ T3683] __kasan_kmalloc+0xa6/0xd0 [ 1274.414144][ T3683] kmem_cache_alloc_trace+0x1ea/0x4a0 [ 1274.414165][ T3683] cdc_ncm_bind_common+0xb8/0x2df0 [ 1274.414191][ T3683] cdc_ncm_bind+0x7c/0x1c0 [ 1274.414215][ T3683] usbnet_probe+0xaf8/0x2580 [ 1274.414236][ T3683] usb_probe_interface+0x315/0x7f0 [ 1274.414263][ T3683] really_probe+0x245/0xcc0 [ 1274.425832][ T3684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1274.428364][ T3683] __driver_probe_device+0x338/0x4d0 [ 1274.428395][ T3683] driver_probe_device+0x4c/0x1a0 [ 1274.428420][ T3683] __device_attach_driver+0x20b/0x2f0 [ 1274.428445][ T3683] bus_for_each_drv+0x15f/0x1e0 [ 1274.428467][ T3683] __device_attach+0x228/0x4a0 [ 1274.436029][ T3684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1274.438126][ T3683] bus_probe_device+0x1e4/0x290 [ 1274.438156][ T3683] device_add+0xb83/0x1e20 [ 1274.438176][ T3683] usb_set_configuration+0x101e/0x1900 [ 1274.438206][ T3683] usb_generic_driver_probe+0xba/0x100 [ 1274.455551][ T3684] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1274.457998][ T3683] usb_probe_device+0xd9/0x2c0 [ 1274.458032][ T3683] really_probe+0x245/0xcc0 [ 1274.458057][ T3683] __driver_probe_device+0x338/0x4d0 [ 1274.523384][ T2336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.526314][ T3683] driver_probe_device+0x4c/0x1a0 [ 1274.526349][ T3683] __device_attach_driver+0x20b/0x2f0 [ 1274.526373][ T3683] bus_for_each_drv+0x15f/0x1e0 [ 1274.531236][ T2336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.536220][ T3683] __device_attach+0x228/0x4a0 [ 1274.536246][ T3683] bus_probe_device+0x1e4/0x290 [ 1274.536270][ T3683] device_add+0xb83/0x1e20 [ 1274.536291][ T3683] usb_new_device.cold+0x63f/0x108e [ 1274.536316][ T3683] hub_event+0x2585/0x44d0 [ 1274.536337][ T3683] process_one_work+0x9ac/0x1650 [ 1274.536357][ T3683] worker_thread+0x657/0x1110 [ 1274.536378][ T3683] kthread+0x2e9/0x3a0 [ 1274.536399][ T3683] ret_from_fork+0x1f/0x30 [ 1274.536423][ T3683] [ 1274.536429][ T3683] Freed by task 3683: [ 1274.536440][ T3683] kasan_save_stack+0x1e/0x40 [ 1274.536464][ T3683] kasan_set_track+0x21/0x30 [ 1274.536486][ T3683] kasan_set_free_info+0x20/0x30 [ 1274.536510][ T3683] ____kasan_slab_free+0xff/0x140 [ 1274.547504][ T2336] usb 1-1: Product: syz [ 1274.551739][ T3683] kfree+0xf8/0x2b0 [ 1274.551766][ T3683] cdc_ncm_free+0x145/0x1a0 [ 1274.551794][ T3683] cdc_ncm_unbind+0x1a7/0x340 [ 1274.551819][ T3683] usbnet_disconnect+0x103/0x270 [ 1274.568353][ T2336] usb 1-1: Manufacturer: syz [ 1274.575425][ T3683] usb_unbind_interface+0x1d8/0x8e0 [ 1274.575460][ T3683] __device_release_driver+0x627/0x760 [ 1274.575487][ T3683] device_release_driver+0x26/0x40 [ 1274.575508][ T3683] bus_remove_device+0x2eb/0x5a0 [ 1274.575529][ T3683] device_del+0x4f3/0xc80 [ 1274.575556][ T3683] usb_disable_device+0x35b/0x7b0 [ 1274.575581][ T3683] usb_disconnect.cold+0x27a/0x78e [ 1274.575602][ T3683] hub_event+0x1e39/0x44d0 [ 1274.575624][ T3683] process_one_work+0x9ac/0x1650 [ 1274.575645][ T3683] worker_thread+0x657/0x1110 [ 1274.590061][ T2336] usb 1-1: SerialNumber: syz [ 1274.590967][ T3683] kthread+0x2e9/0x3a0 [ 1274.591000][ T3683] ret_from_fork+0x1f/0x30 [ 1274.623469][ T3684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.627485][ T3683] [ 1274.627493][ T3683] Last potentially related work creation: [ 1274.627500][ T3683] kasan_save_stack+0x1e/0x40 [ 1274.627530][ T3683] __kasan_record_aux_stack+0x7e/0x90 [ 1274.627558][ T3683] insert_work+0x48/0x370 [ 1274.627577][ T3683] __queue_work+0x5ca/0xf30 [ 1274.627597][ T3683] call_timer_fn+0x1a5/0x6b0 [ 1274.633142][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.636571][ T3683] __run_timers.part.0+0x4a6/0xa30 [ 1274.636599][ T3683] run_timer_softirq+0xb3/0x1d0 [ 1274.636622][ T3683] __do_softirq+0x29b/0x9c2 [ 1274.636649][ T3683] [ 1274.636655][ T3683] Second to last potentially related work creation: [ 1274.667299][ T3684] usb 3-1: Product: syz [ 1274.670797][ T3683] kasan_save_stack+0x1e/0x40 [ 1274.670824][ T3683] __kasan_record_aux_stack+0x7e/0x90 [ 1274.670850][ T3683] insert_work+0x48/0x370 [ 1274.670871][ T3683] __queue_work+0x5ca/0xf30 [ 1274.670892][ T3683] call_timer_fn+0x1a5/0x6b0 [ 1274.670914][ T3683] __run_timers.part.0+0x4a6/0xa30 [ 1274.681449][ T3684] usb 3-1: Manufacturer: syz [ 1274.683882][ T3683] run_timer_softirq+0xb3/0x1d0 [ 1274.683913][ T3683] __do_softirq+0x29b/0x9c2 [ 1274.683940][ T3683] [ 1274.683946][ T3683] The buggy address belongs to the object at ffff88807a07ec00 [ 1274.683946][ T3683] which belongs to the cache kmalloc-512 of size 512 [ 1274.683966][ T3683] The buggy address is located 240 bytes inside of [ 1274.683966][ T3683] 512-byte region [ffff88807a07ec00, ffff88807a07ee00) [ 1274.683986][ T3683] The buggy address belongs to the page: [ 1274.683996][ T3683] page:ffffea0001e81f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a07e [ 1274.684019][ T3683] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1274.684049][ T3683] raw: 00fff00000000200 ffffea00007e2308 ffffea0001fc1f88 ffff888010c40600 [ 1274.684072][ T3683] raw: 0000000000000000 ffff88807a07e000 0000000100000004 0000000000000000 [ 1274.684085][ T3683] page dumped because: kasan: bad access detected [ 1274.684096][ T3683] page_owner tracks the page as allocated [ 1274.684103][ T3683] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2c2220(__GFP_HIGH|__GFP_ATOMIC|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_THISNODE), pid 3597, ts 121172744683, free_ts 121087949537 [ 1274.684137][ T3683] get_page_from_freelist+0xa72/0x2f50 [ 1274.707051][ T3684] usb 3-1: SerialNumber: syz [ 1274.709449][ T3683] __alloc_pages+0x1b2/0x500 [ 1274.709479][ T3683] cache_grow_begin+0x75/0x390 [ 1274.709503][ T3683] cache_alloc_refill+0x27f/0x380 [ 1274.709527][ T3683] kmem_cache_alloc_node_trace+0x49c/0x5b0 [ 1274.933415][ T2336] cdc_ncm 1-1:1.0: bind() failure [ 1274.936119][ T3683] __kmalloc_node_track_caller+0x38/0x60 [ 1274.962065][ T2336] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1274.976920][ T3683] __alloc_skb+0xde/0x340 [ 1274.977024][ T3683] __napi_alloc_skb+0x70/0x310 [ 1274.977049][ T3683] page_to_skb+0x188/0xd80 [ 1274.977098][ T3683] receive_buf+0xd22/0x5cd0 [ 1274.977119][ T3683] virtnet_poll+0x5cd/0x11a0 [ 1274.977140][ T3683] __napi_poll+0xb3/0x6e0 [ 1274.992088][ T2336] cdc_ncm 1-1:1.1: bind() failure [ 1274.996649][ T3683] net_rx_action+0x801/0xb40 [ 1274.996679][ T3683] __do_softirq+0x29b/0x9c2 [ 1274.996704][ T3683] page last free stack trace: [ 1274.996711][ T3683] free_pcp_prepare+0x374/0x870 [ 1274.996739][ T3683] free_unref_page+0x19/0x690 [ 1274.996761][ T3683] slabs_destroy+0x89/0xc0 [ 1274.996788][ T3683] ___cache_free+0x303/0x600 [ 1274.996808][ T3683] qlist_free_all+0x50/0x1a0 [ 1274.996832][ T3683] kasan_quarantine_reduce+0x180/0x200 [ 1275.033155][ T2336] usb 1-1: USB disconnect, device number 94 [ 1275.034059][ T3683] __kasan_slab_alloc+0x97/0xb0 [ 1275.034092][ T3683] kmem_cache_alloc_node+0x2ea/0x590 [ 1275.034116][ T3683] __alloc_skb+0x215/0x340 [ 1275.119922][ T3683] tcp_stream_alloc_skb+0x66/0x910 [ 1275.125080][ T3683] tcp_sendmsg_locked+0xac8/0x2e20 [ 1275.130202][ T3683] tcp_sendmsg+0x2b/0x40 [ 1275.134440][ T3683] inet_sendmsg+0x99/0xe0 [ 1275.138844][ T3683] sock_sendmsg+0xcf/0x120 [ 1275.143302][ T3683] sock_write_iter+0x289/0x3c0 [ 1275.148081][ T3683] new_sync_write+0x431/0x660 [ 1275.152786][ T3683] [ 1275.155106][ T3683] Memory state around the buggy address: [ 1275.160738][ T3683] ffff88807a07eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1275.168819][ T3683] ffff88807a07ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1275.176981][ T3683] >ffff88807a07ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1275.185051][ T3683] ^ [ 1275.187995][ T6987] FAULT_INJECTION: forcing a failure. [ 1275.187995][ T6987] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.192778][ T3683] ffff88807a07ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1275.192797][ T3683] ffff88807a07ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1275.192808][ T3683] ================================================================== [ 1275.192817][ T3683] Disabling lock debugging due to kernel taint [ 1275.192825][ T3683] Kernel panic - not syncing: panic_on_warn set ... [ 1275.192836][ T3683] CPU: 1 PID: 3683 Comm: kworker/1:6 Tainted: G B 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1275.253739][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.263811][ T3683] Workqueue: usb_hub_wq hub_event [ 1275.268898][ T3683] Call Trace: [ 1275.272178][ T3683] [ 1275.275108][ T3683] dump_stack_lvl+0xcd/0x134 [ 1275.279718][ T3683] panic+0x2b0/0x6dd [ 1275.283708][ T3683] ? __warn_printk+0xf3/0xf3 [ 1275.288315][ T3683] ? __lock_acquire+0x3f2f/0x56c0 [ 1275.293349][ T3683] ? __lock_acquire+0x3f2f/0x56c0 [ 1275.298384][ T3683] ? __lock_acquire+0x3f2f/0x56c0 [ 1275.303502][ T3683] end_report.cold+0x63/0x6f [ 1275.308108][ T3683] kasan_report.cold+0x71/0xdf [ 1275.312880][ T3683] ? __lock_acquire+0x3f2f/0x56c0 [ 1275.317909][ T3683] __lock_acquire+0x3f2f/0x56c0 [ 1275.322765][ T3683] ? check_path.constprop.0+0x24/0x50 [ 1275.328142][ T3683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1275.334130][ T3683] ? mark_lock.part.0+0xee/0x1910 [ 1275.339159][ T3683] lock_acquire+0x1ab/0x510 [ 1275.343675][ T3683] ? cdc_ncm_tx_fixup+0x8f/0x120 [ 1275.348626][ T3683] ? lock_release+0x720/0x720 [ 1275.353395][ T3683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1275.359380][ T3683] _raw_spin_lock_bh+0x2f/0x40 [ 1275.364150][ T3683] ? cdc_ncm_tx_fixup+0x8f/0x120 [ 1275.369100][ T3683] cdc_ncm_tx_fixup+0x8f/0x120 [ 1275.373869][ T3683] ? cdc_ncm_fill_tx_frame+0x3890/0x3890 [ 1275.379510][ T3683] usbnet_start_xmit+0x152/0x1f70 [ 1275.384540][ T3683] dev_hard_start_xmit+0x1eb/0x920 [ 1275.389693][ T3683] sch_direct_xmit+0x19f/0xbe0 [ 1275.394510][ T3683] ? lock_release+0x720/0x720 [ 1275.399199][ T3683] ? __stack_depot_save+0x35/0x500 [ 1275.404597][ T3683] ? pfifo_fast_dequeue+0xae0/0xae0 [ 1275.409808][ T3683] ? do_raw_spin_trylock+0xb0/0x180 [ 1275.415399][ T3683] ? do_raw_spin_lock+0x240/0x2b0 [ 1275.420437][ T3683] __dev_queue_xmit+0x148f/0x37b0 [ 1275.425465][ T3683] ? unregister_netdevice_queue+0x2dd/0x3c0 [ 1275.431361][ T3683] ? unregister_netdev+0x18/0x20 [ 1275.436301][ T3683] ? usbnet_disconnect+0x139/0x270 [ 1275.441683][ T3683] ? usb_unbind_interface+0x1d8/0x8e0 [ 1275.447058][ T3683] ? __device_release_driver+0x627/0x760 [ 1275.452784][ T3683] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1275.458073][ T3683] ? usb_disable_device+0x35b/0x7b0 [ 1275.463277][ T3683] ? usb_disconnect.cold+0x27a/0x78e [ 1275.468570][ T3683] ? hub_event+0x1e39/0x44d0 [ 1275.473161][ T3683] ? process_one_work+0x8b0/0x1650 [ 1275.478274][ T3683] ? worker_thread+0x657/0x1110 [ 1275.483157][ T3683] ? ret_from_fork+0x1f/0x30 [ 1275.487779][ T3683] ? memcpy+0x39/0x60 [ 1275.491765][ T3683] ? eth_header+0x15e/0x1e0 [ 1275.496360][ T3683] ? ether_setup+0x2c0/0x2c0 [ 1275.500973][ T3683] ? lapbeth_data_indication+0x4a0/0x4a0 [ 1275.506611][ T3683] lapb_data_transmit+0x8f/0xc0 [ 1275.511469][ T3683] lapb_transmit_buffer+0x183/0x390 [ 1275.516670][ T3683] lapb_send_control+0x1c7/0x370 [ 1275.521612][ T3683] __lapb_disconnect_request+0x127/0x1a0 [ 1275.527256][ T3683] lapb_device_event+0x292/0x560 [ 1275.532207][ T3683] notifier_call_chain+0xb5/0x200 [ 1275.537232][ T3683] call_netdevice_notifiers_info+0xb5/0x130 [ 1275.543228][ T3683] __dev_close_many+0xf1/0x2e0 [ 1275.548001][ T3683] ? __netif_schedule+0x2f0/0x2f0 [ 1275.553199][ T3683] ? lock_chain_count+0x20/0x20 [ 1275.558054][ T3683] dev_close_many+0x22c/0x620 [ 1275.562751][ T3683] ? __netdev_adjacent_dev_insert+0xab0/0xab0 [ 1275.568817][ T3683] ? pppoe_device_event+0x298/0x970 [ 1275.574041][ T3683] dev_close+0x16d/0x210 [ 1275.578463][ T3683] ? netdev_name_node_alt_create+0x460/0x460 [ 1275.584538][ T3683] ? lockdep_hardirqs_on+0x79/0x100 [ 1275.589839][ T3683] ? pppoe_device_event+0x298/0x970 [ 1275.595137][ T3683] ? __local_bh_enable_ip+0xa0/0x120 [ 1275.600433][ T3683] lapbeth_device_event+0x677/0xc00 [ 1275.605649][ T3683] ? hdlc_device_event+0x67/0x200 [ 1275.610684][ T3683] notifier_call_chain+0xb5/0x200 [ 1275.615712][ T3683] call_netdevice_notifiers_info+0xb5/0x130 [ 1275.621621][ T3683] __dev_close_many+0xf1/0x2e0 [ 1275.626389][ T3683] ? __netif_schedule+0x2f0/0x2f0 [ 1275.631421][ T3683] ? kasan_save_stack+0x2e/0x40 [ 1275.636364][ T3683] ? kasan_set_free_info+0x20/0x30 [ 1275.641490][ T3683] dev_close_many+0x22c/0x620 [ 1275.646199][ T3683] ? __netdev_adjacent_dev_insert+0xab0/0xab0 [ 1275.652277][ T3683] ? lock_release+0x720/0x720 [ 1275.656974][ T3683] ? lock_chain_count+0x20/0x20 [ 1275.661834][ T3683] unregister_netdevice_many+0x3ff/0x18d0 [ 1275.667557][ T3683] ? __mutex_lock+0x21a/0x12f0 [ 1275.672328][ T3683] ? netdev_pick_tx+0xbe0/0xbe0 [ 1275.677183][ T3683] ? unregister_netdev+0xe/0x20 [ 1275.682040][ T3683] ? mutex_lock_io_nested+0x1150/0x1150 [ 1275.687596][ T3683] unregister_netdevice_queue+0x2dd/0x3c0 [ 1275.693349][ T3683] ? unregister_netdevice_many+0x18d0/0x18d0 [ 1275.699341][ T3683] ? cdc_ncm_free+0x145/0x1a0 [ 1275.704044][ T3683] ? cdc_ncm_free+0x1a0/0x1a0 [ 1275.708731][ T3683] unregister_netdev+0x18/0x20 [ 1275.713502][ T3683] usbnet_disconnect+0x139/0x270 [ 1275.718441][ T3683] usb_unbind_interface+0x1d8/0x8e0 [ 1275.723659][ T3683] ? usb_unbind_device+0x1a0/0x1a0 [ 1275.728787][ T3683] __device_release_driver+0x627/0x760 [ 1275.734282][ T3683] device_release_driver+0x26/0x40 [ 1275.739405][ T3683] bus_remove_device+0x2eb/0x5a0 [ 1275.744346][ T3683] device_del+0x4f3/0xc80 [ 1275.748689][ T3683] ? __device_link_del+0x380/0x380 [ 1275.753825][ T3683] ? kobject_put+0x1f3/0x540 [ 1275.758424][ T3683] usb_disable_device+0x35b/0x7b0 [ 1275.763458][ T3683] usb_disconnect.cold+0x27a/0x78e [ 1275.768582][ T3683] hub_event+0x1e39/0x44d0 [ 1275.773001][ T3683] ? hub_port_debounce+0x3c0/0x3c0 [ 1275.778113][ T3683] ? lock_release+0x720/0x720 [ 1275.782800][ T3683] ? lock_downgrade+0x6e0/0x6e0 [ 1275.787666][ T3683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1275.793669][ T3683] process_one_work+0x9ac/0x1650 [ 1275.798627][ T3683] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1275.804001][ T3683] ? rwlock_bug.part.0+0x90/0x90 [ 1275.808948][ T3683] ? _raw_spin_lock_irq+0x41/0x50 [ 1275.813985][ T3683] worker_thread+0x657/0x1110 [ 1275.818692][ T3683] ? process_one_work+0x1650/0x1650 [ 1275.823895][ T3683] kthread+0x2e9/0x3a0 [ 1275.827974][ T3683] ? kthread_complete_and_exit+0x40/0x40 [ 1275.833709][ T3683] ret_from_fork+0x1f/0x30 [ 1275.838136][ T3683] [ 1275.841148][ T6987] CPU: 0 PID: 6987 Comm: syz-executor.2 Tainted: G B 5.17.0-rc7-syzkaller-00020-gea4424be1688 #0 [ 1275.852968][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.863023][ T6987] Call Trace: [ 1275.866379][ T6987] [ 1275.869318][ T6987] dump_stack_lvl+0xcd/0x134 [ 1275.873920][ T6987] should_fail.cold+0x5/0xa [ 1275.878427][ T6987] should_failslab+0x5/0x10 [ 1275.882932][ T6987] __kmalloc+0x7b/0x4d0 [ 1275.887085][ T6987] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1275.892806][ T6987] tomoyo_realpath_from_path+0xc3/0x620 [ 1275.898353][ T6987] ? tomoyo_profile+0x42/0x50 [ 1275.903024][ T6987] tomoyo_path_number_perm+0x1d5/0x590 [ 1275.908482][ T6987] ? tomoyo_path_number_perm+0x18d/0x590 [ 1275.914113][ T6987] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1275.919928][ T6987] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1275.925912][ T6987] ? __context_tracking_exit+0xb8/0xe0 [ 1275.931370][ T6987] ? __fget_files+0x28c/0x470 [ 1275.936040][ T6987] security_file_ioctl+0x50/0xb0 [ 1275.940978][ T6987] __x64_sys_ioctl+0xb3/0x200 [ 1275.945650][ T6987] do_syscall_64+0x35/0xb0 [ 1275.950075][ T6987] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1275.955977][ T6987] RIP: 0033:0x7fd05c028e07 [ 1275.960390][ T6987] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 04 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1275.979993][ T6987] RSP: 002b:00007fd05a99c0d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.988403][ T6987] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fd05c028e07 [ 1275.996388][ T6987] RDX: 00007fd05a99c100 RSI: 00000000c0085504 RDI: 0000000000000003 [ 1276.004356][ T6987] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1276.012324][ T6987] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd05a99c108 [ 1276.020293][ T6987] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000001 [ 1276.028261][ T6987] [ 1276.031498][ T3683] Kernel Offset: disabled [ 1276.035932][ T3683] Rebooting in 86400 seconds..